One Hat Cyber Team

Edit File: Ui.php

<?php
/**
 * The Horde_Core_Perms_Ui class provides UI methods for the Horde permissions
 * system.
 *
 * Copyright 2001-2017 Horde LLC (http://www.horde.org/)
 *
 * See the enclosed file COPYING for license information (LGPL). If you
 * did not receive this file, see http://www.horde.org/licenses/lgpl21.
 *
 * @author   Chuck Hagenbuch <chuck@horde.org>
 * @category Horde
 * @package  Core
 */
class Horde_Core_Perms_Ui
{
    /**
     * The Horde_Perms object we're displaying UI stuff for.
     *
     * @var Horde_Perms_Base
     */
    protected $_perms;

/**
     * The Horde_Core_Perms object we're displaying UI stuff for.
     *
     * @var Horde_Core_Perms
     */
    protected $_corePerms;

/**
     * The Horde_Form object that will be used for displaying the edit form.
     *
     * @var Horde_Form
     */
    protected $_form = null;

/**
     * The Horde_Variables object used in Horde_Form.
     *
     * @var Horde_Variables
     */
    protected $_vars = null;

/**
     * The permission type.
     *
     * @var string
     */
    protected $_type = 'matrix';

/**
     * Constructor.
     *
     * @param Horde_Perms_Base $perms  The object to display UI stuff for.
     * @param Horde_Core_Perms_Base $corePerms
     */
    public function __construct(Horde_Perms_Base $perms,
                                Horde_Core_Perms $corePerms)
    {
        $this->_perms = $perms;
        $this->_corePerms = $corePerms;
    }

/**
     * Return a Horde_Tree representation of the permissions tree.
     *
     * @return string  The html showing the permissions as a Horde_Tree.
     * @throws Horde_Perms_Exception
     */
    public function renderTree($current = Horde_Perms::ROOT)
    {
        /* Get the perms tree. */
        $nodes = $this->_perms->getTree();

$perms_node = array('icon' => Horde_Themes::img('perms.png'));
        $add = Horde::url('admin/perms/addchild.php');
        $add_img = Horde_Themes_Image::tag('plus.png', array('alt' => Horde_Core_Translation::t("Add Permission")));
        $edit = Horde::url('admin/perms/edit.php');
        $delete = Horde::url('admin/perms/delete.php');
        $edit_img = Horde_Themes_Image::tag('edit.png', array('alt' => Horde_Core_Translation::t("Edit Permission")));
        $delete_img = Horde_Themes_Image::tag('delete.png', array('alt' => Horde_Core_Translation::t("Delete Permission")));
        $blank_img = Horde_Themes_Image::tag('blank.gif', array('attr' => array('width' => 16, 'height' => 16)));

/* Set up the tree. */
        $tree = $GLOBALS['injector']->getInstance('Horde_Core_Factory_Tree')->create('perms_ui', 'Javascript', array(
            'alternate' => true,
            'hideHeaders' => true
        ));
        $tree->setHeader(array(
            array(
                'class' => 'horde-tree-spacer'
            )
        ));

foreach ($nodes as $perm_id => $node) {
            $node_class = ($current == $perm_id)
                ? array('class' => 'selected')
                : array();
            if ($perm_id == Horde_Perms::ROOT) {
                $add_link = $add->add('perm_id', $perm_id)->link(array('class' => 'permsAdd', 'title' => Horde_Core_Translation::t("Add New Permission"))) . $add_img . '</a>';
                $base_node_params = array('icon' => Horde_Themes::img('administration.png'));

$tree->addNode(array(
                    'id' => $perm_id,
                    'label' => Horde_Core_Translation::t("All Permissions"),
                    'expanded' => true,
                    'params' => $base_node_params + $node_class,
                    'right' => array($add_link)
                ));
            } else {
                $parent_id = $this->_perms->getParent($node);

