ManagePermissions.php 76 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457
  1. <?php
  2. /**
  3. * ManagePermissions handles all possible permission stuff.
  4. *
  5. * Simple Machines Forum (SMF)
  6. *
  7. * @package SMF
  8. * @author Simple Machines http://www.simplemachines.org
  9. * @copyright 2013 Simple Machines and individual contributors
  10. * @license http://www.simplemachines.org/about/smf/license.php BSD
  11. *
  12. * @version 2.1 Alpha 1
  13. */
  14. if (!defined('SMF'))
  15. die('No direct access...');
  16. /**
  17. * Dispaches to the right function based on the given subaction.
  18. * Checks the permissions, based on the sub-action.
  19. * Called by ?action=managepermissions.
  20. *
  21. * @uses ManagePermissions language file.
  22. */
  23. function ModifyPermissions()
  24. {
  25. global $txt, $scripturl, $context;
  26. loadLanguage('ManagePermissions+ManageMembers');
  27. loadTemplate('ManagePermissions');
  28. // Format: 'sub-action' => array('function_to_call', 'permission_needed'),
  29. $subActions = array(
  30. 'board' => array('PermissionByBoard', 'manage_permissions'),
  31. 'index' => array('PermissionIndex', 'manage_permissions'),
  32. 'modify' => array('ModifyMembergroup', 'manage_permissions'),
  33. 'modify2' => array('ModifyMembergroup2', 'manage_permissions'),
  34. 'quick' => array('SetQuickGroups', 'manage_permissions'),
  35. 'quickboard' => array('SetQuickBoards', 'manage_permissions'),
  36. 'postmod' => array('ModifyPostModeration', 'manage_permissions', 'disabled' => !in_array('pm', $context['admin_features'])),
  37. 'profiles' => array('EditPermissionProfiles', 'manage_permissions'),
  38. 'settings' => array('GeneralPermissionSettings', 'admin_forum'),
  39. );
  40. call_integration_hook('integrate_manage_permissions', array(&$subActions));
  41. $_REQUEST['sa'] = isset($_REQUEST['sa']) && isset($subActions[$_REQUEST['sa']]) && empty($subActions[$_REQUEST['sa']]['disabled']) ? $_REQUEST['sa'] : (allowedTo('manage_permissions') ? 'index' : 'settings');
  42. isAllowedTo($subActions[$_REQUEST['sa']][1]);
  43. // Create the tabs for the template.
  44. $context[$context['admin_menu_name']]['tab_data'] = array(
  45. 'title' => $txt['permissions_title'],
  46. 'help' => 'permissions',
  47. 'description' => '',
  48. 'tabs' => array(
  49. 'index' => array(
  50. 'description' => $txt['permissions_groups'],
  51. ),
  52. 'board' => array(
  53. 'description' => $txt['permission_by_board_desc'],
  54. ),
  55. 'profiles' => array(
  56. 'description' => $txt['permissions_profiles_desc'],
  57. ),
  58. 'postmod' => array(
  59. 'description' => $txt['permissions_post_moderation_desc'],
  60. ),
  61. 'settings' => array(
  62. 'description' => $txt['permission_settings_desc'],
  63. ),
  64. ),
  65. );
  66. $subActions[$_REQUEST['sa']][0]();
  67. }
  68. /**
  69. * Sets up the permissions by membergroup index page.
  70. * Called by ?action=managepermissions
  71. * Creates an array of all the groups with the number of members and permissions.
  72. *
  73. * @uses ManagePermissions language file.
  74. * @uses ManagePermissions template file.
  75. * @uses ManageBoards template, permission_index sub-template.
  76. */
  77. function PermissionIndex()
  78. {
  79. global $txt, $scripturl, $context, $settings, $modSettings, $smcFunc;
  80. $context['page_title'] = $txt['permissions_title'];
  81. // Load all the permissions. We'll need them in the template.
  82. loadAllPermissions();
  83. // Also load profiles, we may want to reset.
  84. loadPermissionProfiles();
  85. // Are we going to show the advanced options?
  86. $context['show_advanced_options'] = empty($context['admin_preferences']['app']);
  87. // Determine the number of ungrouped members.
  88. $request = $smcFunc['db_query']('', '
  89. SELECT COUNT(*)
  90. FROM {db_prefix}members
  91. WHERE id_group = {int:regular_group}',
  92. array(
  93. 'regular_group' => 0,
  94. )
  95. );
  96. list ($num_members) = $smcFunc['db_fetch_row']($request);
  97. $smcFunc['db_free_result']($request);
  98. // Fill the context variable with 'Guests' and 'Regular Members'.
  99. $context['groups'] = array(
  100. -1 => array(
  101. 'id' => -1,
  102. 'name' => $txt['membergroups_guests'],
  103. 'num_members' => $txt['membergroups_guests_na'],
  104. 'allow_delete' => false,
  105. 'allow_modify' => true,
  106. 'can_search' => false,
  107. 'href' => '',
  108. 'link' => '',
  109. 'help' => 'membergroup_guests',
  110. 'is_post_group' => false,
  111. 'color' => '',
  112. 'icons' => '',
  113. 'children' => array(),
  114. 'num_permissions' => array(
  115. 'allowed' => 0,
  116. // Can't deny guest permissions!
  117. 'denied' => '(' . $txt['permissions_none'] . ')'
  118. ),
  119. 'access' => false
  120. ),
  121. 0 => array(
  122. 'id' => 0,
  123. 'name' => $txt['membergroups_members'],
  124. 'num_members' => $num_members,
  125. 'allow_delete' => false,
  126. 'allow_modify' => true,
  127. 'can_search' => false,
  128. 'href' => $scripturl . '?action=moderate;area=viewgroups;sa=members;group=0',
  129. 'help' => 'membergroup_regular_members',
  130. 'is_post_group' => false,
  131. 'color' => '',
  132. 'icons' => '',
  133. 'children' => array(),
  134. 'num_permissions' => array(
  135. 'allowed' => 0,
  136. 'denied' => 0
  137. ),
  138. 'access' => false
  139. ),
  140. );
  141. $postGroups = array();
  142. $normalGroups = array();
  143. // Query the database defined membergroups.
  144. $query = $smcFunc['db_query']('', '
  145. SELECT id_group, id_parent, group_name, min_posts, online_color, icons
  146. FROM {db_prefix}membergroups' . (empty($modSettings['permission_enable_postgroups']) ? '
  147. WHERE min_posts = {int:min_posts}' : '') . '
  148. ORDER BY id_parent = {int:not_inherited} DESC, min_posts, CASE WHEN id_group < {int:newbie_group} THEN id_group ELSE 4 END, group_name',
  149. array(
  150. 'min_posts' => -1,
  151. 'not_inherited' => -2,
  152. 'newbie_group' => 4,
  153. )
  154. );
  155. while ($row = $smcFunc['db_fetch_assoc']($query))
  156. {
  157. // If it's inherited, just add it as a child.
  158. if ($row['id_parent'] != -2)
  159. {
  160. if (isset($context['groups'][$row['id_parent']]))
  161. $context['groups'][$row['id_parent']]['children'][$row['id_group']] = $row['group_name'];
  162. continue;
  163. }
  164. $row['icons'] = explode('#', $row['icons']);
  165. $context['groups'][$row['id_group']] = array(
  166. 'id' => $row['id_group'],
  167. 'name' => $row['group_name'],
  168. 'num_members' => $row['id_group'] != 3 ? 0 : $txt['membergroups_guests_na'],
  169. 'allow_delete' => $row['id_group'] > 4,
  170. 'allow_modify' => $row['id_group'] > 1,
  171. 'can_search' => $row['id_group'] != 3,
  172. 'href' => $scripturl . '?action=moderate;area=viewgroups;sa=members;group=' . $row['id_group'],
  173. 'help' => $row['id_group'] == 1 ? 'membergroup_administrator' : ($row['id_group'] == 3 ? 'membergroup_moderator' : ''),
  174. 'is_post_group' => $row['min_posts'] != -1,
  175. 'color' => empty($row['online_color']) ? '' : $row['online_color'],
  176. 'icons' => !empty($row['icons'][0]) && !empty($row['icons'][1]) ? str_repeat('<img src="' . $settings['images_url'] . '/' . $row['icons'][1] . '" alt="*" />', $row['icons'][0]) : '',
  177. 'children' => array(),
  178. 'num_permissions' => array(
  179. 'allowed' => $row['id_group'] == 1 ? '(' . $txt['permissions_all'] . ')' : 0,
  180. 'denied' => $row['id_group'] == 1 ? '(' . $txt['permissions_none'] . ')' : 0
  181. ),
  182. 'access' => false,
  183. );
  184. if ($row['min_posts'] == -1)
  185. $normalGroups[$row['id_group']] = $row['id_group'];
  186. else
  187. $postGroups[$row['id_group']] = $row['id_group'];
  188. }
  189. $smcFunc['db_free_result']($query);
  190. // Get the number of members in this post group.
  191. if (!empty($postGroups))
  192. {
  193. $query = $smcFunc['db_query']('', '
  194. SELECT id_post_group AS id_group, COUNT(*) AS num_members
  195. FROM {db_prefix}members
  196. WHERE id_post_group IN ({array_int:post_group_list})
  197. GROUP BY id_post_group',
  198. array(
  199. 'post_group_list' => $postGroups,
  200. )
  201. );
  202. while ($row = $smcFunc['db_fetch_assoc']($query))
  203. $context['groups'][$row['id_group']]['num_members'] += $row['num_members'];
  204. $smcFunc['db_free_result']($query);
  205. }
  206. if (!empty($normalGroups))
  207. {
  208. // First, the easy one!
  209. $query = $smcFunc['db_query']('', '
  210. SELECT id_group, COUNT(*) AS num_members
  211. FROM {db_prefix}members
  212. WHERE id_group IN ({array_int:normal_group_list})
  213. GROUP BY id_group',
  214. array(
  215. 'normal_group_list' => $normalGroups,
  216. )
  217. );
  218. while ($row = $smcFunc['db_fetch_assoc']($query))
  219. $context['groups'][$row['id_group']]['num_members'] += $row['num_members'];
  220. $smcFunc['db_free_result']($query);
  221. // This one is slower, but it's okay... careful not to count twice!
  222. $query = $smcFunc['db_query']('', '
  223. SELECT mg.id_group, COUNT(*) AS num_members
  224. FROM {db_prefix}membergroups AS mg
  225. INNER JOIN {db_prefix}members AS mem ON (mem.additional_groups != {string:blank_string}
  226. AND mem.id_group != mg.id_group
  227. AND FIND_IN_SET(mg.id_group, mem.additional_groups) != 0)
  228. WHERE mg.id_group IN ({array_int:normal_group_list})
  229. GROUP BY mg.id_group',
  230. array(
  231. 'normal_group_list' => $normalGroups,
  232. 'blank_string' => '',
  233. )
  234. );
  235. while ($row = $smcFunc['db_fetch_assoc']($query))
  236. $context['groups'][$row['id_group']]['num_members'] += $row['num_members'];
  237. $smcFunc['db_free_result']($query);
  238. }
  239. foreach ($context['groups'] as $id => $data)
  240. {
  241. if ($data['href'] != '')
  242. $context['groups'][$id]['link'] = '<a href="' . $data['href'] . '">' . $data['num_members'] . '</a>';
  243. }
  244. if (empty($_REQUEST['pid']))
  245. {
  246. $request = $smcFunc['db_query']('', '
  247. SELECT id_group, COUNT(*) AS num_permissions, add_deny
  248. FROM {db_prefix}permissions
  249. ' . (empty($context['hidden_permissions']) ? '' : ' WHERE permission NOT IN ({array_string:hidden_permissions})') . '
  250. GROUP BY id_group, add_deny',
  251. array(
  252. 'hidden_permissions' => !empty($context['hidden_permissions']) ? $context['hidden_permissions'] : array(),
  253. )
  254. );
  255. while ($row = $smcFunc['db_fetch_assoc']($request))
  256. if (isset($context['groups'][(int) $row['id_group']]) && (!empty($row['add_deny']) || $row['id_group'] != -1))
  257. $context['groups'][(int) $row['id_group']]['num_permissions'][empty($row['add_deny']) ? 'denied' : 'allowed'] = $row['num_permissions'];
  258. $smcFunc['db_free_result']($request);
  259. // Get the "default" profile permissions too.
