Version 3.0.5
This commit is contained in:
Neo committed
1 parent
19b38c7c74
commit
1d4720f3e2
3755 files changed
+508378
-664541
No files matched your search
@@ -0,0 +1,436 @@
|
||||
<?php
|
||||
|
||||
/**
|
||||
* Invision Power Services
|
||||
* IP.Board v3.0.5
|
||||
* ACP Restrictions
|
||||
* Last Updated: $Date: 2009-12-01 17:42:17 -0500 (Tue, 01 Dec 2009) $
|
||||
*
|
||||
* @author $Author: josh $
|
||||
* @copyright (c) 2001 - 2009 Invision Power Services, Inc.
|
||||
* @license http://www.iinvisionpower.com/community/board/license.html
|
||||
* @package Invision Power Board
|
||||
* @link http://www.iinvisionpower.com
|
||||
* @since 1st march 2002
|
||||
* @version $Revision: 5501 $
|
||||
*
|
||||
*/
|
||||
|
||||
|
||||
class class_permissions
|
||||
{
|
||||
/**#@+
|
||||
* Registry objects
|
||||
*
|
||||
* @access protected
|
||||
* @var object
|
||||
*/
|
||||
protected $registry;
|
||||
protected $DB;
|
||||
protected $settings;
|
||||
protected $request;
|
||||
protected $lang;
|
||||
protected $member;
|
||||
/**#@-*/
|
||||
|
||||
/**
|
||||
* Restrictions row
|
||||
*
|
||||
* @access public
|
||||
* @var array
|
||||
*/
|
||||
public $restrictions_row = array();
|
||||
|
||||
/**
|
||||
* Is restricted or not?
|
||||
*
|
||||
* @access protected
|
||||
* @var boolean
|
||||
*/
|
||||
protected $restricted = false;
|
||||
|
||||
/**
|
||||
* Return or error out flag
|
||||
*
|
||||
* @access public
|
||||
* @var boolean
|
||||
*/
|
||||
public $return = true;
|
||||
|
||||
/**
|
||||
* In dev flag (allow all)
|
||||
*
|
||||
* @access public
|
||||
* @var boolean
|
||||
*/
|
||||
public $in_dev = false;
|
||||
|
||||
public $editDetailsOnly = false;
|
||||
|
||||
/**
|
||||
* Constructor
|
||||
*
|
||||
* @access public
|
||||
* @param object ipsRegistry reference
|
||||
* @param array [Optional] Member permissions array to use (otherwise loads the current member's from the db)
|
||||
* @return void
|
||||
*/
|
||||
public function __construct( ipsRegistry $registry, $permissions=array() )
|
||||
{
|
||||
$this->registry = $registry;
|
||||
$this->DB = $this->registry->DB();
|
||||
$this->settings =& $this->registry->fetchSettings();
|
||||
$this->request =& $this->registry->fetchRequest();
|
||||
$this->lang = $this->registry->getClass('class_localization');
|
||||
$this->member = $this->registry->member();
|
||||
$this->memberData =& $this->registry->member()->fetchMemberData();
|
||||
|
||||
if( is_array($permissions) AND count($permissions) )
|
||||
{
|
||||
$this->restrictions_row = $permissions;
|
||||
$this->restricted = true;
|
||||
}
|
||||
else
|
||||
{
|
||||
// Mainly for login..
|
||||
if( !$this->memberData['member_id'] )
|
||||
{
|
||||
return false;
|
||||
}
|
||||
|
||||
// Support member + group
|
||||
|
||||
$member_restrictions = $this->DB->buildAndFetch( array( 'select' => '*', 'from' => 'admin_permission_rows', 'where' => "row_id_type='member' AND row_id=" . $this->memberData['member_id'] ) );
|
||||
|
||||
if( is_array($member_restrictions) AND count($member_restrictions) )
|
||||
{
|
||||
$this->restrictions_row = unserialize($member_restrictions['row_perm_cache']);
|
||||
$this->restricted = true;
|
||||
}
|
||||
else
|
||||
{
|
||||
$groups[] = $this->memberData['member_group_id'];
|
||||
|
||||
if( $this->memberData['mgroup_others'] )
|
||||
{
|
||||
$groups = array_merge( $groups, explode( ',', IPSText::cleanPermString( $this->memberData['mgroup_others'] ) ) );
|
||||
}
|
||||
|
||||
$this->DB->build( array( 'select' => '*', 'from' => 'admin_permission_rows', 'where' => "row_id_type='group' AND row_id IN(" . implode( ',', $groups ) . ")" ) );
|
||||
$this->DB->execute();
|
||||
|
||||
while( $r = $this->DB->fetch() )
|
||||
{
|
||||
$this->restrictions_row = array_merge( $this->restrictions_row, unserialize($r['row_perm_cache']) );
|
||||
$this->restricted = true;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/* Add in permissions for change my details, if we have restrictions, but not acess to that module */
|
||||
if( is_array( $this->restrictions_row ) && count( $this->restrictions_row ) )
|
||||
{
|
||||
$coreId = ipsRegistry::$applications[ 'core' ]['app_id'];
|
||||
|
||||
foreach( ipsRegistry::$modules['core'] as $module )
|
||||
{
|
||||
if( $module['sys_module_key'] == 'mycp' )
|
||||
{
|
||||
$this->mycpModule = $module['sys_module_id'];
|
||||
continue;
|
||||
}
|
||||
}
|
||||
|
||||
if( ! in_array( $coreId, $this->restrictions_row['applications'] ) )
|
||||
{
|
||||
$this->restrictions_row['applications'][] = $coreId;
|
||||
}
|
||||
|
||||
if( ! in_array( $this->mycpModule, $this->restrictions_row['modules'] ) )
|
||||
{
|
||||
$this->restrictions_row['modules'][] = $this->mycpModule;
|
||||
$this->editDetailsOnly = true;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Check Application Access
|
||||
*
|
||||
* Checks the permission for the member
|
||||
*
|
||||
* @access public
|
||||
* @param string [ Application Key ]
|
||||
* @return mixed Boolean member has access or not, or print error if $this->return is false
|
||||
*/
|
||||
public function checkForAppAccess( $app='' )
|
||||
{
|
||||
//-----------------------------------------
|
||||
// IN DEV check?