$perms_extra = array();
                $parents = explode(':', $node);

if (!in_array($parents[0], $GLOBALS['registry']->listApps(array('notoolbar', 'active', 'hidden')))) {
                    // This backend has permissions for an application that is
                    // not installed.  Perhaps the application has been removed
                    // or the backend is shared with other Horde installations.
                    // Skip this app and do not include it in the tree.
                    continue;
                }

try {
                    $app_perms = $this->_corePerms->getApplicationPermissions($parents[0]);
                } catch (Horde_Perms_Exception $e) {
                    $GLOBALS['notification']->push($e);
                    continue;
                }

if (isset($app_perms['tree']) &&
                    is_array(Horde_Array::getElement($app_perms['tree'], $parents))) {
                    $add_link = $add->add('perm_id', $perm_id)->link(array('class' => 'permsAdd', 'title' => Horde_Core_Translation::t("Add Child Permission"))) . $add_img . '</a>';
                    $perms_extra[] = $add_link;
                } else {
                    $perms_extra[] = $blank_img;
                }

$edit_link = $edit->add('perm_id', $perm_id)->link(array('class' => 'permsEdit', 'title' => Horde_Core_Translation::t("Edit Permission"))) . $edit_img . '</a>';
                $perms_extra[] = $edit_link;
                $delete_link = $delete->add('perm_id', $perm_id)->link(array('class' => 'permsDelete', 'title' => Horde_Core_Translation::t("Delete Permission"))) . $delete_img . '</a>';
                $perms_extra[] = $delete_link;
                $name = $this->_corePerms->getTitle($node);

$expanded = isset($nodes[$current]) &&
                    strpos($nodes[$current], $node) === 0 &&
                    $nodes[$current] != $node;
                $tree->addNode(array(
                    'id' => $perm_id,
                    'parent' => $parent_id,
                    'label' => $name,
                    'expanded' => $expanded,
                    'params' => $perms_node + $node_class,
                    'right' => $perms_extra
                ));
            }
        }

$tree->sort('label');

return $tree->renderTree();
    }

/**
     * Set an existing form object to use for the edit form.
     *
     * @param Horde_Form $form  An existing Horde_Form object to use.
     */
    public function setForm(&$form)
    {
        $this->_form = $form;
    }

/**
     * Set an existing vars object to use for the edit form.
     *
     * @param Horde_Variables $vars  An existing Horde_Variables object to
     *                               use.
     */
    public function setVars($vars)
    {
        $this->_vars = $vars;
    }

/**
     * Create a form to add a permission.
     *
     * @param Horde_Perms_Permission $permission  Permission
     * @param string $force_choice                If the permission to be
     *                                            added can be one of many,
     *                                            setting this will force the
     *                                            choice to one particular.
     */
    public function setupAddForm($permission, $force_choice = null)
    {
        /* Initialise form if required. */
        $this->_formInit();

$this->_form->setTitle(sprintf(Horde_Core_Translation::t("Add a child permission to \"%s\""), $this->_corePerms->getTitle($permission->getName())));
        $this->_form->setButtons(Horde_Core_Translation::t("Add"));
        $this->_vars->set('perm_id', $this->_perms->getPermissionId($permission));
        $this->_form->addHidden('', 'perm_id', 'text', false);

/* Set up the actual child adding field. */
        $child_perms = $this->_corePerms->getAvailable($permission->getName());
        if ($child_perms === false) {
            /* False, so no childs are to be added below this level. */
            $this->_form->addVariable(Horde_Core_Translation::t("Permission"), 'child', 'invalid', true, false, null, array(Horde_Core_Translation::t("No children can be added to this permission.")));
        } elseif (is_array($child_perms)) {
            if (!empty($force_choice)) {
                /* Choice array available, but choice being forced. */
                $this->_vars->set('child', $force_choice);
                $this->_form->addVariable(Horde_Core_Translation::t("Permissions"), 'child', 'enum', true, true, null, array($child_perms));
            } else {
                /* Choice array available, so set up enum field. */
                $prefix = $permission->getName() . ':';
                $length = strlen($prefix);
                foreach ($this->_perms->getTree() as $name) {
                    if (strpos($name, $prefix) === 0) {
                        unset($child_perms[substr($name, $length)]);
                    }
                }
                $this->_form->addVariable(Horde_Core_Translation::t("Permissions"), 'child', 'enum', true, false, null, array($child_perms));
            }
        }
    }