  260. $request = $smcFunc['db_query']('', '
  261. SELECT id_profile, id_group, COUNT(*) AS num_permissions, add_deny
  262. FROM {db_prefix}board_permissions
  263. WHERE id_profile = {int:default_profile}
  264. ' . (empty($context['hidden_permissions']) ? '' : ' AND permission NOT IN ({array_string:hidden_permissions})') . '
  265. GROUP BY id_profile, id_group, add_deny',
  266. array(
  267. 'default_profile' => 1,
  268. 'hidden_permissions' => !empty($context['hidden_permissions']) ? $context['hidden_permissions'] : array(),
  269. )
  270. );
  271. while ($row = $smcFunc['db_fetch_assoc']($request))
  272. {
  273. if (isset($context['groups'][(int) $row['id_group']]) && (!empty($row['add_deny']) || $row['id_group'] != -1))
  274. $context['groups'][(int) $row['id_group']]['num_permissions'][empty($row['add_deny']) ? 'denied' : 'allowed'] += $row['num_permissions'];
  275. }
  276. $smcFunc['db_free_result']($request);
  277. }
  278. else
  279. {
  280. $_REQUEST['pid'] = (int) $_REQUEST['pid'];
  281. if (!isset($context['profiles'][$_REQUEST['pid']]))
  282. fatal_lang_error('no_access', false);
  283. // Change the selected tab to better reflect that this really is a board profile.
  284. $context[$context['admin_menu_name']]['current_subsection'] = 'profiles';
  285. $request = $smcFunc['db_query']('', '
  286. SELECT id_profile, id_group, COUNT(*) AS num_permissions, add_deny
  287. FROM {db_prefix}board_permissions
  288. WHERE id_profile = {int:current_profile}
  289. GROUP BY id_profile, id_group, add_deny',
  290. array(
  291. 'current_profile' => $_REQUEST['pid'],
  292. )
  293. );
  294. while ($row = $smcFunc['db_fetch_assoc']($request))
  295. {
  296. if (isset($context['groups'][(int) $row['id_group']]) && (!empty($row['add_deny']) || $row['id_group'] != -1))
  297. $context['groups'][(int) $row['id_group']]['num_permissions'][empty($row['add_deny']) ? 'denied' : 'allowed'] += $row['num_permissions'];
  298. }
  299. $smcFunc['db_free_result']($request);
  300. $context['profile'] = array(
  301. 'id' => $_REQUEST['pid'],
  302. 'name' => $context['profiles'][$_REQUEST['pid']]['name'],
  303. );
  304. }
  305. // We can modify any permission set apart from the read only, reply only and no polls ones as they are redefined.
  306. $context['can_modify'] = empty($_REQUEST['pid']) || $_REQUEST['pid'] == 1 || $_REQUEST['pid'] > 4;
  307. // Load the proper template.
  308. $context['sub_template'] = 'permission_index';
  309. createToken('admin-mpq');
  310. }
  311. /**
  312. * Handle permissions by board... more or less. :P
  313. */
  314. function PermissionByBoard()
  315. {
  316. global $context, $modSettings, $txt, $smcFunc, $sourcedir, $cat_tree, $boardList, $boards;
  317. $context['page_title'] = $txt['permissions_boards'];
  318. $context['edit_all'] = isset($_GET['edit']);
  319. // Saving?
  320. if (!empty($_POST['save_changes']) && !empty($_POST['boardprofile']))
  321. {
  322. checkSession('request');
  323. validateToken('admin-mpb');
  324. $changes = array();
  325. foreach ($_POST['boardprofile'] as $board => $profile)
  326. {
  327. $changes[(int) $profile][] = (int) $board;
  328. }
  329. if (!empty($changes))
  330. {
  331. foreach ($changes as $profile => $boards)
  332. $smcFunc['db_query']('', '
  333. UPDATE {db_prefix}boards
  334. SET id_profile = {int:current_profile}
  335. WHERE id_board IN ({array_int:board_list})',
  336. array(
  337. 'board_list' => $boards,
  338. 'current_profile' => $profile,
  339. )
  340. );
  341. }
  342. $context['edit_all'] = false;
  343. }
  344. // Load all permission profiles.
  345. loadPermissionProfiles();
  346. // Get the board tree.
  347. require_once($sourcedir . '/Subs-Boards.php');
  348. getBoardTree();
  349. // Build the list of the boards.
  350. $context['categories'] = array();
  351. foreach ($cat_tree as $catid => $tree)
  352. {
  353. $context['categories'][$catid] = array(
  354. 'name' => &$tree['node']['name'],
  355. 'id' => &$tree['node']['id'],
  356. 'boards' => array()
  357. );
  358. foreach ($boardList[$catid] as $boardid)
  359. {
  360. if (!isset($context['profiles'][$boards[$boardid]['profile']]))
  361. $boards[$boardid]['profile'] = 1;
  362. $context['categories'][$catid]['boards'][$boardid] = array(
  363. 'id' => &$boards[$boardid]['id'],
  364. 'name' => &$boards[$boardid]['name'],
  365. 'description' => &$boards[$boardid]['description'],
  366. 'child_level' => &$boards[$boardid]['level'],
  367. 'profile' => &$boards[$boardid]['profile'],
  368. 'profile_name' => $context['profiles'][$boards[$boardid]['profile']]['name'],
  369. );
  370. }
  371. }
  372. $context['sub_template'] = 'by_board';
  373. createToken('admin-mpb');
  374. }
  375. /**
  376. * Handles permission modification actions from the upper part of the
  377. * permission manager index.
  378. */
  379. function SetQuickGroups()
  380. {
  381. global $context, $smcFunc;
  382. checkSession();
  383. validateToken('admin-mpq', 'quick');
  384. loadIllegalPermissions();
  385. loadIllegalGuestPermissions();
  386. // Make sure only one of the quick options was selected.
  387. if ((!empty($_POST['predefined']) && ((isset($_POST['copy_from']) && $_POST['copy_from'] != 'empty') || !empty($_POST['permissions']))) || (!empty($_POST['copy_from']) && $_POST['copy_from'] != 'empty' && !empty($_POST['permissions'])))
  388. fatal_lang_error('permissions_only_one_option', false);
  389. if (empty($_POST['group']) || !is_array($_POST['group']))
  390. $_POST['group'] = array();
  391. // Only accept numeric values for selected membergroups.
  392. foreach ($_POST['group'] as $id => $group_id)
  393. $_POST['group'][$id] = (int) $group_id;
  394. $_POST['group'] = array_unique($_POST['group']);
  395. if (empty($_REQUEST['pid']))
  396. $_REQUEST['pid'] = 0;
  397. else
  398. $_REQUEST['pid'] = (int) $_REQUEST['pid'];
  399. // Fix up the old global to the new default!
  400. $bid = max(1, $_REQUEST['pid']);
  401. // No modifying the predefined profiles.
  402. if ($_REQUEST['pid'] > 1 && $_REQUEST['pid'] < 5)
  403. fatal_lang_error('no_access', false);
  404. // Clear out any cached authority.
  405. updateSettings(array('settings_updated' => time()));
  406. // No groups where selected.
  407. if (empty($_POST['group']))
  408. redirectexit('action=admin;area=permissions;pid=' . $_REQUEST['pid']);
  409. // Set a predefined permission profile.
  410. if (!empty($_POST['predefined']))
  411. {
  412. // Make sure it's a predefined permission set we expect.
  413. if (!in_array($_POST['predefined'], array('restrict', 'standard', 'moderator', 'maintenance')))
  414. redirectexit('action=admin;area=permissions;pid=' . $_REQUEST['pid']);
  415. foreach ($_POST['group'] as $group_id)
  416. {
  417. if (!empty($_REQUEST['pid']))
  418. setPermissionLevel($_POST['predefined'], $group_id, $_REQUEST['pid']);
  419. else
  420. setPermissionLevel($_POST['predefined'], $group_id);
  421. }
  422. }
  423. // Set a permission profile based on the permissions of a selected group.
  424. elseif ($_POST['copy_from'] != 'empty')
  425. {
  426. // Just checking the input.
  427. if (!is_numeric($_POST['copy_from']))
  428. redirectexit('action=admin;area=permissions;pid=' . $_REQUEST['pid']);
  429. // Make sure the group we're copying to is never included.
  430. $_POST['group'] = array_diff($_POST['group'], array($_POST['copy_from']));
  431. // No groups left? Too bad.
  432. if (empty($_POST['group']))
  433. redirectexit('action=admin;area=permissions;pid=' . $_REQUEST['pid']);
  434. if (empty($_REQUEST['pid']))
  435. {
  436. // Retrieve current permissions of group.
  437. $request = $smcFunc['db_query']('', '
  438. SELECT permission, add_deny
  439. FROM {db_prefix}permissions
  440. WHERE id_group = {int:copy_from}',
  441. array(
  442. 'copy_from' => $_POST['copy_from'],
  443. )
  444. );
  445. $target_perm = array();
  446. while ($row = $smcFunc['db_fetch_assoc']($request))
  447. $target_perm[$row['permission']] = $row['add_deny'];
  448. $smcFunc['db_free_result']($request);
  449. $inserts = array();
  450. foreach ($_POST['group'] as $group_id)
  451. foreach ($target_perm as $perm => $add_deny)
  452. {
  453. // No dodgy permissions please!
  454. if (!empty($context['illegal_permissions']) && in_array($perm, $context['illegal_permissions']))
  455. continue;
  456. if ($group_id == -1 && in_array($perm, $context['non_guest_permissions']))
  457. continue;
  458. if ($group_id != 1 && $group_id != 3)
  459. $inserts[] = array($perm, $group_id, $add_deny);
  460. }
  461. // Delete the previous permissions...
  462. $smcFunc['db_query']('', '
  463. DELETE FROM {db_prefix}permissions
  464. WHERE id_group IN ({array_int:group_list})
  465. ' . (empty($context['illegal_permissions']) ? '' : ' AND permission NOT IN ({array_string:illegal_permissions})'),
  466. array(
  467. 'group_list' => $_POST['group'],
  468. 'illegal_permissions' => !empty($context['illegal_permissions']) ? $context['illegal_permissions'] : array(),
  469. )
  470. );
  471. if (!empty($inserts))
  472. {
  473. // ..and insert the new ones.
  474. $smcFunc['db_insert']('',
  475. '{db_prefix}permissions',
  476. array(
  477. 'permission' => 'string', 'id_group' => 'int', 'add_deny' => 'int',
  478. ),
  479. $inserts,
  480. array('permission', 'id_group')
  481. );
  482. }
  483. }
  484. // Now do the same for the board permissions.
  485. $request = $smcFunc['db_query']('', '
  486. SELECT permission, add_deny
  487. FROM {db_prefix}board_permissions
  488. WHERE id_group = {int:copy_from}
  489. AND id_profile = {int:current_profile}',
  490. array(
  491. 'copy_from' => $_POST['copy_from'],
  492. 'current_profile' => $bid,
  493. )
  494. );
  495. $target_perm = array();
  496. while ($row = $smcFunc['db_fetch_assoc']($request))
  497. $target_perm[$row['permission']] = $row['add_deny'];
  498. $smcFunc['db_free_result']($request);
  499. $inserts = array();
  500. foreach ($_POST['group'] as $group_id)
  501. foreach ($target_perm as $perm => $add_deny)
  502. {
  503. // Are these for guests?
  504. if ($group_id == -1 && in_array($perm, $context['non_guest_permissions']))
  505. continue;
  506. $inserts[] = array($perm, $group_id, $bid, $add_deny);
  507. }
  508. // Delete the previous global board permissions...
  509. $smcFunc['db_query']('', '
  510. DELETE FROM {db_prefix}board_permissions
  511. WHERE id_group IN ({array_int:current_group_list})
  512. AND id_profile = {int:current_profile}',
  513. array(
  514. 'current_group_list' => $_POST['group'],
  515. 'current_profile' => $bid,
  516. )
  517. );
  518. // And insert the copied permissions.
  519. if (!empty($inserts))
  520. {
  521. // ..and insert the new ones.
  522. $smcFunc['db_insert']('',
  523. '{db_prefix}board_permissions',
  524. array('permission' => 'string', 'id_group' => 'int', 'id_profile' => 'int', 'add_deny' => 'int'),
  525. $inserts,
  526. array('permission', 'id_group', 'id_profile')
  527. );
  528. }
  529. // Update any children out there!
  530. updateChildPermissions($_POST['group'], $_REQUEST['pid']);
  531. }
  532. // Set or unset a certain permission for the selected groups.