|
||||
//-----------------------------------------
|
||||
|
||||
if ( $this->in_dev and IN_DEV )
|
||||
{
|
||||
return TRUE;
|
||||
}
|
||||
|
||||
//-----------------------------------------
|
||||
// INIT
|
||||
//-----------------------------------------
|
||||
|
||||
$app = ( $app ) ? $app : ipsRegistry::$current_application;
|
||||
$app_id = ipsRegistry::$applications[ $app ]['app_id'];
|
||||
$return = $this->restricted ? false : true;
|
||||
|
||||
if( is_array($this->restrictions_row) AND count($this->restrictions_row) )
|
||||
{
|
||||
if( isset($this->restrictions_row['applications']) )
|
||||
{
|
||||
if( in_array( $app_id, $this->restrictions_row['applications'] ) )
|
||||
{
|
||||
$return = TRUE;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
//-----------------------------------------
|
||||
// I can haz teh permishuns?
|
||||
//-----------------------------------------
|
||||
|
||||
if ( $this->return )
|
||||
{
|
||||
return $return;
|
||||
}
|
||||
else
|
||||
{
|
||||
if ( $return === FALSE )
|
||||
{
|
||||
ipsRegistry::getClass('output')->showError( $this->lang->words['no_permission'], 1002 );
|
||||
}
|
||||
else
|
||||
{
|
||||
return $return;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Check Module Access
|
||||
*
|
||||
* Checks the permission for the member
|
||||
*
|
||||
* @access public
|
||||
* @param string [ Application Key ]
|
||||
* @param string [ Module Key ]
|
||||
* @return mixed Boolean has access or not, or outputs HTML error message
|
||||
*/
|
||||
public function checkForModuleAccess( $app='', $module='' )
|
||||
{
|
||||
//-----------------------------------------
|
||||
// IN DEV check?
|
||||
//-----------------------------------------
|
||||
|
||||
if ( $this->in_dev and IN_DEV )
|
||||
{
|
||||
return TRUE;
|
||||
}
|
||||
|
||||
$auto_access = array( 'ajax', 'api', 'search', 'palette', 'login' );
|
||||
|
||||
if ( in_array( $module, $auto_access ) )
|
||||
{
|
||||
return TRUE;
|
||||
}
|
||||
|
||||
//-----------------------------------------
|
||||
// INIT
|
||||
//-----------------------------------------
|
||||
|
||||
$app = ( $app ) ? $app : ipsRegistry::$current_application;
|
||||
$app_id = ipsRegistry::$applications[ $app ]['app_id'];
|
||||
$module = ( $module ) ? $module : ipsRegistry::$current_module;
|
||||
$mod_id = $this->_getModuleId( $app, $module );
|
||||
$return = $this->restricted ? false : true;
|
||||
|
||||
//-----------------------------------------
|
||||
// Access application?
|
||||
//-----------------------------------------
|
||||
|
||||
if( ! $this->checkForAppAccess( $app ) )
|
||||
{
|
||||
return false;
|
||||
}
|
||||
|
||||
if( is_array($this->restrictions_row) AND count($this->restrictions_row) )
|
||||
{
|
||||
if( isset($this->restrictions_row['modules']) )
|
||||
{
|
||||
if( in_array( $mod_id, $this->restrictions_row['modules'] ) )
|
||||
{
|
||||
$return = TRUE;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
//-----------------------------------------
|
||||
// I can haz teh permishuns?
