TYPO3 Core

<?php

########################################################################

# Extension Manager/Repository config file for ext "perm".

#

# Auto generated 16-07-2010 14:16

#

# Manual updates:

# Only the data in the array - everything else is removed by next

# writing. "version" and "dependencies" must not be touched!

########################################################################

$EM_CONF[$_EXTKEY] = array(

'title' => 'Web>Access',

'description' => 'Page editing permissions',

'category' => 'module',

'shy' => 1,

'dependencies' => 'cms',

'conflicts' => '',

'priority' => '',

'loadOrder' => '',

'module' => 'view',

'doNotLoadInFE' => 1,

'state' => 'stable',

'internal' => 0,

'uploadfolder' => 0,

'createDirs' => '',

'modify_tables' => '',

'clearCacheOnLoad' => 0,

'lockType' => '',

'author' => 'Kasper Skaarhoj',

'author_email' => 'kasperYYYY@typo3.com',

'author_company' => '',

'CGLcompliance' => '',

'CGLcompliance_note' => '',

'version' => '1.0.0',

'_md5_values_when_last_written' => 'a:8:{s:12:"ext_icon.gif";s:4:"c751";s:14:"ext_tables.php";s:4:"be16";s:35:"mod1/class.sc_mod_web_perm_ajax.php";s:4:"dd67";s:14:"mod1/clear.gif";s:4:"cc11";s:13:"mod1/conf.php";s:4:"8552";s:14:"mod1/index.php";s:4:"77bc";s:13:"mod1/perm.gif";s:4:"c751";s:12:"mod1/perm.js";s:4:"cc40";}',

'constraints' => array(

'depends' => array(

'cms' => '',

'php' => '5.1.0-0.0.0',

'typo3' => '4.5.0-0.0.0',

),

'conflicts' => array(

),

'suggests' => array(

),

),

'suggests' => array(

),

);

?>

<?php

if (!defined ('TYPO3_MODE')) {

die ('Access denied.');

}

if (TYPO3_MODE === 'BE') {

t3lib_extMgm::addModule('web', 'perm', 'after:layout', t3lib_extMgm::extPath($_EXTKEY) . 'mod1/');

$TYPO3_CONF_VARS['BE']['AJAX']['SC_mod_web_perm_ajax::dispatch'] = t3lib_extMgm::extPath($_EXTKEY) . 'mod1/class.sc_mod_web_perm_ajax.php:SC_mod_web_perm_ajax->dispatch';

}

?>

<?php

/***************************************************************

* Copyright notice

*

* (c) 2007-2010 mehrwert (typo3@mehrwert.de)

* All rights reserved

*

* This script is part of the TYPO3 project. The TYPO3 project is

* free software; you can redistribute it and/or modify

* it under the terms of the GNU General Public License as published by

* the Free Software Foundation; either version 2 of the License, or

* (at your option) any later version.

*

* The GNU General Public License can be found at

* http://www.gnu.org/copyleft/gpl.html.

*

* This script is distributed in the hope that it will be useful,

* but WITHOUT ANY WARRANTY; without even the implied warranty of

* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

* GNU General Public License for more details.

*

* This copyright notice MUST APPEAR in all copies of the script!

***************************************************************/

/**

* [CLASS/FUNCTION INDEX of SCRIPT]

*

*

*

* 66: class SC_mod_web_perm_ajax

*

* SECTION: Init method for this class

* 97: public function __construct()

*

* SECTION: Main dispatcher method

* 143: public function dispatch($params = array(), TYPO3AJAX &$ajaxObj = null)

*

* SECTION: Helpers for this script

* 259: private function renderUserSelector($page, $ownerUid, $username = '')

* 302: private function renderGroupSelector($page, $groupUid, $groupname = '')

* 350: private function renderOwnername($page, $ownerUid, $username)

* 363: private function renderGroupname($page, $groupUid, $groupname)

* 375: private function renderToggleEditLock($page, $editlockstate)

* 389: private function renderPermissions($int, $pageId = 0, $who = 'user')