  533. elseif (!empty($_POST['permissions']))
  534. {
  535. // Unpack two variables that were transported.
  536. list ($permissionType, $permission) = explode('/', $_POST['permissions']);
  537. // Check whether our input is within expected range.
  538. if (!in_array($_POST['add_remove'], array('add', 'clear', 'deny')) || !in_array($permissionType, array('membergroup', 'board')))
  539. redirectexit('action=admin;area=permissions;pid=' . $_REQUEST['pid']);
  540. if ($_POST['add_remove'] == 'clear')
  541. {
  542. if ($permissionType == 'membergroup')
  543. $smcFunc['db_query']('', '
  544. DELETE FROM {db_prefix}permissions
  545. WHERE id_group IN ({array_int:current_group_list})
  546. AND permission = {string:current_permission}
  547. ' . (empty($context['illegal_permissions']) ? '' : ' AND permission NOT IN ({array_string:illegal_permissions})'),
  548. array(
  549. 'current_group_list' => $_POST['group'],
  550. 'current_permission' => $permission,
  551. 'illegal_permissions' => !empty($context['illegal_permissions']) ? $context['illegal_permissions'] : array(),
  552. )
  553. );
  554. else
  555. $smcFunc['db_query']('', '
  556. DELETE FROM {db_prefix}board_permissions
  557. WHERE id_group IN ({array_int:current_group_list})
  558. AND id_profile = {int:current_profile}
  559. AND permission = {string:current_permission}',
  560. array(
  561. 'current_group_list' => $_POST['group'],
  562. 'current_profile' => $bid,
  563. 'current_permission' => $permission,
  564. )
  565. );
  566. }
  567. // Add a permission (either 'set' or 'deny').
  568. else
  569. {
  570. $add_deny = $_POST['add_remove'] == 'add' ? '1' : '0';
  571. $permChange = array();
  572. foreach ($_POST['group'] as $groupID)
  573. {
  574. if ($groupID == -1 && in_array($permission, $context['non_guest_permissions']))
  575. continue;
  576. if ($permissionType == 'membergroup' && $groupID != 1 && $groupID != 3 && (empty($context['illegal_permissions']) || !in_array($permission, $context['illegal_permissions'])))
  577. $permChange[] = array($permission, $groupID, $add_deny);
  578. elseif ($permissionType != 'membergroup')
  579. $permChange[] = array($permission, $groupID, $bid, $add_deny);
  580. }
  581. if (!empty($permChange))
  582. {
  583. if ($permissionType == 'membergroup')
  584. $smcFunc['db_insert']('replace',
  585. '{db_prefix}permissions',
  586. array('permission' => 'string', 'id_group' => 'int', 'add_deny' => 'int'),
  587. $permChange,
  588. array('permission', 'id_group')
  589. );
  590. // Board permissions go into the other table.
  591. else
  592. $smcFunc['db_insert']('replace',
  593. '{db_prefix}board_permissions',
  594. array('permission' => 'string', 'id_group' => 'int', 'id_profile' => 'int', 'add_deny' => 'int'),
  595. $permChange,
  596. array('permission', 'id_group', 'id_profile')
  597. );
  598. }
  599. }
  600. // Another child update!
  601. updateChildPermissions($_POST['group'], $_REQUEST['pid']);
  602. }
  603. redirectexit('action=admin;area=permissions;pid=' . $_REQUEST['pid']);
  604. }
  605. /**
  606. * Initializes the necessary to modify a membergroup's permissions.
  607. */
  608. function ModifyMembergroup()
  609. {
  610. global $context, $txt, $modSettings, $smcFunc, $sourcedir;
  611. if (!isset($_GET['group']))
  612. fatal_lang_error('no_access', false);
  613. $context['group']['id'] = (int) $_GET['group'];
  614. // Are they toggling the view?
  615. if (isset($_GET['view']))
  616. {
  617. $context['admin_preferences']['pv'] = $_GET['view'] == 'classic' ? 'classic' : 'simple';
  618. // Update the users preferences.
  619. require_once($sourcedir . '/Subs-Admin.php');
  620. updateAdminPreferences();
  621. }
  622. $context['view_type'] = !empty($context['admin_preferences']['pv']) && $context['admin_preferences']['pv'] == 'classic' ? 'classic' : 'simple';
  623. // It's not likely you'd end up here with this setting disabled.
  624. if ($_GET['group'] == 1)
  625. redirectexit('action=admin;area=permissions');
  626. loadAllPermissions($context['view_type']);
  627. loadPermissionProfiles();
  628. if ($context['group']['id'] > 0)
  629. {
  630. $result = $smcFunc['db_query']('', '
  631. SELECT group_name, id_parent
  632. FROM {db_prefix}membergroups
  633. WHERE id_group = {int:current_group}
  634. LIMIT 1',
  635. array(
  636. 'current_group' => $context['group']['id'],
  637. )
  638. );
  639. list ($context['group']['name'], $parent) = $smcFunc['db_fetch_row']($result);
  640. $smcFunc['db_free_result']($result);
  641. // Cannot edit an inherited group!
  642. if ($parent != -2)
  643. fatal_lang_error('cannot_edit_permissions_inherited');
  644. }
  645. elseif ($context['group']['id'] == -1)
  646. $context['group']['name'] = $txt['membergroups_guests'];
  647. else
  648. $context['group']['name'] = $txt['membergroups_members'];
  649. $context['profile']['id'] = empty($_GET['pid']) ? 0 : (int) $_GET['pid'];
  650. // If this is a moderator and they are editing "no profile" then we only do boards.
  651. if ($context['group']['id'] == 3 && empty($context['profile']['id']))
  652. {
  653. // For sanity just check they have no general permissions.
  654. $smcFunc['db_query']('', '
  655. DELETE FROM {db_prefix}permissions
  656. WHERE id_group = {int:moderator_group}',
  657. array(
  658. 'moderator_group' => 3,
  659. )
  660. );
  661. $context['profile']['id'] = 1;
  662. }
  663. $context['permission_type'] = empty($context['profile']['id']) ? 'membergroup' : 'board';
  664. $context['profile']['can_modify'] = !$context['profile']['id'] || $context['profiles'][$context['profile']['id']]['can_modify'];
  665. // Set up things a little nicer for board related stuff...
  666. if ($context['permission_type'] == 'board')
  667. {
  668. $context['profile']['name'] = $context['profiles'][$context['profile']['id']]['name'];
  669. $context[$context['admin_menu_name']]['current_subsection'] = 'profiles';
  670. }
  671. // Fetch the current permissions.
  672. $permissions = array(
  673. 'membergroup' => array('allowed' => array(), 'denied' => array()),
  674. 'board' => array('allowed' => array(), 'denied' => array())
  675. );
  676. // General permissions?
  677. if ($context['permission_type'] == 'membergroup')
  678. {
  679. $result = $smcFunc['db_query']('', '
  680. SELECT permission, add_deny
  681. FROM {db_prefix}permissions
  682. WHERE id_group = {int:current_group}',
  683. array(
  684. 'current_group' => $_GET['group'],
  685. )
  686. );
  687. while ($row = $smcFunc['db_fetch_assoc']($result))
  688. $permissions['membergroup'][empty($row['add_deny']) ? 'denied' : 'allowed'][] = $row['permission'];
  689. $smcFunc['db_free_result']($result);
  690. }
  691. // Fetch current board permissions...
  692. $result = $smcFunc['db_query']('', '
  693. SELECT permission, add_deny
  694. FROM {db_prefix}board_permissions
  695. WHERE id_group = {int:current_group}
  696. AND id_profile = {int:current_profile}',
  697. array(
  698. 'current_group' => $context['group']['id'],
  699. 'current_profile' => $context['permission_type'] == 'membergroup' ? 1 : $context['profile']['id'],
  700. )
  701. );
  702. while ($row = $smcFunc['db_fetch_assoc']($result))
  703. $permissions['board'][empty($row['add_deny']) ? 'denied' : 'allowed'][] = $row['permission'];
  704. $smcFunc['db_free_result']($result);
  705. // Loop through each permission and set whether it's checked.
  706. foreach ($context['permissions'] as $permissionType => $tmp)
  707. {
  708. foreach ($tmp['columns'] as $position => $permissionGroups)
  709. {
  710. foreach ($permissionGroups as $permissionGroup => $permissionArray)
  711. {
  712. foreach ($permissionArray['permissions'] as $perm)
  713. {
  714. // Create a shortcut for the current permission.
  715. $curPerm = &$context['permissions'][$permissionType]['columns'][$position][$permissionGroup]['permissions'][$perm['id']];
  716. if ($tmp['view'] == 'classic')
  717. {
  718. if ($perm['has_own_any'])
  719. {
  720. $curPerm['any']['select'] = in_array($perm['id'] . '_any', $permissions[$permissionType]['allowed']) ? 'on' : (in_array($perm['id'] . '_any', $permissions[$permissionType]['denied']) ? 'denied' : 'off');
  721. $curPerm['own']['select'] = in_array($perm['id'] . '_own', $permissions[$permissionType]['allowed']) ? 'on' : (in_array($perm['id'] . '_own', $permissions[$permissionType]['denied']) ? 'denied' : 'off');
  722. }
  723. else
  724. $curPerm['select'] = in_array($perm['id'], $permissions[$permissionType]['denied']) ? 'denied' : (in_array($perm['id'], $permissions[$permissionType]['allowed']) ? 'on' : 'off');
  725. }
  726. else
  727. {
  728. $curPerm['select'] = in_array($perm['id'], $permissions[$permissionType]['denied']) ? 'denied' : (in_array($perm['id'], $permissions[$permissionType]['allowed']) ? 'on' : 'off');
  729. }
  730. }
  731. }
  732. }
  733. }
  734. $context['sub_template'] = 'modify_group';
  735. $context['page_title'] = $txt['permissions_modify_group'];
  736. createToken('admin-mp');
  737. }
  738. /**
  739. * This function actually saves modifications to a membergroup's board permissions.
  740. */
  741. function ModifyMembergroup2()
  742. {
  743. global $modSettings, $smcFunc, $context;
  744. checkSession();
  745. validateToken('admin-mp');
  746. loadIllegalPermissions();
  747. $_GET['group'] = (int) $_GET['group'];
  748. $_GET['pid'] = (int) $_GET['pid'];
  749. // Cannot modify predefined profiles.
  750. if ($_GET['pid'] > 1 && $_GET['pid'] < 5)
  751. fatal_lang_error('no_access', false);
  752. // Verify this isn't inherited.
  753. if ($_GET['group'] == -1 || $_GET['group'] == 0)
  754. $parent = -2;
  755. else
  756. {
  757. $result = $smcFunc['db_query']('', '
  758. SELECT id_parent
  759. FROM {db_prefix}membergroups
  760. WHERE id_group = {int:current_group}
  761. LIMIT 1',
  762. array(
  763. 'current_group' => $_GET['group'],
  764. )
  765. );
  766. list ($parent) = $smcFunc['db_fetch_row']($result);
  767. $smcFunc['db_free_result']($result);
  768. }
  769. if ($parent != -2)
  770. fatal_lang_error('cannot_edit_permissions_inherited');
  771. $givePerms = array('membergroup' => array(), 'board' => array());
  772. // Guest group, we need illegal, guest permissions.
  773. if ($_GET['group'] == -1)
  774. {
  775. loadIllegalGuestPermissions();
  776. $context['illegal_permissions'] = array_merge($context['illegal_permissions'], $context['non_guest_permissions']);
  777. }
  778. // Prepare all permissions that were set or denied for addition to the DB.
  779. if (isset($_POST['perm']) && is_array($_POST['perm']))
  780. {
  781. foreach ($_POST['perm'] as $perm_type => $perm_array)
  782. {
  783. if (is_array($perm_array))
  784. {
  785. foreach ($perm_array as $permission => $value)
  786. if ($value == 'on' || $value == 'deny')
  787. {
  788. // Don't allow people to escalate themselves!
  789. if (!empty($context['illegal_permissions']) && in_array($permission, $context['illegal_permissions']))
  790. continue;
  791. $givePerms[$perm_type][] = array($_GET['group'], $permission, $value == 'deny' ? 0 : 1);
  792. }
  793. }
  794. }
  795. }
  796. // Insert the general permissions.