|
||||
//-----------------------------------------
|
||||
|
||||
if ( $this->return )
|
||||
{
|
||||
return $return;
|
||||
}
|
||||
else
|
||||
{
|
||||
if ( $return === FALSE )
|
||||
{
|
||||
ipsRegistry::getClass('output')->showError( 'no_permission', 1003 );
|
||||
}
|
||||
else
|
||||
{
|
||||
return $return;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
/**
|
||||
* Grab the module id from the modules array
|
||||
*
|
||||
* @access private
|
||||
* @param string [ Application Key ]
|
||||
* @param string [ Module Key ]
|
||||
* @return integer Module id
|
||||
*/
|
||||
private function _getModuleId( $app='', $module='' )
|
||||
{
|
||||
$app = ( $app ) ? $app : ipsRegistry::$current_application;
|
||||
$app_id = ipsRegistry::$applications[ $app ]['app_id'];
|
||||
$module = ( $module ) ? $module : ipsRegistry::$current_module;
|
||||
$modules = ipsRegistry::$modules[ $app ];
|
||||
$mod_id = 0;
|
||||
|
||||
if( is_array($modules) AND count($modules) )
|
||||
{
|
||||
foreach( $modules as $module_id => $module_data )
|
||||
{
|
||||
if( $module_data['sys_module_key'] == $module AND $module_data['sys_module_admin'] == 1 )
|
||||
{
|
||||
$mod_id = $module_data['sys_module_id'];
|
||||
break;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
return $mod_id;
|
||||
}
|
||||
|
||||
/**
|
||||
* Wrapper for checkPermission to show the error message regardless of current status of $this->return
|
||||
*
|
||||
* Checks the permission for the member
|
||||
*
|
||||
* @access public
|
||||
* @param string Permission Key (from items array)
|
||||
* @param string [ Application Key ]
|
||||
* @param string [ Module Key ]
|
||||
* @return mixed True if has permission or outputs HTML error message if not
|
||||
*/
|
||||
public function checkPermissionAutoMsg( $key, $app='', $module='' )
|
||||
{
|
||||
$tmp = $this->return;
|
||||
$this->return = false;
|
||||
|
||||
$this->checkPermission( $key, $app, $module );
|
||||
|
||||
$this->return = $tmp;
|
||||
|
||||
return true;
|
||||
}
|
||||
|
||||
/**
|
||||
* Check Permission to a given key
|
||||
*
|
||||
* Checks the permission for the member
|
||||
*
|
||||
* @access public
|
||||
* @param string Permission Key (from items array)
|
||||
* @param string [ Application Key ]
|
||||
* @param string [ Module Key ]
|
||||
* @return mixed True if has permission or outputs HTML error message if not
|
||||
*/
|
||||
public function checkPermission( $key, $app='', $module='' )
|
||||
{
|
||||
//-----------------------------------------
|
||||
// IN DEV check?
|
||||
//-----------------------------------------
|
||||
|
||||
if ( $this->in_dev and IN_DEV )
|
||||
{
|
||||
return TRUE;
|
||||
}
|
||||
|
||||
//-----------------------------------------
|
||||
// INIT
|
||||
//-----------------------------------------
|
||||
|
||||
$app = ( $app ) ? $app : ipsRegistry::$current_application;
|
||||
$app_id = ipsRegistry::$applications[ $app ]['app_id'];
|
||||
$module = ( $module ) ? $module : ipsRegistry::$current_module;
|
||||
$mod_id = $this->_getModuleId( $app, $module );
|
||||
$return = $this->restricted ? false : true;
|
||||
|
||||
//-----------------------------------------
|
||||
// Check module, which will also check app
|
||||
//-----------------------------------------
|
||||
|
||||
if( ! $this->checkForModuleAccess( $app, $module ) )
|
||||
{
|
||||
$return = false;
|
||||
}
|
||||
|
||||
else if( $key )
|
||||
{
|
||||
//print "<pre>";print $key. ' '.$module . ' ' .$mod_id;
|
||||
//print_r($this->restrictions_row['modules']);
|
||||
//print_r($this->restrictions_row['items'][ $mod_id ]);
|
||||
//-----------------------------------------
|
||||
// And now for the item..
|
||||
//-----------------------------------------
|
||||
|
||||
if( is_array($this->restrictions_row) AND count($this->restrictions_row) )
|
||||
{
|
||||
if( isset($this->restrictions_row['items']) )
|
||||
{
|
||||
if( isset($this->restrictions_row['items'][ $mod_id ]) )
|
||||
{
|
||||
if( in_array( $key, $this->restrictions_row['items'][ $mod_id ] ) )
|
||||
{
|
||||
$return = TRUE;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
//-----------------------------------------
|
||||
// Returning.. or...
|
||||
//-----------------------------------------
|
||||
|
||||
if ( $this->return )
|
||||
{
|
||||
return $return;
|
||||
}
|
||||
else
|
||||
{
|
||||
if ( $return === FALSE )
|
||||
{
|
||||
ipsRegistry::getClass('output')->showError( 'no_permission', 1004 );
|
||||
}
|
||||
else
|
||||
{
|
||||
return $return;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
Reference in new issue
Block a user