/**
     * Function to validate any add form input.
     *
     * @param array &$info  Ref to hold info from the form
     *
     * @return mixed  Either false if the form does not validate correctly or
     *                an array with all the form values.
     */
    public function validateAddForm(&$info)
    {
        if (!$this->_form->validate($this->_vars)) {
            return false;
        }

$this->_form->getInfo($this->_vars, $info);
        return true;
    }

/**
     * Create a permission editing form.
     *
     * @param Horde_Perms_Permission $permission  TODO
     */
    public function setupEditForm($permission)
    {
        /* Initialise form if required. */
        $this->_formInit();

$this->_form->setButtons(Horde_Core_Translation::t("Update"), true);
        $this->_vars->set('perm_id', $this->_perms->getPermissionId($permission));
        $this->_form->addHidden('', 'perm_id', 'text', false);

/* Get permission configuration. */
        $this->_type = $permission->get('type');
        $params = $this->_corePerms->getParams($permission->getName());

/* Default permissions. */
        $perm_val = $permission->getDefaultPermissions();
        $this->_form->setSection('default', Horde_Core_Translation::t("All Authenticated Users"), Horde_Themes_Image::tag('perms.png'), false);

/* We MUST use 'deflt' for the variable name because 'default' is a
         * reserved word in JavaScript. */
        if ($this->_type == 'matrix') {
            /* Set up the columns for the permissions matrix. */
            $cols = Horde_Perms::getPermsArray();

/* Define a single matrix row for default perms. */
            $matrix = array(Horde_Perms::integerToArray($perm_val));
            $this->_form->addVariable('', 'deflt', 'matrix', false, false, null, array($cols, array(0 => ''), $matrix));
        } else {
            $var = $this->_form->addVariable('', 'deflt', $this->_type, false, false, null, $params);
            $var->setDefault($perm_val);
        }

/* Guest permissions. */
        $perm_val = $permission->getGuestPermissions();
        $this->_form->setSection('guest', Horde_Core_Translation::t("Guest Permissions"), '', false);

if ($this->_type == 'matrix') {
            /* Define a single matrix row for guest perms. */
            $matrix = array(Horde_Perms::integerToArray($perm_val));
            $this->_form->addVariable('', 'guest', 'matrix', false, false, null, array($cols, array(0 => ''), $matrix));
        } else {
            $var = $this->_form->addVariable('', 'guest', $this->_type, false, false, null, $params);
            $var->setDefault($perm_val);
        }

/* Object creator permissions. */
        $perm_val = $permission->getCreatorPermissions();
        $this->_form->setSection('creator', Horde_Core_Translation::t("Creator Permissions"), Horde_Themes_Image::tag('user.png'), false);

if ($this->_type == 'matrix') {
            /* Define a single matrix row for creator perms. */
            $matrix = array(Horde_Perms::integerToArray($perm_val));
            $this->_form->addVariable('', 'creator', 'matrix', false, false, null, array($cols, array(0 => ''), $matrix));
        } else {
            $var = $this->_form->addVariable('', 'creator', $this->_type, false, false, null, $params);
            $var->setDefault($perm_val);
        }

/* Users permissions. */
        $perm_val = $permission->getUserPermissions();
        $this->_form->setSection('users', Horde_Core_Translation::t("Individual Users"), Horde_Themes_Image::tag('user.png'), false);
        $auth = $GLOBALS['injector']->getInstance('Horde_Core_Factory_Auth')->create();
        $user_list = array();
        if ($auth->hasCapability('list')) {
            /* The auth driver has list capabilities so set up an array which
             * the matrix field type will recognise to set up an enum box for
             * adding new users to the permissions matrix. */
            $new_users = array();

try {
                $user_list = $auth->listNames();
                foreach ($user_list as $user => $name) {
                    if (!isset($perm_val[$user])) {
                        $new_users[$user] = $name;
                    }
                }
            } catch (Horde_Auth_Exception $e) {
                $new_users = true;
            }
        } else {
            /* No list capabilities, setting to true so that the matrix field
             * type will offer a text input box for adding new users. */
            $new_users = true;
        }