  797. if ($_GET['group'] != 3 && empty($_GET['pid']))
  798. {
  799. $smcFunc['db_query']('', '
  800. DELETE FROM {db_prefix}permissions
  801. WHERE id_group = {int:current_group}
  802. ' . (empty($context['illegal_permissions']) ? '' : ' AND permission NOT IN ({array_string:illegal_permissions})'),
  803. array(
  804. 'current_group' => $_GET['group'],
  805. 'illegal_permissions' => !empty($context['illegal_permissions']) ? $context['illegal_permissions'] : array(),
  806. )
  807. );
  808. if (!empty($givePerms['membergroup']))
  809. {
  810. $smcFunc['db_insert']('replace',
  811. '{db_prefix}permissions',
  812. array('id_group' => 'int', 'permission' => 'string', 'add_deny' => 'int'),
  813. $givePerms['membergroup'],
  814. array('id_group', 'permission')
  815. );
  816. }
  817. }
  818. // Insert the boardpermissions.
  819. $profileid = max(1, $_GET['pid']);
  820. $smcFunc['db_query']('', '
  821. DELETE FROM {db_prefix}board_permissions
  822. WHERE id_group = {int:current_group}
  823. AND id_profile = {int:current_profile}',
  824. array(
  825. 'current_group' => $_GET['group'],
  826. 'current_profile' => $profileid,
  827. )
  828. );
  829. if (!empty($givePerms['board']))
  830. {
  831. foreach ($givePerms['board'] as $k => $v)
  832. $givePerms['board'][$k][] = $profileid;
  833. $smcFunc['db_insert']('replace',
  834. '{db_prefix}board_permissions',
  835. array('id_group' => 'int', 'permission' => 'string', 'add_deny' => 'int', 'id_profile' => 'int'),
  836. $givePerms['board'],
  837. array('id_group', 'permission', 'id_profile')
  838. );
  839. }
  840. // Update any inherited permissions as required.
  841. updateChildPermissions($_GET['group'], $_GET['pid']);
  842. // Clear cached privs.
  843. updateSettings(array('settings_updated' => time()));
  844. redirectexit('action=admin;area=permissions;pid=' . $_GET['pid']);
  845. }
  846. /**
  847. * A screen to set some general settings for permissions.
  848. *
  849. * @param bool $return_config = false
  850. */
  851. function GeneralPermissionSettings($return_config = false)
  852. {
  853. global $context, $modSettings, $sourcedir, $txt, $scripturl, $smcFunc;
  854. // All the setting variables
  855. $config_vars = array(
  856. array('title', 'settings'),
  857. // Inline permissions.
  858. array('permissions', 'manage_permissions'),
  859. '',
  860. // A few useful settings
  861. array('check', 'permission_enable_deny', 0, $txt['permission_settings_enable_deny'], 'help' => 'permissions_deny'),
  862. array('check', 'permission_enable_postgroups', 0, $txt['permission_settings_enable_postgroups'], 'help' => 'permissions_postgroups'),
  863. );
  864. call_integration_hook('integrate_modify_permission_settings', array(&$config_vars));
  865. if ($return_config)
  866. return $config_vars;
  867. $context['page_title'] = $txt['permission_settings_title'];
  868. $context['sub_template'] = 'show_settings';
  869. // Needed for the inline permission functions, and the settings template.
  870. require_once($sourcedir . '/ManageServer.php');
  871. // Don't let guests have these permissions.
  872. $context['post_url'] = $scripturl . '?action=admin;area=permissions;save;sa=settings';
  873. $context['permissions_excluded'] = array(-1);
  874. // Saving the settings?
  875. if (isset($_GET['save']))
  876. {
  877. checkSession('post');
  878. call_integration_hook('integrate_save_permission_settings');
  879. saveDBSettings($config_vars);
  880. // Clear all deny permissions...if we want that.
  881. if (empty($modSettings['permission_enable_deny']))
  882. {
  883. $smcFunc['db_query']('', '
  884. DELETE FROM {db_prefix}permissions
  885. WHERE add_deny = {int:denied}',
  886. array(
  887. 'denied' => 0,
  888. )
  889. );
  890. $smcFunc['db_query']('', '
  891. DELETE FROM {db_prefix}board_permissions
  892. WHERE add_deny = {int:denied}',
  893. array(
  894. 'denied' => 0,
  895. )
  896. );
  897. }
  898. // Make sure there are no postgroup based permissions left.
  899. if (empty($modSettings['permission_enable_postgroups']))
  900. {
  901. // Get a list of postgroups.
  902. $post_groups = array();
  903. $request = $smcFunc['db_query']('', '
  904. SELECT id_group
  905. FROM {db_prefix}membergroups
  906. WHERE min_posts != {int:min_posts}',
  907. array(
  908. 'min_posts' => -1,
  909. )
  910. );
  911. while ($row = $smcFunc['db_fetch_assoc']($request))
  912. $post_groups[] = $row['id_group'];
  913. $smcFunc['db_free_result']($request);
  914. // Remove'em.
  915. $smcFunc['db_query']('', '
  916. DELETE FROM {db_prefix}permissions
  917. WHERE id_group IN ({array_int:post_group_list})',
  918. array(
  919. 'post_group_list' => $post_groups,
  920. )
  921. );
  922. $smcFunc['db_query']('', '
  923. DELETE FROM {db_prefix}board_permissions
  924. WHERE id_group IN ({array_int:post_group_list})',
  925. array(
  926. 'post_group_list' => $post_groups,
  927. )
  928. );
  929. $smcFunc['db_query']('', '
  930. UPDATE {db_prefix}membergroups
  931. SET id_parent = {int:not_inherited}
  932. WHERE id_parent IN ({array_int:post_group_list})',
  933. array(
  934. 'post_group_list' => $post_groups,
  935. 'not_inherited' => -2,
  936. )
  937. );
  938. }
  939. redirectexit('action=admin;area=permissions;sa=settings');
  940. }
  941. // We need this for the in-line permissions
  942. createToken('admin-mp');
  943. prepareDBSettingContext($config_vars);
  944. }
  945. /**
  946. * Set the permission level for a specific profile, group, or group for a profile.
  947. * @internal
  948. *
  949. * @param string $level
  950. * @param int $group
  951. * @param mixed $profile = null, int expected
  952. */
  953. function setPermissionLevel($level, $group, $profile = 'null')
  954. {
  955. global $smcFunc, $context;
  956. loadIllegalPermissions();
  957. loadIllegalGuestPermissions();
  958. // Levels by group... restrict, standard, moderator, maintenance.
  959. $groupLevels = array(
  960. 'board' => array('inherit' => array()),
  961. 'group' => array('inherit' => array())
  962. );
  963. // Levels by board... standard, publish, free.
  964. $boardLevels = array('inherit' => array());
  965. // Restrictive - ie. guests.
  966. $groupLevels['global']['restrict'] = array(
  967. 'search_posts',
  968. 'calendar_view',
  969. 'view_stats',
  970. 'who_view',
  971. 'profile_view_own',
  972. 'profile_identity_own',
  973. );
  974. $groupLevels['board']['restrict'] = array(
  975. 'poll_view',
  976. 'post_new',
  977. 'post_reply_own',
  978. 'post_reply_any',
  979. 'delete_own',
  980. 'modify_own',
  981. 'mark_any_notify',
  982. 'mark_notify',
  983. 'report_any',
  984. 'send_topic',
  985. );
  986. // Standard - ie. members. They can do anything Restrictive can.
  987. $groupLevels['global']['standard'] = array_merge($groupLevels['global']['restrict'], array(
  988. 'view_mlist',
  989. 'karma_edit',
  990. 'pm_read',
  991. 'pm_send',
  992. 'send_email_to_members',
  993. 'profile_view_any',
  994. 'profile_extra_own',
  995. 'profile_server_avatar',
  996. 'profile_upload_avatar',
  997. 'profile_remote_avatar',
  998. 'profile_remove_own',
  999. ));
  1000. $groupLevels['board']['standard'] = array_merge($groupLevels['board']['restrict'], array(
  1001. 'poll_vote',
  1002. 'poll_edit_own',
  1003. 'poll_post',
  1004. 'poll_add_own',
  1005. 'post_attachment',
  1006. 'lock_own',
  1007. 'remove_own',
  1008. 'view_attachments',
  1009. ));
  1010. // Moderator - ie. moderators :P. They can do what standard can, and more.
  1011. $groupLevels['global']['moderator'] = array_merge($groupLevels['global']['standard'], array(
  1012. 'calendar_post',
  1013. 'calen ddar_edit_own',
  1014. 'access_mod_center',
  1015. 'issue_warning',
  1016. ));
  1017. $groupLevels['board']['moderator'] = array_merge($groupLevels['board']['standard'], array(
  1018. 'make_sticky',
  1019. 'poll_edit_any',
  1020. 'delete_any',
  1021. 'modify_any',
  1022. 'lock_any',
  1023. 'remove_any',
  1024. 'move_any',
  1025. 'merge_any',
  1026. 'split_any',
  1027. 'poll_lock_any',
  1028. 'poll_remove_any',
  1029. 'poll_add_any',
  1030. 'approve_posts',
  1031. ));
  1032. // Maintenance - wannabe admins. They can do almost everything.
  1033. $groupLevels['global']['maintenance'] = array_merge($groupLevels['global']['moderator'], array(
  1034. 'manage_attachments',
  1035. 'manage_smileys',
  1036. 'manage_boards',
  1037. 'moderate_forum',
  1038. 'manage_membergroups',
  1039. 'manage_bans',
  1040. 'admin_forum',
  1041. 'manage_permissions',
  1042. 'edit_news',
  1043. 'calendar_edit_any',
  1044. 'profile_identity_any',
  1045. 'profile_extra_any',
  1046. 'profile_title_any',
  1047. ));
  1048. $groupLevels['board']['maintenance'] = array_merge($groupLevels['board']['moderator'], array(
  1049. ));
  1050. // Standard - nothing above the group permissions. (this SHOULD be empty.)
  1051. $boardLevels['standard'] = array(
  1052. );
  1053. // Locked - just that, you can't post here.
  1054. $boardLevels['locked'] = array(
  1055. 'poll_view',
  1056. 'mark_notify',
  1057. 'report_any',
  1058. 'send_topic',
  1059. 'view_attachments',
  1060. );
  1061. // Publisher - just a little more...
  1062. $boardLevels['publish'] = array_merge($boardLevels['locked'], array(
  1063. 'post_new',
  1064. 'post_reply_own',
  1065. 'post_reply_any',
  1066. 'delete_own',
  1067. 'modify_own',
  1068. 'mark_any_notify',
  1069. 'delete_replies',
  1070. 'modify_replies',
  1071. 'poll_vote',
  1072. 'poll_edit_own',
  1073. 'poll_post',
  1074. 'poll_add_own',
  1075. 'poll_remove_own',
  1076. 'post_attachment',
  1077. 'lock_own',
  1078. 'remove_own',
  1079. ));
  1080. // Free for All - Scary. Just scary.
  1081. $boardLevels['free'] = array_merge($boardLevels['publish'], array(
  1082. 'poll_lock_any',
  1083. 'poll_edit_any',
  1084. 'poll_add_any',
  1085. 'poll_remove_any',
  1086. 'make_sticky',
  1087. 'lock_any',
  1088. 'remove_any',
  1089. 'delete_any',
  1090. 'split_any',
  1091. 'merge_any',
  1092. 'modify_any',
  1093. 'approve_posts',
  1094. ));
  1095. // Make sure we're not granting someone too many permissions!
  1096. foreach ($groupLevels['global'][$level] as $k => $permission)
  1097. {
  1098. if (!empty($context['illegal_permissions']) && in_array($permission, $context['illegal_permissions']))
  1099. unset($groupLevels['global'][$level][$k]);
  1100. if ($group == -1 && in_array($permission, $context['non_guest_permissions']))
  1101. unset($groupLevels['global'][$level][$k]);
  1102. }
  1103. if ($group == -1)
  1104. foreach ($groupLevels['board'][$level] as $k => $permission)
  1105. if (in_array($permission, $context['non_guest_permissions']))
  1106. unset($groupLevels['board'][$level][$k]);
  1107. // Reset all cached permissions.
  1108. updateSettings(array('settings_updated' => time()));
  1109. // Setting group permissions.