*

* TOTAL FUNCTIONS: 8

* (This index is automatically created/updated by the extension "extdeveval")

*

*/

$GLOBALS['LANG']->includeLLFile('EXT:lang/locallang_mod_web_perm.xml');

/**

* This class extends the permissions module in the TYPO3 Backend to provide

* convenient methods of editing of page permissions (including page ownership

* (user and group)) via new TYPO3AJAX facility

*

* @author Andreas Kundoch <typo3@mehrwert.de>

* @version $Id: class.sc_mod_web_perm_ajax.php 7905 2010-06-13 14:42:33Z ohader $

* @package TYPO3

* @subpackage core

* @license GPL

* @since TYPO3_4-2

*/

class SC_mod_web_perm_ajax {

protected $conf = array(); // The local configuration array

protected $backPath = '../../../'; // TYPO3 Back Path

/********************************************

*

* Init method for this class

*

********************************************/

/**

* The constructor of this class

*

* @return Void

*/

public function __construct() {

// Configuration, variable assignment

$this->conf['page'] = t3lib_div::_POST('page');

$this->conf['who'] = t3lib_div::_POST('who');

$this->conf['mode'] = t3lib_div::_POST('mode');

$this->conf['bits'] = intval(t3lib_div::_POST('bits'));

$this->conf['permissions'] = intval(t3lib_div::_POST('permissions'));

$this->conf['action'] = t3lib_div::_POST('action');

$this->conf['ownerUid'] = intval(t3lib_div::_POST('ownerUid'));

$this->conf['username'] = t3lib_div::_POST('username');

$this->conf['groupUid'] = intval(t3lib_div::_POST('groupUid'));

$this->conf['groupname'] = t3lib_div::_POST('groupname');

$this->conf['editLockState'] = intval(t3lib_div::_POST('editLockState'));

// User: Replace some parts of the posted values

$this->conf['new_owner_uid'] = intval(t3lib_div::_POST('newOwnerUid'));

$temp_owner_data = t3lib_BEfunc::getUserNames(

'username, uid',

' AND uid = ' . $this->conf['new_owner_uid']

);

$this->conf['new_owner_username'] = htmlspecialchars(

$temp_owner_data[$this->conf['new_owner_uid']]['username']

);

// Group: Replace some parts of the posted values

$this->conf['new_group_uid'] = intval(t3lib_div::_POST('newGroupUid'));

$temp_group_data = t3lib_BEfunc::getGroupNames(

'title,uid',

' AND uid = ' . $this->conf['new_group_uid']

);

$this->conf['new_group_username'] = htmlspecialchars(

$temp_group_data[$this->conf['new_group_uid']]['title']

);

}

/********************************************

*

* Main dispatcher method

*

********************************************/

/**

* The main dispatcher function. Collect data and prepare HTML output.

*

* @param array $params: array of parameters from the AJAX interface, currently unused

* @param TYPO3AJAX $ajaxObj: object of type TYPO3AJAX

* @return Void

*/

public function dispatch($params = array(), TYPO3AJAX &$ajaxObj = null) {

$content = '';

// Basic test for required value

if ($this->conf['page'] > 0) {

// Init TCE for execution of update

$tce = t3lib_div::makeInstance('t3lib_TCEmain');

$tce->stripslashes_values = 1;

// Determine the scripts to execute

switch ($this->conf['action']) {

// Return the select to change the owner (BE user) of the page

case 'show_change_owner_selector':

$content = $this->renderUserSelector($this->conf['page'], $this->conf['ownerUid'], $this->conf['username']);

break;

// Change the owner and return the new owner HTML snippet

case 'change_owner':

if (is_int($this->conf['new_owner_uid'])) {

// Prepare data to change

$data = array();

$data['pages'][$this->conf['page']]['perms_userid'] = $this->conf['new_owner_uid'];

// Execute TCE Update

$tce->start($data, array());

$tce->process_datamap();

$content = $this->renderOwnername($this->conf['page'], $this->conf['new_owner_uid'], $this->conf['new_owner_username']);

