[Sommaire] [Imprimer]

   1  <?php
   2  #CMS - CMS Made Simple
   3  #(c)2004 by Ted Kulp (wishy@users.sf.net)
   4  #This project's homepage is: http://cmsmadesimple.sf.net
   5  #
   6  #This program is free software; you can redistribute it and/or modify
   7  #it under the terms of the GNU General Public License as published by
   8  #the Free Software Foundation; either version 2 of the License, or
   9  #(at your option) any later version.
  10  #
  11  #This program is distributed in the hope that it will be useful,
  12  #but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  #MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  #GNU General Public License for more details.
  15  #You should have received a copy of the GNU General Public License
  16  #along with this program; if not, write to the Free Software
  17  #Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
  18  #
  19  #$Id: changegroupperm.php 3601 2006-12-20 21:04:54Z calguy1000 $
  20  
  21  $CMS_ADMIN_PAGE=1;
  22  
  23  require_once ("../include.php");
  24  
  25  check_login();
  26  $group_id= - 1;
  27  if (isset($_POST["group_id"])) $group_id = $_POST["group_id"];
  28  else if (isset($_GET["group_id"])) $group_id = $_GET["group_id"];
  29  
  30  $submitted= - 1;
  31  if (isset($_POST["submitted"])) $submitted = $_POST["submitted"];
  32  else if (isset($_GET["submitted"])) $submitted = $_GET["submitted"];
  33  
  34  $group_name="";
  35  
  36  if (isset($_POST["cancel"])) {
  37      redirect("topusers.php");
  38      return;
  39  }
  40  
  41  $userid = get_userid();
  42  $access = check_permission($userid, 'Modify Permissions');
  43  
  44  $message = '';
  45  
  46  include_once ("header.php");
  47  global $gCms;
  48  $db =& $gCms->GetDb();
  49  
  50  if (!$access) {
  51      echo "<div class=\"pageerrorcontainer\"><p class=\"pageerror\">".lang('noaccessto',array(lang('modifygrouppermissions')))."</p></div>";
  52  }
  53  else {
  54  
  55  ?>
  56  
  57  <div class="pagecontainer">
  58  <?php
  59      echo $themeObject->ShowHeader('grouppermissions',array($group_name));
  60      // always display the group pulldown
  61      global $gCms;
  62      $groupops =& $gCms->GetGroupOperations();
  63      $groups = $groupops->LoadGroups();
  64      if (count($groups) > 0)
  65          {
  66          echo '<form id="groupname" method="post" action="changegroupperm.php">';
  67          echo '<div class="pageoverflow">';
  68          echo '<p class="pagetext">'.lang('groupname').':</p>';
  69          echo '<p class="pageinput">';
  70          echo '<select name="group_id"';
  71          echo '><option value="-1">'.lang('selectgroup').'</option>';
  72          foreach ($groups as $onegroup)
  73              {
  74              echo '<option value="'.$onegroup->id.'"';
  75              if ($onegroup->id == $group_id)
  76                  {
  77                  echo ' selected="selected"';
  78                  }
  79              echo '>'.$onegroup->name.'</option>';
  80              }
  81          echo '</select>';
  82          echo '<input id="groupsubmit" type="submit" value="'.lang('selectgroup').'" /></p>';
  83          echo '</div></form>';
  84          }
  85      if ($group_id != -1 && $submitted == -1)
  86          {
  87          // a group has been selected
  88          echo '<form method="post" action="changegroupperm.php">';
  89          $query = "SELECT p.permission_id, p.permission_text, up.group_id FROM ".
  90              cms_db_prefix()."permissions p LEFT JOIN ".cms_db_prefix().
  91              "group_perms up ON p.permission_id = up.permission_id and group_id = ? ORDER BY p.permission_name";
  92  
  93          $result = $db->Execute($query,array($group_id));
  94          echo "<table cellspacing=\"0\" class=\"pagetable\">\n";
  95          echo '<thead>';
  96          echo "<tr>\n";
  97          echo "<th>".lang('permission')."</th>\n";
  98          echo "<th class=\"pagew10\">&nbsp;</th>\n";
  99          echo "</tr>\n";
 100          echo '</thead>';
 101          echo '<tbody>';
 102          $currow = "row1";
 103          while($result && $row = $result->FetchRow())
 104              {
 105              echo "<tr class=\"".$currow."\" onmouseover=\"this.className='".$currow.'hover'."';\" onmouseout=\"this.className='".$currow."';\">\n";
 106              echo '<td>'.$row['permission_text'].'</td>'."\n";
 107              echo '<td><input class="pagecheckbox" type="checkbox" name="permission-'.$row['permission_id'].'" value="1" '.(isset($row['group_id'])?" checked=\"checked\"":"").'/></td>'."\n";
 108              echo "</tr>\n";
 109  
 110              ($currow=="row1"?$currow="row2":$currow="row1");    
 111              }
 112          ?>
 113          </tbody>
 114          </table>
 115          <div class="pageoptions">
 116              <p class="pageoptions">
 117                  <input type="hidden" name="group_id" value="<?php echo $group_id?>" />
 118                  <input type="hidden" name="submitted" value="1" />
 119                  <input type="submit" name="changeperm" value="<?php echo lang('submit')?>" class="pagebutton" onmouseover="this.className='pagebuttonhover'" onmouseout="this.className='pagebutton'" />
 120                  <input type="submit" name="cancel" value="<?php echo lang('cancel')?>" class="pagebutton" onmouseover="this.className='pagebuttonhover'" onmouseout="this.className='pagebutton'" />
 121              </p>
 122          </div>
 123          </form>
 124          <?php
 125          }
 126      else if ($group_id != -1 && $submitted != -1)
 127          {
 128          // we have group permissions
 129          $query = "DELETE FROM ".cms_db_prefix()."group_perms WHERE group_id = ?";
 130          $result = $db->Execute($query, array($group_id));
 131          foreach ($_POST as $key=>$value)
 132              {
 133              if (strpos($key,"permission-") == 0 && strpos($key,"permission-") !== false)
 134                  {
 135                  $new_id = $db->GenID(cms_db_prefix()."group_perms_seq");
 136                  $query = "INSERT INTO ".cms_db_prefix().
 137                      "group_perms (group_perm_id, group_id, permission_id, create_date, modified_date) VALUES (".
 138                      $new_id.", ".$db->qstr($group_id).", ".$db->qstr(substr($key,11)).", ".
 139                      $db->DBTimeStamp(time()).", ".$db->DBTimeStamp(time()).")";
 140                  $result = $db->Execute($query);
 141                  }
 142              }
 143  
 144          audit($group_id, 'Group ID', lang('permissionschanged'));
 145          echo '<p class="pageheader">'.lang('permissionschanged').'</p>';
 146          }
 147  echo '</div>';
 148  }
 149  echo '<p class="pageback"><a class="pageback" href="'.$themeObject->BackUrl().'">&#171; '.lang('back').'</a></p>';
 150  
 151  include_once ("footer.php");
 152  
 153  # vim:ts=4 sw=4 noet
 154  ?>