  1110. if ($profile === 'null' && $group !== 'null')
  1111. {
  1112. $group = (int) $group;
  1113. if (empty($groupLevels['global'][$level]))
  1114. return;
  1115. $smcFunc['db_query']('', '
  1116. DELETE FROM {db_prefix}permissions
  1117. WHERE id_group = {int:current_group}
  1118. ' . (empty($context['illegal_permissions']) ? '' : ' AND permission NOT IN ({array_string:illegal_permissions})'),
  1119. array(
  1120. 'current_group' => $group,
  1121. 'illegal_permissions' => !empty($context['illegal_permissions']) ? $context['illegal_permissions'] : array(),
  1122. )
  1123. );
  1124. $smcFunc['db_query']('', '
  1125. DELETE FROM {db_prefix}board_permissions
  1126. WHERE id_group = {int:current_group}
  1127. AND id_profile = {int:default_profile}',
  1128. array(
  1129. 'current_group' => $group,
  1130. 'default_profile' => 1,
  1131. )
  1132. );
  1133. $groupInserts = array();
  1134. foreach ($groupLevels['global'][$level] as $permission)
  1135. $groupInserts[] = array($group, $permission);
  1136. $smcFunc['db_insert']('insert',
  1137. '{db_prefix}permissions',
  1138. array('id_group' => 'int', 'permission' => 'string'),
  1139. $groupInserts,
  1140. array('id_group')
  1141. );
  1142. $boardInserts = array();
  1143. foreach ($groupLevels['board'][$level] as $permission)
  1144. $boardInserts[] = array(1, $group, $permission);
  1145. $smcFunc['db_insert']('insert',
  1146. '{db_prefix}board_permissions',
  1147. array('id_profile' => 'int', 'id_group' => 'int', 'permission' => 'string'),
  1148. $boardInserts,
  1149. array('id_profile', 'id_group')
  1150. );
  1151. }
  1152. // Setting profile permissions for a specific group.
  1153. elseif ($profile !== 'null' && $group !== 'null' && ($profile == 1 || $profile > 4))
  1154. {
  1155. $group = (int) $group;
  1156. $profile = (int) $profile;
  1157. if (!empty($groupLevels['global'][$level]))
  1158. {
  1159. $smcFunc['db_query']('', '
  1160. DELETE FROM {db_prefix}board_permissions
  1161. WHERE id_group = {int:current_group}
  1162. AND id_profile = {int:current_profile}',
  1163. array(
  1164. 'current_group' => $group,
  1165. 'current_profile' => $profile,
  1166. )
  1167. );
  1168. }
  1169. if (!empty($groupLevels['board'][$level]))
  1170. {
  1171. $boardInserts = array();
  1172. foreach ($groupLevels['board'][$level] as $permission)
  1173. $boardInserts[] = array($profile, $group, $permission);
  1174. $smcFunc['db_insert']('insert',
  1175. '{db_prefix}board_permissions',
  1176. array('id_profile' => 'int', 'id_group' => 'int', 'permission' => 'string'),
  1177. $boardInserts,
  1178. array('id_profile', 'id_group')
  1179. );
  1180. }
  1181. }
  1182. // Setting profile permissions for all groups.
  1183. elseif ($profile !== 'null' && $group === 'null' && ($profile == 1 || $profile > 4))
  1184. {
  1185. $profile = (int) $profile;
  1186. $smcFunc['db_query']('', '
  1187. DELETE FROM {db_prefix}board_permissions
  1188. WHERE id_profile = {int:current_profile}',
  1189. array(
  1190. 'current_profile' => $profile,
  1191. )
  1192. );
  1193. if (empty($boardLevels[$level]))
  1194. return;
  1195. // Get all the groups...
  1196. $query = $smcFunc['db_query']('', '
  1197. SELECT id_group
  1198. FROM {db_prefix}membergroups
  1199. WHERE id_group > {int:moderator_group}
  1200. ORDER BY min_posts, CASE WHEN id_group < {int:newbie_group} THEN id_group ELSE 4 END, group_name',
  1201. array(
  1202. 'moderator_group' => 3,
  1203. 'newbie_group' => 4,
  1204. )
  1205. );
  1206. while ($row = $smcFunc['db_fetch_row']($query))
  1207. {
  1208. $group = $row[0];
  1209. $boardInserts = array();
  1210. foreach ($boardLevels[$level] as $permission)
  1211. $boardInserts[] = array($profile, $group, $permission);
  1212. $smcFunc['db_insert']('insert',
  1213. '{db_prefix}board_permissions',
  1214. array('id_profile' => 'int', 'id_group' => 'int', 'permission' => 'string'),
  1215. $boardInserts,
  1216. array('id_profile', 'id_group')
  1217. );
  1218. }
  1219. $smcFunc['db_free_result']($query);
  1220. // Add permissions for ungrouped members.
  1221. $boardInserts = array();
  1222. foreach ($boardLevels[$level] as $permission)
  1223. $boardInserts[] = array($profile, 0, $permission);
  1224. $smcFunc['db_insert']('insert',
  1225. '{db_prefix}board_permissions',
  1226. array('id_profile' => 'int', 'id_group' => 'int', 'permission' => 'string'),
  1227. $boardInserts,
  1228. array('id_profile', 'id_group')
  1229. );
  1230. }
  1231. // $profile and $group are both null!
  1232. else
  1233. fatal_lang_error('no_access', false);
  1234. }
  1235. /**
  1236. * Load permissions into $context['permissions'].
  1237. * @internal
  1238. *
  1239. * @param string $loadType options: 'classic' or 'simple'
  1240. */
  1241. function loadAllPermissions($loadType = 'classic')
  1242. {
  1243. global $context, $txt, $modSettings;
  1244. // List of all the groups dependant on the currently selected view - for the order so it looks pretty, yea?
  1245. // Note to Mod authors - you don't need to stick your permission group here if you don't mind SMF sticking it the last group of the page.
  1246. $permissionGroups = array(
  1247. 'membergroup' => array(
  1248. 'simple' => array(
  1249. 'view_basic_info',
  1250. 'use_pm_system',
  1251. 'post_calendar',
  1252. 'edit_profile',
  1253. 'delete_account',
  1254. 'use_avatar',
  1255. 'moderate_general',
  1256. 'administrate',
  1257. ),
  1258. 'classic' => array(
  1259. 'general',
  1260. 'pm',
  1261. 'calendar',
  1262. 'maintenance',
  1263. 'member_admin',
  1264. 'profile',
  1265. ),
  1266. ),
  1267. 'board' => array(
  1268. 'simple' => array(
  1269. 'make_posts',
  1270. 'make_unapproved_posts',
  1271. 'post_polls',
  1272. 'participate',
  1273. 'modify',
  1274. 'notification',
  1275. 'attach',
  1276. 'moderate',
  1277. ),
  1278. 'classic' => array(
  1279. 'general_board',
  1280. 'topic',
  1281. 'post',
  1282. 'poll',
  1283. 'notification',
  1284. 'attachment',
  1285. ),
  1286. ),
  1287. );
  1288. /* The format of this list is as follows:
  1289. 'membergroup' => array(
  1290. 'permissions_inside' => array(has_multiple_options, classic_view_group, simple_view_group(_own)*, simple_view_group_any*),
  1291. ),
  1292. 'board' => array(
  1293. 'permissions_inside' => array(has_multiple_options, classic_view_group, simple_view_group(_own)*, simple_view_group_any*),
  1294. );
  1295. */
  1296. $permissionList = array(
  1297. 'membergroup' => array(
  1298. 'view_stats' => array(false, 'general', 'view_basic_info'),
  1299. 'view_mlist' => array(false, 'general', 'view_basic_info'),
  1300. 'who_view' => array(false, 'general', 'view_basic_info'),
  1301. 'search_posts' => array(false, 'general', 'view_basic_info'),
  1302. 'karma_edit' => array(false, 'general', 'moderate_general'),
  1303. 'pm_read' => array(false, 'pm', 'use_pm_system'),
  1304. 'pm_send' => array(false, 'pm', 'use_pm_system'),
  1305. 'pm_draft' => array(false, 'pm', 'use_pm_system'),
  1306. 'pm_autosave_draft' => array(false, 'pm', 'use_pm_system'),
  1307. 'send_email_to_members' => array(false, 'pm', 'use_pm_system'),
  1308. 'calendar_view' => array(false, 'calendar', 'view_basic_info'),
  1309. 'calendar_post' => array(false, 'calendar', 'post_calendar'),
  1310. 'calendar_edit' => array(true, 'calendar', 'post_calendar', 'moderate_general'),
  1311. 'admin_forum' => array(false, 'maintenance', 'administrate'),
  1312. 'manage_boards' => array(false, 'maintenance', 'administrate'),
  1313. 'manage_attachments' => array(false, 'maintenance', 'administrate'),
  1314. 'manage_smileys' => array(false, 'maintenance', 'administrate'),
  1315. 'edit_news' => array(false, 'maintenance', 'administrate'),
  1316. 'access_mod_center' => array(false, 'maintenance', 'moderate_general'),
  1317. 'moderate_forum' => array(false, 'member_admin', 'moderate_general'),
  1318. 'manage_membergroups' => array(false, 'member_admin', 'administrate'),
  1319. 'manage_permissions' => array(false, 'member_admin', 'administrate'),
  1320. 'manage_bans' => array(false, 'member_admin', 'administrate'),
  1321. 'send_mail' => array(false, 'member_admin', 'administrate'),
  1322. 'issue_warning' => array(false, 'member_admin', 'moderate_general'),
  1323. 'profile_view' => array(true, 'profile', 'view_basic_info', 'view_basic_info'),
  1324. 'profile_identity' => array(true, 'profile', 'edit_profile', 'moderate_general'),
  1325. 'profile_extra' => array(true, 'profile', 'edit_profile', 'moderate_general'),
  1326. 'profile_title' => array(true, 'profile', 'edit_profile', 'moderate_general'),
  1327. 'profile_remove' => array(true, 'profile', 'delete_account', 'moderate_general'),
  1328. 'profile_server_avatar' => array(false, 'profile', 'use_avatar'),
  1329. 'profile_upload_avatar' => array(false, 'profile', 'use_avatar'),
  1330. 'profile_remote_avatar' => array(false, 'profile', 'use_avatar'),
  1331. ),
  1332. 'board' => array(
  1333. 'moderate_board' => array(false, 'general_board', 'moderate'),
  1334. 'approve_posts' => array(false, 'general_board', 'moderate'),
  1335. 'post_new' => array(false, 'topic', 'make_posts'),
  1336. 'post_draft' => array(false, 'topic', 'make_posts'),
  1337. 'post_autosave_draft' => array(false, 'topic', 'make_posts'),
  1338. 'post_unapproved_topics' => array(false, 'topic', 'make_unapproved_posts'),
  1339. 'post_unapproved_replies' => array(true, 'topic', 'make_unapproved_posts', 'make_unapproved_posts'),
  1340. 'post_reply' => array(true, 'topic', 'make_posts', 'make_posts'),
  1341. 'merge_any' => array(false, 'topic', 'moderate'),
  1342. 'split_any' => array(false, 'topic', 'moderate'),
  1343. 'send_topic' => array(false, 'topic', 'moderate'),
  1344. 'make_sticky' => array(false, 'topic', 'moderate'),
  1345. 'move' => array(true, 'topic', 'moderate', 'moderate'),
  1346. 'lock' => array(true, 'topic', 'moderate', 'moderate'),
  1347. 'remove' => array(true, 'topic', 'modify', 'moderate'),
  1348. 'modify_replies' => array(false, 'topic', 'moderate'),
  1349. 'delete_replies' => array(false, 'topic', 'moderate'),
  1350. 'announce_topic' => array(false, 'topic', 'moderate'),
  1351. 'delete' => array(true, 'post', 'modify', 'moderate'),
  1352. 'modify' => array(true, 'post', 'modify', 'moderate'),
  1353. 'report_any' => array(false, 'post', 'participate'),
  1354. 'poll_view' => array(false, 'poll', 'participate'),
  1355. 'poll_vote' => array(false, 'poll', 'participate'),
  1356. 'poll_post' => array(false, 'poll', 'post_polls'),
  1357. 'poll_add' => array(true, 'poll', 'post_polls', 'moderate'),
  1358. 'poll_edit' => array(true, 'poll', 'modify', 'moderate'),
  1359. 'poll_lock' => array(true, 'poll', 'moderate', 'moderate'),
  1360. 'poll_remove' => array(true, 'poll', 'modify', 'moderate'),
  1361. 'mark_any_notify' => array(false, 'notification', 'notification'),
  1362. 'mark_notify' => array(false, 'notification', 'notification'),
  1363. 'view_attachments' => array(false, 'attachment', 'participate'),
  1364. 'post_unapproved_attachments' => array(false, 'attachment', 'make_unapproved_posts'),
  1365. 'post_attachment' => array(false, 'attachment', 'attach'),
  1366. ),
  1367. );
  1368. // All permission groups that will be shown in the left column on classic view.