if ($this->_type == 'matrix') {
            /* Set up the matrix array, breaking up each permission integer
             * into an array.  The keys of this array will be the row
             * headers. */
            $rows = array();
            $matrix = array();
            foreach ($perm_val as $u_id => $u_perms) {
                $rows[$u_id] = isset($user_list[$u_id]) ? $user_list[$u_id] : $u_id;
                $matrix[$u_id] = Horde_Perms::integerToArray($u_perms);
            }
            $this->_form->addVariable('', 'u', 'matrix', false, false, null, array($cols, $rows, $matrix, $new_users));
        } else {
            if ($new_users) {
                if (is_array($new_users)) {
                    $u_n = Horde_Util::getFormData('u_n');
                    $u_n = empty($u_n['u']) ? null : $u_n['u'];
                    $user_html = '<select name="u_n[u]"><option value="">' . Horde_Core_Translation::t("-- select --") . '</option>';
                    foreach ($new_users as $new_user => $name) {
                        $user_html .= '<option value="' . $new_user . '"';
                        $user_html .= $u_n == $new_user ? ' selected="selected"' : '';
                        $user_html .= '>' . htmlspecialchars($name) . '</option>';
                    }
                    $user_html .= '</select>';
                } else {
                    $user_html = '<input type="text" name="u_n[u]" />';
                }
                $this->_form->addVariable($user_html, 'u_n[v]', $this->_type, false, false, null, $params);
            }
            foreach ($perm_val as $u_id => $u_perms) {
                $var = $this->_form->addVariable($u_id, 'u_v[' . $u_id . ']', $this->_type, false, false, null, $params);
                $var->setDefault($u_perms);
            }
        }

/* Groups permissions. */
        $perm_val = $permission->getGroupPermissions();
        $this->_form->setSection('groups', Horde_Core_Translation::t("Groups"), Horde_Themes_Image::tag('group.png'), false);
        try {
            $group_list = $GLOBALS['injector']
                ->getInstance('Horde_Group')
                ->listAll();
        } catch (Horde_Group_Exception $e) {
            $GLOBALS['notification']->push($e);
            $group_list = array();
        }

if (!empty($group_list)) {
            /* There is an available list of groups so set up an array which
             * the matrix field type will recognise to set up an enum box for
             * adding new groups to the permissions matrix. */
            $new_groups = array();
            foreach ($group_list as $groupId => $group) {
                if (!isset($perm_val[$groupId])) {
                    $new_groups[$groupId] = $group;
                }
            }
        } else {
            /* Do not offer a text box to add new groups. */
            $new_groups = false;
        }

if ($this->_type == 'matrix') {
            /* Set up the matrix array, break up each permission integer into
             * an array. The keys of this array will be the row headers. */
            $rows = array();
            $matrix = array();
            foreach ($perm_val as $g_id => $g_perms) {
                $rows[$g_id] = isset($group_list[$g_id]) ? $group_list[$g_id] : $g_id;
                $matrix[$g_id] = Horde_Perms::integerToArray($g_perms);
            }
            $this->_form->addVariable('', 'g', 'matrix', false, false, null, array($cols, $rows, $matrix, $new_groups));
        } else {
            if ($new_groups) {
                if (is_array($new_groups)) {
                    $g_n = Horde_Util::getFormData('g_n');
                    $g_n = empty($g_n['g']) ? null : $g_n['g'];
                    $group_html = '<select name="g_n[g]"><option value="">' . Horde_Core_Translation::t("-- select --") . '</option>';
                    foreach ($new_groups as $groupId => $group) {
                        $group_html .= '<option value="' . $groupId . '"';
                        $group_html .= $g_n == $groupId ? ' selected="selected"' : '';
                        $group_html .= '>' . htmlspecialchars($group) . '</option>';
                    }
                    $group_html .= '</select>';
                } else {
                    $group_html = '<input type="text" name="g_n[g]" />';
                }
                $this->_form->addVariable($group_html, 'g_n[v]', $this->_type, false, false, null, $params);
            }
            foreach ($perm_val as $g_id => $g_perms) {
                $var = $this->_form->addVariable(isset($group_list[$g_id]) ? $group_list[$g_id] : $g_id, 'g_v[' . $g_id . ']', $this->_type, false, false, null, $params);
                $var->setDefault($g_perms);
            }
        }