  1369. $leftPermissionGroups = array(
  1370. 'general',
  1371. 'calendar',
  1372. 'maintenance',
  1373. 'member_admin',
  1374. 'topic',
  1375. 'post',
  1376. );
  1377. // We need to know what permissions we can't give to guests.
  1378. loadIllegalGuestPermissions();
  1379. // Some permissions are hidden if features are off.
  1380. $hiddenPermissions = array();
  1381. $relabelPermissions = array(); // Permissions to apply a different label to.
  1382. $relabelGroups = array(); // As above but for groups.
  1383. if (!in_array('cd', $context['admin_features']))
  1384. {
  1385. $hiddenPermissions[] = 'calendar_view';
  1386. $hiddenPermissions[] = 'calendar_post';
  1387. $hiddenPermissions[] = 'calendar_edit';
  1388. }
  1389. if (!in_array('w', $context['admin_features']))
  1390. $hiddenPermissions[] = 'issue_warning';
  1391. if (!in_array('k', $context['admin_features']))
  1392. $hiddenPermissions[] = 'karma_edit';
  1393. // Post moderation?
  1394. if (!$modSettings['postmod_active'])
  1395. {
  1396. $hiddenPermissions[] = 'approve_posts';
  1397. $hiddenPermissions[] = 'post_unapproved_topics';
  1398. $hiddenPermissions[] = 'post_unapproved_replies';
  1399. $hiddenPermissions[] = 'post_unapproved_attachments';
  1400. }
  1401. // If we show them on classic view we change the name.
  1402. else
  1403. {
  1404. // Relabel the topics permissions
  1405. $relabelPermissions['post_new'] = 'auto_approve_topics';
  1406. // Relabel the reply permissions
  1407. $relabelPermissions['post_reply'] = 'auto_approve_replies';
  1408. // Relabel the attachment permissions
  1409. $relabelPermissions['post_attachment'] = 'auto_approve_attachments';
  1410. }
  1411. // Are attachments enabled?
  1412. if (empty($modSettings['attachmentEnable']))
  1413. {
  1414. $hiddenPermissions[] = 'manage_attachments';
  1415. $hiddenPermissions[] = 'view_attachments';
  1416. $hiddenPermissions[] = 'post_unapproved_attachments';
  1417. $hiddenPermissions[] = 'post_attachment';
  1418. }
  1419. // Provide a practical way to modify permissions.
  1420. call_integration_hook('integrate_load_permissions', array(&$permissionGroups, &$permissionList, &$leftPermissionGroups, &$hiddenPermissions, &$relabelPermissions));
  1421. $context['permissions'] = array();
  1422. $context['hidden_permissions'] = array();
  1423. foreach ($permissionList as $permissionType => $permissionList)
  1424. {
  1425. $context['permissions'][$permissionType] = array(
  1426. 'id' => $permissionType,
  1427. 'view' => $loadType,
  1428. 'columns' => array()
  1429. );
  1430. foreach ($permissionList as $permission => $permissionArray)
  1431. {
  1432. // If this is a guest permission we don't do it if it's the guest group.
  1433. if (isset($context['group']['id']) && $context['group']['id'] == -1 && in_array($permission, $context['non_guest_permissions']))
  1434. continue;
  1435. // What groups will this permission be in?
  1436. $own_group = $permissionArray[($loadType == 'classic' ? 1 : 2)];
  1437. $any_group = $loadType == 'simple' && !empty($permissionArray[3]) ? $permissionArray[3] : ($loadType == 'simple' && $permissionArray[0] ? $permissionArray[2] : '');
  1438. // First, Do these groups actually exist - if not add them.
  1439. if (!isset($permissionGroups[$permissionType][$loadType][$own_group]))
  1440. $permissionGroups[$permissionType][$loadType][$own_group] = true;
  1441. if (!empty($any_group) && !isset($permissionGroups[$permissionType][$loadType][$any_group]))
  1442. $permissionGroups[$permissionType][$loadType][$any_group] = true;
  1443. // What column should this be located into?
  1444. $position = $loadType == 'classic' && !in_array($own_group, $leftPermissionGroups) ? 1 : 0;
  1445. // If the groups have not yet been created be sure to create them.
  1446. $bothGroups = array('own' => $own_group);
  1447. $bothGroups = array();
  1448. // For guests, just reset the array.
  1449. if (!isset($context['group']['id']) || !($context['group']['id'] == -1 && $any_group))
  1450. $bothGroups['own'] = $own_group;
  1451. if ($any_group)
  1452. {
  1453. $bothGroups['any'] = $any_group;
  1454. }
  1455. foreach ($bothGroups as $group)
  1456. if (!isset($context['permissions'][$permissionType]['columns'][$position][$group]))
  1457. $context['permissions'][$permissionType]['columns'][$position][$group] = array(
  1458. 'type' => $permissionType,
  1459. 'id' => $group,
  1460. 'name' => $loadType == 'simple' ? (isset($txt['permissiongroup_simple_' . $group]) ? $txt['permissiongroup_simple_' . $group] : '') : $txt['permissiongroup_' . $group],
  1461. 'icon' => isset($txt['permissionicon_' . $group]) ? $txt['permissionicon_' . $group] : $txt['permissionicon'],
  1462. 'help' => isset($txt['permissionhelp_' . $group]) ? $txt['permissionhelp_' . $group] : '',
  1463. 'hidden' => false,
  1464. 'permissions' => array()
  1465. );
  1466. // This is where we set up the permission dependant on the view.
  1467. if ($loadType == 'classic')
  1468. {
  1469. $context['permissions'][$permissionType]['columns'][$position][$own_group]['permissions'][$permission] = array(
  1470. 'id' => $permission,
  1471. 'name' => !isset($relabelPermissions[$permission]) ? $txt['permissionname_' . $permission] : $txt[$relabelPermissions[$permission]],
  1472. 'show_help' => isset($txt['permissionhelp_' . $permission]),
  1473. 'note' => isset($txt['permissionnote_' . $permission]) ? $txt['permissionnote_' . $permission] : '',
  1474. 'has_own_any' => $permissionArray[0],
  1475. 'own' => array(
  1476. 'id' => $permission . '_own',
  1477. 'name' => $permissionArray[0] ? $txt['permissionname_' . $permission . '_own'] : ''
  1478. ),
  1479. 'any' => array(
  1480. 'id' => $permission . '_any',
  1481. 'name' => $permissionArray[0] ? $txt['permissionname_' . $permission . '_any'] : ''
  1482. ),
  1483. 'hidden' => in_array($permission, $hiddenPermissions),
  1484. );
  1485. }
  1486. else
  1487. {
  1488. foreach ($bothGroups as $group_type => $group)
  1489. {
  1490. $context['permissions'][$permissionType]['columns'][$position][$group]['permissions'][$permission . ($permissionArray[0] ? '_' . $group_type : '')] = array(
  1491. 'id' => $permission . ($permissionArray[0] ? '_' . $group_type : ''),
  1492. 'name' => isset($txt['permissionname_simple_' . $permission . ($permissionArray[0] ? '_' . $group_type : '')]) ? $txt['permissionname_simple_' . $permission . ($permissionArray[0] ? '_' . $group_type : '')] : $txt['permissionname_' . $permission],
  1493. 'help_index' => isset($txt['permissionhelp_' . $permission]) ? 'permissionhelp_' . $permission : '',
  1494. 'hidden' => in_array($permission, $hiddenPermissions),
  1495. );
  1496. }
  1497. }
  1498. if (in_array($permission, $hiddenPermissions))
  1499. {
  1500. if ($permissionArray[0])
  1501. {
  1502. $context['hidden_permissions'][] = $permission . '_own';
  1503. $context['hidden_permissions'][] = $permission . '_any';
  1504. }
  1505. else
  1506. $context['hidden_permissions'][] = $permission;
  1507. }
  1508. }
  1509. ksort($context['permissions'][$permissionType]['columns']);
  1510. // Check we don't leave any empty groups - and mark hidden ones as such.
  1511. foreach ($context['permissions'][$permissionType]['columns'] as $column => $groups)
  1512. foreach ($groups as $id => $group)
  1513. {
  1514. if (empty($group['permissions']))
  1515. unset($context['permissions'][$permissionType]['columns'][$column][$id]);
  1516. else
  1517. {
  1518. $foundNonHidden = false;
  1519. foreach ($group['permissions'] as $permission)
  1520. if (empty($permission['hidden']))
  1521. $foundNonHidden = true;
  1522. if (!$foundNonHidden)
  1523. $context['permissions'][$permissionType]['columns'][$column][$id]['hidden'] = true;
  1524. }
  1525. }
  1526. }
  1527. }
  1528. /**
  1529. * Initialize a form with inline permissions settings.
  1530. * It loads a context variables for each permission.
  1531. * This function is used by several settings screens to set specific permissions.
  1532. * @internal
  1533. *
  1534. * @param array $permissions
  1535. * @param array $excluded_groups = array()
  1536. *
  1537. * @uses ManagePermissions language
  1538. * @uses ManagePermissions template.
  1539. */
  1540. function init_inline_permissions($permissions, $excluded_groups = array())
  1541. {
  1542. global $context, $txt, $modSettings, $smcFunc;
  1543. loadLanguage('ManagePermissions');
  1544. loadTemplate('ManagePermissions');
  1545. $context['can_change_permissions'] = allowedTo('manage_permissions');
  1546. // Nothing to initialize here.
  1547. if (!$context['can_change_permissions'])
  1548. return;
  1549. // Load the permission settings for guests
  1550. foreach ($permissions as $permission)
  1551. $context[$permission] = array(
  1552. -1 => array(
  1553. 'id' => -1,
  1554. 'name' => $txt['membergroups_guests'],
  1555. 'is_postgroup' => false,
  1556. 'status' => 'off',
  1557. ),
  1558. 0 => array(
  1559. 'id' => 0,
  1560. 'name' => $txt['membergroups_members'],
  1561. 'is_postgroup' => false,
  1562. 'status' => 'off',
  1563. ),
  1564. );
  1565. $request = $smcFunc['db_query']('', '
  1566. SELECT id_group, CASE WHEN add_deny = {int:denied} THEN {string:deny} ELSE {string:on} END AS status, permission
  1567. FROM {db_prefix}permissions
  1568. WHERE id_group IN (-1, 0)
  1569. AND permission IN ({array_string:permissions})',
  1570. array(
  1571. 'denied' => 0,
  1572. 'permissions' => $permissions,
  1573. 'deny' => 'deny',
  1574. 'on' => 'on',
  1575. )
  1576. );
  1577. while ($row = $smcFunc['db_fetch_assoc']($request))
  1578. $context[$row['permission']][$row['id_group']]['status'] = $row['status'];
  1579. $smcFunc['db_free_result']($request);
  1580. $request = $smcFunc['db_query']('', '
  1581. SELECT mg.id_group, mg.group_name, mg.min_posts, IFNULL(p.add_deny, -1) AS status, p.permission
  1582. FROM {db_prefix}membergroups AS mg
  1583. LEFT JOIN {db_prefix}permissions AS p ON (p.id_group = mg.id_group AND p.permission IN ({array_string:permissions}))
  1584. WHERE mg.id_group NOT IN (1, 3)
  1585. AND mg.id_parent = {int:not_inherited}' . (empty($modSettings['permission_enable_postgroups']) ? '
  1586. AND mg.min_posts = {int:min_posts}' : '') . '
  1587. ORDER BY mg.min_posts, CASE WHEN mg.id_group < {int:newbie_group} THEN mg.id_group ELSE 4 END, mg.group_name',
  1588. array(
  1589. 'not_inherited' => -2,
  1590. 'min_posts' => -1,
  1591. 'newbie_group' => 4,
  1592. 'permissions' => $permissions,
  1593. )
  1594. );
  1595. while ($row = $smcFunc['db_fetch_assoc']($request))
  1596. {
  1597. // Initialize each permission as being 'off' until proven otherwise.
  1598. foreach ($permissions as $permission)
  1599. if (!isset($context[$permission][$row['id_group']]))
  1600. $context[$permission][$row['id_group']] = array(
  1601. 'id' => $row['id_group'],
  1602. 'name' => $row['group_name'],
  1603. 'is_postgroup' => $row['min_posts'] != -1,
  1604. 'status' => 'off',
  1605. );
  1606. $context[$row['permission']][$row['id_group']]['status'] = empty($row['status']) ? 'deny' : ($row['status'] == 1 ? 'on' : 'off');
  1607. }
  1608. $smcFunc['db_free_result']($request);
  1609. // Some permissions cannot be given to certain groups. Remove the groups.
  1610. foreach ($excluded_groups as $group)
  1611. {
  1612. foreach ($permissions as $permission)
  1613. {
  1614. if (isset($context[$permission][$group]))
  1615. unset($context[$permission][$group]);
  1616. }
  1617. }
  1618. }
  1619. /**
  1620. * Show a collapsible box to set a specific permission.
  1621. * The function is called by templates to show a list of permissions settings.
  1622. * Calls the template function template_inline_permissions().
  1623. *
  1624. * @param string $permission
  1625. */
  1626. function theme_inline_permissions($permission)
  1627. {
  1628. global $context;
  1629. $context['current_permission'] = $permission;
  1630. $context['member_groups'] = $context[$permission];
  1631. template_inline_permissions();
  1632. }
  1633. /**
  1634. * Save the permissions of a form containing inline permissions.
  1635. * @internal
  1636. *
  1637. * @param array $permissions
  1638. */
  1639. function save_inline_permissions($permissions)
  1640. {
  1641. global $context, $smcFunc;
  1642. // No permissions? Not a great deal to do here.
  1643. if (!allowedTo('manage_permissions'))
  1644. return;
  1645. // Almighty session check, verify our ways.
  1646. checkSession();
  1647. validateToken('admin-mp');
  1648. // Check they can't do certain things.
  1649. loadIllegalPermissions();
  1650. $insertRows = array();
  1651. foreach ($permissions as $permission)
  1652. {
  1653. if (!isset($_POST[$permission]))
  1654. continue;
  1655. foreach ($_POST[$permission] as $id_group => $value)
  1656. {
  1657. if (in_array($value, array('on', 'deny')) && (empty($context['illegal_permissions']) || !in_array($permission, $context['illegal_permissions'])))
  1658. $insertRows[] = array((int) $id_group, $permission, $value == 'on' ? 1 : 0);
  1659. }
  1660. }
  1661. // Remove the old permissions...
  1662. $smcFunc['db_query']('', '
  1663. DELETE FROM {db_prefix}permissions
  1664. WHERE permission IN ({array_string:permissions})
  1665. ' . (empty($context['illegal_permissions']) ? '' : ' AND permission NOT IN ({array_string:illegal_permissions})'),
  1666. array(
  1667. 'illegal_permissions' => !empty($context['illegal_permissions']) ? $context['illegal_permissions'] : array(),
  1668. 'permissions' => $permissions,
  1669. )
  1670. );
  1671. // ...and replace them with new ones.
  1672. if (!empty($insertRows))
  1673. $smcFunc['db_insert']('insert',
  1674. '{db_prefix}permissions',
  1675. array('id_group' => 'int', 'permission' => 'string', 'add_deny' => 'int'),
  1676. $insertRows,
  1677. array('id_group', 'permission')
  1678. );
  1679. // Do a full child update.
  1680. updateChildPermissions(array(), -1);
  1681. // Just in case we cached this.
  1682. updateSettings(array('settings_updated' => time()));
  1683. }
  1684. /**
  1685. * Load permissions profiles.
  1686. */
  1687. function loadPermissionProfiles()
  1688. {
  1689. global $context, $txt, $smcFunc;
  1690. $request = $smcFunc['db_query']('', '
  1691. SELECT id_profile, profile_name
  1692. FROM {db_prefix}permission_profiles
  1693. ORDER BY id_profile',
  1694. array(
  1695. )
  1696. );
  1697. $context['profiles'] = array();
  1698. while ($row = $smcFunc['db_fetch_assoc']($request))
  1699. {
  1700. // Format the label nicely.
  1701. if (isset($txt['permissions_profile_' . $row['profile_name']]))
  1702. $name = $txt['permissions_profile_' . $row['profile_name']];
  1703. else
  1704. $name = $row['profile_name'];
  1705. $context['profiles'][$row['id_profile']] = array(
  1706. 'id' => $row['id_profile'],
  1707. 'name' => $name,
  1708. 'can_modify' => $row['id_profile'] == 1 || $row['id_profile'] > 4,
  1709. 'unformatted_name' => $row['profile_name'],
  1710. );
  1711. }
  1712. $smcFunc['db_free_result']($request);
  1713. }
  1714. /**
  1715. * Add/Edit/Delete profiles.
  1716. */
  1717. function EditPermissionProfiles()
  1718. {
  1719. global $context, $txt, $smcFunc;
  1720. // Setup the template, first for fun.
  1721. $context['page_title'] = $txt['permissions_profile_edit'];
  1722. $context['sub_template'] = 'edit_profiles';
  1723. // If we're creating a new one do it first.
  1724. if (isset($_POST['create']) && trim($_POST['profile_name']) != '')
  1725. {
  1726. checkSession();
  1727. validateToken('admin-mpp');
  1728. $_POST['copy_from'] = (int) $_POST['copy_from'];
  1729. $_POST['profile_name'] = $smcFunc['htmlspecialchars']($_POST['profile_name']);
  1730. // Insert the profile itself.
  1731. $smcFunc['db_insert']('',
  1732. '{db_prefix}permission_profiles',
  1733. array(
  1734. 'profile_name' => 'string',
  1735. ),
  1736. array(
  1737. $_POST['profile_name'],
  1738. ),
  1739. array('id_profile')
  1740. );
  1741. $profile_id = $smcFunc['db_insert_id']('{db_prefix}permission_profiles', 'id_profile');
  1742. // Load the permissions from the one it's being copied from.
  1743. $request = $smcFunc['db_query']('', '
  1744. SELECT id_group, permission, add_deny
  1745. FROM {db_prefix}board_permissions
  1746. WHERE id_profile = {int:copy_from}',
  1747. array(
  1748. 'copy_from' => $_POST['copy_from'],
  1749. )
  1750. );
  1751. $inserts = array();
  1752. while ($row = $smcFunc['db_fetch_assoc']($request))
  1753. $inserts[] = array($profile_id, $row['id_group'], $row['permission'], $row['add_deny']);
  1754. $smcFunc['db_free_result']($request);
  1755. if (!empty($inserts))
  1756. $smcFunc['db_insert']('insert',
  1757. '{db_prefix}board_permissions',
  1758. array('id_profile' => 'int', 'id_group' => 'int', 'permission' => 'string', 'add_deny' => 'int'),
  1759. $inserts,
  1760. array('id_profile', 'id_group', 'permission')
  1761. );
  1762. }
  1763. // Renaming?
  1764. elseif (isset($_POST['rename']))
  1765. {
  1766. checkSession();
  1767. validateToken('admin-mpp');
  1768. // Just showing the boxes?
  1769. if (!isset($_POST['rename_profile']))
  1770. $context['show_rename_boxes'] = true;
  1771. else
  1772. {
  1773. foreach ($_POST['rename_profile'] as $id => $value)
  1774. {
  1775. $value = $smcFunc['htmlspecialchars']($value);
  1776. if (trim($value) != '' && $id > 4)
  1777. $smcFunc['db_query']('', '
  1778. UPDATE {db_prefix}permission_profiles
  1779. SET profile_name = {string:profile_name}
  1780. WHERE id_profile = {int:current_profile}',
  1781. array(
  1782. 'current_profile' => (int) $id,
  1783. 'profile_name' => $value,
  1784. )
  1785. );
  1786. }
  1787. }
  1788. }
  1789. // Deleting?
  1790. elseif (isset($_POST['delete']) && !empty($_POST['delete_profile']))
  1791. {
  1792. checkSession('post');
  1793. validateToken('admin-mpp');
  1794. $profiles = array();
  1795. foreach ($_POST['delete_profile'] as $profile)
  1796. if ($profile > 4)
  1797. $profiles[] = (int) $profile;
  1798. // Verify it's not in use...
  1799. $request = $smcFunc['db_query']('', '
  1800. SELECT id_board
  1801. FROM {db_prefix}boards
  1802. WHERE id_profile IN ({array_int:profile_list})
  1803. LIMIT 1',
  1804. array(
  1805. 'profile_list' => $profiles,
  1806. )
  1807. );
  1808. if ($smcFunc['db_num_rows']($request) != 0)
  1809. fatal_lang_error('no_access', false);
  1810. $smcFunc['db_free_result']($request);
  1811. // Oh well, delete.
  1812. $smcFunc['db_query']('', '
  1813. DELETE FROM {db_prefix}permission_profiles
  1814. WHERE id_profile IN ({array_int:profile_list})',
  1815. array(
  1816. 'profile_list' => $profiles,
  1817. )
  1818. );
  1819. }
  1820. // Clearly, we'll need this!
  1821. loadPermissionProfiles();
  1822. // Work out what ones are in use.
  1823. $request = $smcFunc['db_query']('', '
  1824. SELECT id_profile, COUNT(id_board) AS board_count
  1825. FROM {db_prefix}boards
  1826. GROUP BY id_profile',
  1827. array(
  1828. )
  1829. );
  1830. while ($row = $smcFunc['db_fetch_assoc']($request))
  1831. if (isset($context['profiles'][$row['id_profile']]))
  1832. {
  1833. $context['profiles'][$row['id_profile']]['in_use'] = true;
  1834. $context['profiles'][$row['id_profile']]['boards'] = $row['board_count'];
  1835. $context['profiles'][$row['id_profile']]['boards_text'] = $row['board_count'] > 1 ? sprintf($txt['permissions_profile_used_by_many'], $row['board_count']) : $txt['permissions_profile_used_by_' . ($row['board_count'] ? 'one' : 'none')];
  1836. }
  1837. $smcFunc['db_free_result']($request);
  1838. // What can we do with these?
  1839. $context['can_edit_something'] = false;
  1840. foreach ($context['profiles'] as $id => $profile)
  1841. {
  1842. // Can't delete special ones.
  1843. $context['profiles'][$id]['can_edit'] = isset($txt['permissions_profile_' . $profile['unformatted_name']]) ? false : true;
  1844. if ($context['profiles'][$id]['can_edit'])
  1845. $context['can_edit_something'] = true;
  1846. // You can only delete it if you can edit it AND it's not in use.
  1847. $context['profiles'][$id]['can_delete'] = $context['profiles'][$id]['can_edit'] && empty($profile['in_use']) ? true : false;
  1848. }
  1849. createToken('admin-mpp');
  1850. }
  1851. /**
  1852. * This function updates the permissions of any groups based off this group.
  1853. *
  1854. * @param mixed $parents (array or int)
  1855. * @param mixed $profile = null, int expected
  1856. */
  1857. function updateChildPermissions($parents, $profile = null)
  1858. {
  1859. global $smcFunc;
  1860. // All the parent groups to sort out.
  1861. if (!is_array($parents))
  1862. $parents = array($parents);
  1863. // Find all the children of this group.
  1864. $request = $smcFunc['db_query']('', '
  1865. SELECT id_parent, id_group
  1866. FROM {db_prefix}membergroups
  1867. WHERE id_parent != {int:not_inherited}
  1868. ' . (empty($parents) ? '' : 'AND id_parent IN ({array_int:parent_list})'),
  1869. array(
  1870. 'parent_list' => $parents,
  1871. 'not_inherited' => -2,
  1872. )
  1873. );
  1874. $children = array();
  1875. $parents = array();
  1876. $child_groups = array();
  1877. while ($row = $smcFunc['db_fetch_assoc']($request))
  1878. {
  1879. $children[$row['id_parent']][] = $row['id_group'];
  1880. $child_groups[] = $row['id_group'];
  1881. $parents[] = $row['id_parent'];
  1882. }
  1883. $smcFunc['db_free_result']($request);
  1884. $parents = array_unique($parents);
  1885. // Not a sausage, or a child?
  1886. if (empty($children))
  1887. return false;
  1888. // First off, are we doing general permissions?
  1889. if ($profile < 1 || $profile === null)
  1890. {
  1891. // Fetch all the parent permissions.