/* Set form title. */
        $this->_form->setTitle(sprintf(Horde_Core_Translation::t("Edit permissions for \"%s\""), $this->_corePerms->getTitle($permission->getName())));
    }

/**
     * Function to validate any edit form input.
     *
     * @return mixed  Either false if the form does not validate correctly or
     *                an array with all the form values.
     */
    public function validateEditForm(&$info)
    {
        if (!$this->_form->validate($this->_vars)) {
            return false;
        }

$this->_form->getInfo($this->_vars, $info);

if ($this->_type == 'matrix') {
            /* Collapse the array for default/guest/creator. */
            $info['deflt'] = isset($info['deflt'][0])
                ? $info['deflt'][0]
                : null;
            $info['guest'] = isset($info['guest'][0])
                ? $info['guest'][0]
                : null;
            $info['creator'] = isset($info['creator'][0])
                ? $info['creator'][0]
                : null;
        } else {
            $u_n = $this->_vars->get('u_n');
            $info['u'] = array();
            if (!empty($u_n['u'])) {
                $info['u'][$u_n['u']] = $info['u_n']['v'];
            }
            unset($info['u_n']);
            if (isset($info['u_v'])) {
                $info['u'] += $info['u_v'];
                unset($info['u_v']);
            }
            $g_n = $this->_vars->get('g_n');
            $info['g'] = array();
            if (!empty($g_n['g'])) {
                $info['g'][$g_n['g']] = $info['g_n']['v'];
            }
            unset($info['g_n']);
            if (isset($info['g_v'])) {
                $info['g'] += $info['g_v'];
                unset($info['g_v']);
            }
        }
        $info['default'] = $info['deflt'];
        unset($info['deflt']);

return true;
    }

/**
     * Create a permission deleting form.
     *
     * @param Horde_Perms_Permission $permission  A permissions object.
     */
    public function setupDeleteForm($permission)
    {
        /* Initialise form if required. */
        $this->_formInit();

$this->_form->setTitle(sprintf(Horde_Core_Translation::t("Delete permissions for \"%s\""), $this->_corePerms->getTitle($permission->getName())));
        $this->_form->setButtons(array(array('class' => 'horde-delete', 'value' => Horde_Core_Translation::t("Delete")), array('class' => 'horde-cancel', 'value' => Horde_Core_Translation::t("Do not delete"))));
        $this->_form->addHidden('', 'perm_id', 'text', false);
        $this->_form->addVariable(sprintf(Horde_Core_Translation::t("Delete permissions for \"%s\" and any sub-permissions?"), $this->_corePerms->getTitle($permission->getName())), 'prompt', 'description', false);
    }

/**
     * Function to validate any delete form input.
     *
     * @param TODO $info  TODO
     *
     * @return mixed  If the delete button confirmation has been pressed return
     *                true, if any other submit button has been pressed return
     *                false. If form did not validate return null.
     */
    public function validateDeleteForm(&$info)
    {
        $form_submit = $this->_vars->get('submitbutton');

if ($form_submit == Horde_Core_Translation::t("Delete")) {
            if ($this->_form->validate($this->_vars)) {
                $this->_form->getInfo($this->_vars, $info);
                return true;
            }
        } elseif (!empty($form_submit)) {
            return false;
        }

return null;
    }

/**
     * Renders the edit form.
     */
    public function renderForm($form_script = 'edit.php')
    {
        $renderer = new Horde_Form_Renderer();
        $this->_form->renderActive($renderer, $this->_vars, $form_script, 'post');
    }

/**
     * Creates any form objects if they have not been initialised yet.
     */
    protected function _formInit()
    {
        if (is_null($this->_vars)) {
            /* No existing vars set, get them now. */
            $this->_vars = Horde_Variables::getDefaultVariables();
        }

if (!($this->_form instanceof Horde_Form)) {
            /* No existing valid form object set so set up a new one. */
            $this->_form = new Horde_Form($this->_vars);
        }
    }

}