  1892. $request = $smcFunc['db_query']('', '
  1893. SELECT id_group, permission, add_deny
  1894. FROM {db_prefix}permissions
  1895. WHERE id_group IN ({array_int:parent_list})',
  1896. array(
  1897. 'parent_list' => $parents,
  1898. )
  1899. );
  1900. $permissions = array();
  1901. while ($row = $smcFunc['db_fetch_assoc']($request))
  1902. foreach ($children[$row['id_group']] as $child)
  1903. $permissions[] = array($child, $row['permission'], $row['add_deny']);
  1904. $smcFunc['db_free_result']($request);
  1905. $smcFunc['db_query']('', '
  1906. DELETE FROM {db_prefix}permissions
  1907. WHERE id_group IN ({array_int:child_groups})',
  1908. array(
  1909. 'child_groups' => $child_groups,
  1910. )
  1911. );
  1912. // Finally insert.
  1913. if (!empty($permissions))
  1914. {
  1915. $smcFunc['db_insert']('insert',
  1916. '{db_prefix}permissions',
  1917. array('id_group' => 'int', 'permission' => 'string', 'add_deny' => 'int'),
  1918. $permissions,
  1919. array('id_group', 'permission')
  1920. );
  1921. }
  1922. }
  1923. // Then, what about board profiles?
  1924. if ($profile != -1)
  1925. {
  1926. $profileQuery = $profile === null ? '' : ' AND id_profile = {int:current_profile}';
  1927. // Again, get all the parent permissions.
  1928. $request = $smcFunc['db_query']('', '
  1929. SELECT id_profile, id_group, permission, add_deny
  1930. FROM {db_prefix}board_permissions
  1931. WHERE id_group IN ({array_int:parent_groups})
  1932. ' . $profileQuery,
  1933. array(
  1934. 'parent_groups' => $parents,
  1935. 'current_profile' => $profile !== null && $profile ? $profile : 1,
  1936. )
  1937. );
  1938. $permissions = array();
  1939. while ($row = $smcFunc['db_fetch_assoc']($request))
  1940. foreach ($children[$row['id_group']] as $child)
  1941. $permissions[] = array($child, $row['id_profile'], $row['permission'], $row['add_deny']);
  1942. $smcFunc['db_free_result']($request);
  1943. $smcFunc['db_query']('', '
  1944. DELETE FROM {db_prefix}board_permissions
  1945. WHERE id_group IN ({array_int:child_groups})
  1946. ' . $profileQuery,
  1947. array(
  1948. 'child_groups' => $child_groups,
  1949. 'current_profile' => $profile !== null && $profile ? $profile : 1,
  1950. )
  1951. );
  1952. // Do the insert.
  1953. if (!empty($permissions))
  1954. {
  1955. $smcFunc['db_insert']('insert',
  1956. '{db_prefix}board_permissions',
  1957. array('id_group' => 'int', 'id_profile' => 'int', 'permission' => 'string', 'add_deny' => 'int'),
  1958. $permissions,
  1959. array('id_group', 'id_profile', 'permission')
  1960. );
  1961. }
  1962. }
  1963. }
  1964. /**
  1965. * Load permissions someone cannot grant.
  1966. */
  1967. function loadIllegalPermissions()
  1968. {
  1969. global $context;
  1970. $context['illegal_permissions'] = array();
  1971. if (!allowedTo('admin_forum'))
  1972. $context['illegal_permissions'][] = 'admin_forum';
  1973. if (!allowedTo('manage_membergroups'))
  1974. $context['illegal_permissions'][] = 'manage_membergroups';
  1975. if (!allowedTo('manage_permissions'))
  1976. $context['illegal_permissions'][] = 'manage_permissions';
  1977. call_integration_hook('integrate_load_illegal_permissions');
  1978. }
  1979. /**
  1980. * Loads the permissions that can not be given to guests.
  1981. * Stores the permissions in $context['non_guest_permissions'].
  1982. */
  1983. function loadIllegalGuestPermissions()
  1984. {
  1985. global $context;
  1986. $context['non_guest_permissions'] = array(
  1987. 'delete_replies',
  1988. 'karma_edit',
  1989. 'poll_add_own',
  1990. 'pm_read',
  1991. 'pm_send',
  1992. 'profile_identity',
  1993. 'profile_extra',
  1994. 'profile_title',
  1995. 'profile_remove',
  1996. 'profile_server_avatar',
  1997. 'profile_upload_avatar',
  1998. 'profile_remote_avatar',
  1999. 'profile_view_own',
  2000. 'mark_any_notify',
  2001. 'mark_notify',
  2002. 'admin_forum',
  2003. 'manage_boards',
  2004. 'manage_attachments',
  2005. 'manage_smileys',
  2006. 'edit_news',
  2007. 'access_mod_center',
  2008. 'moderate_forum',
  2009. 'issue_warning',
  2010. 'manage_membergroups',
  2011. 'manage_permissions',
  2012. 'manage_bans',
  2013. 'move_own',
  2014. 'modify_replies',
  2015. 'send_mail',
  2016. 'approve_posts',
  2017. 'post_draft',
  2018. 'post_autosave_draft',
  2019. 'pm_draft',
  2020. 'pm_autosave_draft',
  2021. 'report_any',
  2022. 'make_sticky',
  2023. 'merge_any',
  2024. 'split_any',
  2025. 'lock_any',
  2026. 'move_any',
  2027. 'modify_any',
  2028. 'remove_any',
  2029. 'moderate_board',
  2030. 'poll_add_any',
  2031. 'poll_edit_any',
  2032. 'poll_lock_any',
  2033. 'poll_remove_any',
  2034. 'announce_topic'
  2035. );
  2036. call_integration_hook('integrate_load_illegal_guest_permissions');
  2037. }
  2038. /**
  2039. * Present a nice way of applying post moderation.
  2040. */
  2041. function ModifyPostModeration()
  2042. {
  2043. global $context, $txt, $smcFunc, $modSettings;
  2044. // Just in case.
  2045. checkSession('get');
  2046. $context['page_title'] = $txt['permissions_post_moderation'];
  2047. $context['sub_template'] = 'postmod_permissions';
  2048. $context['current_profile'] = isset($_REQUEST['pid']) ? (int) $_REQUEST['pid'] : 1;
  2049. // Load all the permission profiles.
  2050. loadPermissionProfiles();
  2051. // Mappings, our key => array(can_do_moderated, can_do_all)
  2052. $mappings = array(
  2053. 'new_topic' => array('post_new', 'post_unapproved_topics'),
  2054. 'replies_own' => array('post_reply_own', 'post_unapproved_replies_own'),
  2055. 'replies_any' => array('post_reply_any', 'post_unapproved_replies_any'),
  2056. 'attachment' => array('post_attachment', 'post_unapproved_attachments'),
  2057. );
  2058. call_integration_hook('integrate_post_moderation_mapping', array(&$mappings));
  2059. // Start this with the guests/members.
  2060. $context['profile_groups'] = array(
  2061. -1 => array(
  2062. 'id' => -1,
  2063. 'name' => $txt['membergroups_guests'],
  2064. 'color' => '',
  2065. 'new_topic' => 'disallow',
  2066. 'replies_own' => 'disallow',
  2067. 'replies_any' => 'disallow',
  2068. 'attachment' => 'disallow',
  2069. 'children' => array(),
  2070. ),
  2071. 0 => array(
  2072. 'id' => 0,
  2073. 'name' => $txt['membergroups_members'],
  2074. 'color' => '',
  2075. 'new_topic' => 'disallow',
  2076. 'replies_own' => 'disallow',
  2077. 'replies_any' => 'disallow',
  2078. 'attachment' => 'disallow',
  2079. 'children' => array(),
  2080. ),
  2081. );
  2082. // Load the groups.
  2083. $request = $smcFunc['db_query']('', '
  2084. SELECT id_group, group_name, online_color, id_parent
  2085. FROM {db_prefix}membergroups
  2086. WHERE id_group != {int:admin_group}
  2087. ' . (empty($modSettings['permission_enable_postgroups']) ? ' AND min_posts = {int:min_posts}' : '') . '
  2088. ORDER BY id_parent ASC',
  2089. array(
  2090. 'admin_group' => 1,
  2091. 'min_posts' => -1,
  2092. )
  2093. );
  2094. while ($row = $smcFunc['db_fetch_assoc']($request))
  2095. {
  2096. if ($row['id_parent'] == -2)
  2097. {
  2098. $context['profile_groups'][$row['id_group']] = array(
  2099. 'id' => $row['id_group'],
  2100. 'name' => $row['group_name'],
  2101. 'color' => $row['online_color'],
  2102. 'new_topic' => 'disallow',
  2103. 'replies_own' => 'disallow',
  2104. 'replies_any' => 'disallow',
  2105. 'attachment' => 'disallow',
  2106. 'children' => array(),
  2107. );
  2108. }
  2109. elseif (isset($context['profile_groups'][$row['id_parent']]))
  2110. $context['profile_groups'][$row['id_parent']]['children'][] = $row['group_name'];
  2111. }
  2112. $smcFunc['db_free_result']($request);
  2113. // What are the permissions we are querying?
  2114. $all_permissions = array();
  2115. foreach ($mappings as $perm_set)
  2116. $all_permissions = array_merge($all_permissions, $perm_set);
  2117. // If we're saving the changes then do just that - save them.
  2118. if (!empty($_POST['save_changes']) && ($context['current_profile'] == 1 || $context['current_profile'] > 4))
  2119. {
  2120. validateToken('admin-mppm');
  2121. // Start by deleting all the permissions relevant.
  2122. $smcFunc['db_query']('', '
  2123. DELETE FROM {db_prefix}board_permissions
  2124. WHERE id_profile = {int:current_profile}
  2125. AND permission IN ({array_string:permissions})
  2126. AND id_group IN ({array_int:profile_group_list})',
  2127. array(
  2128. 'profile_group_list' => array_keys($context['profile_groups']),
  2129. 'current_profile' => $context['current_profile'],
  2130. 'permissions' => $all_permissions,
  2131. )
  2132. );
  2133. // Do it group by group.
  2134. $new_permissions = array();
  2135. foreach ($context['profile_groups'] as $id => $group)
  2136. {
  2137. foreach ($mappings as $index => $data)
  2138. {
  2139. if (isset($_POST[$index][$group['id']]))
  2140. {
  2141. if ($_POST[$index][$group['id']] == 'allow')
  2142. {
  2143. // Give them both sets for fun.
  2144. $new_permissions[] = array($context['current_profile'], $group['id'], $data[0], 1);
  2145. $new_permissions[] = array($context['current_profile'], $group['id'], $data[1], 1);
  2146. }
  2147. elseif ($_POST[$index][$group['id']] == 'moderate')
  2148. $new_permissions[] = array($context['current_profile'], $group['id'], $data[1], 1);
  2149. }
  2150. }
  2151. }
  2152. // Insert new permissions.
  2153. if (!empty($new_permissions))
  2154. $smcFunc['db_insert']('',
  2155. '{db_prefix}board_permissions',
  2156. array('id_profile' => 'int', 'id_group' => 'int', 'permission' => 'string', 'add_deny' => 'int'),
  2157. $new_permissions,
  2158. array('id_profile', 'id_group', 'permission')
  2159. );
  2160. }
  2161. // Now get all the permissions!
  2162. $request = $smcFunc['db_query']('', '
  2163. SELECT id_group, permission, add_deny
  2164. FROM {db_prefix}board_permissions
  2165. WHERE id_profile = {int:current_profile}
  2166. AND permission IN ({array_string:permissions})
  2167. AND id_group IN ({array_int:profile_group_list})',
  2168. array(
  2169. 'profile_group_list' => array_keys($context['profile_groups']),
  2170. 'current_profile' => $context['current_profile'],
  2171. 'permissions' => $all_permissions,
  2172. )
  2173. );
  2174. while ($row = $smcFunc['db_fetch_assoc']($request))
  2175. {
  2176. foreach ($mappings as $key => $data)
  2177. {
  2178. foreach ($data as $index => $perm)
  2179. {
  2180. if ($perm == $row['permission'])
  2181. {
  2182. // Only bother if it's not denied.
  2183. if ($row['add_deny'])
  2184. {
  2185. // Full allowance?
  2186. if ($index == 0)
  2187. $context['profile_groups'][$row['id_group']][$key] = 'allow';
  2188. // Otherwise only bother with moderate if not on allow.
  2189. elseif ($context['profile_groups'][$row['id_group']][$key] != 'allow')
  2190. $context['profile_groups'][$row['id_group']][$key] = 'moderate';
  2191. }
  2192. }
  2193. }
  2194. }
  2195. }
  2196. $smcFunc['db_free_result']($request);
  2197. createToken('admin-mppm');
  2198. }
  2199. ?>