} else {

$ajaxObj->setError('An error occured: No page owner uid specified.');

}

break;

// Return the select to change the group (BE group) of the page

case 'show_change_group_selector':

$content = $this->renderGroupSelector($this->conf['page'], $this->conf['groupUid'], $this->conf['groupname']);

break;

// Change the group and return the new group HTML snippet

case 'change_group':

if (is_int($this->conf['new_group_uid'])) {

// Prepare data to change

$data = array();

$data['pages'][$this->conf['page']]['perms_groupid'] = $this->conf['new_group_uid'];

// Execute TCE Update

$tce->start($data, array());

$tce->process_datamap();

$content = $this->renderGroupname($this->conf['page'], $this->conf['new_group_uid'], $this->conf['new_group_username']);

} else {

$ajaxObj->setError('An error occured: No page group uid specified.');

}

break;

// Change the group and return the new group HTML snippet

case 'toggle_edit_lock':

// Prepare data to change

$data = array();

$data['pages'][$this->conf['page']]['editlock'] = ($this->conf['editLockState'] === 1 ? 0 : 1);

// Execute TCE Update

$tce->start($data, array());

$tce->process_datamap();

$content = $this->renderToggleEditLock($this->conf['page'], $data['pages'][$this->conf['page']]['editlock']);

break;

// The script defaults to change permissions

default:

if ($this->conf['mode'] == 'delete') {

$this->conf['permissions'] = intval($this->conf['permissions'] - $this->conf['bits']);

} else {

$this->conf['permissions'] = intval($this->conf['permissions'] + $this->conf['bits']);

}

// Prepare data to change

$data = array();

$data['pages'][$this->conf['page']]['perms_'.$this->conf['who']] = $this->conf['permissions'];

// Execute TCE Update

$tce->start($data, array());

$tce->process_datamap();

$content = $this->renderPermissions($this->conf['permissions'], $this->conf['page'], $this->conf['who']);

}

} else {

$ajaxObj->setError('This script cannot be called directly.');

}

$ajaxObj->addContent($this->conf['page'].'_'.$this->conf['who'], $content);

}

/********************************************

*

* Helpers for this script

*

********************************************/

/**

* Generate the user selector element

*

* @param Integer $page: The page id to change the user for

* @param Integer $ownerUid: The page owner uid

* @param String $username: The username to display

* @return String The html select element

*/

protected function renderUserSelector($page, $ownerUid, $username = '') {

// Get usernames

$beUsers = t3lib_BEfunc::getUserNames();

// Init groupArray

$groups = array();

if (!$GLOBALS['BE_USER']->isAdmin()) {

$beUsers = t3lib_BEfunc::blindUserNames($beUsers, $groups, 1);

}

// Owner selector:

$options = '';

// Loop through the users

foreach ($beUsers as $uid => $row) {

$selected = ($uid == $ownerUid ? ' selected="selected"' : '');

$options .= '<option value="'.$uid.'"'.$selected.'>'.htmlspecialchars($row['username']).'</option>';

}

$elementId = 'o_'.$page;

$options = '<option value="0"></option>'.$options;

$selector = '<select name="new_page_owner" id="new_page_owner">'.$options.'</select>';

$saveButton = '<a onclick="WebPermissions.changeOwner('.$page.', '.$ownerUid.', \''.$elementId.'\');" title="Change owner">' . t3lib_iconWorks::getSpriteIcon('actions-document-save') . '</a>';

$cancelButton = '<a onclick="WebPermissions.restoreOwner('.$page.', '.$ownerUid.', \''.($username == '' ? '<span class=not_set>[not set]</span>' : htmlspecialchars($username)).'\', \''.$elementId.'\');" title="Cancel">' . t3lib_iconWorks::getSpriteIcon('actions-document-close') . '</a>';

$ret = $selector.$saveButton.$cancelButton;

return $ret;

}

/**

* Generate the group selector element

*

* @param Integer $page: The page id to change the user for

* @param Integer $groupUid: The page group uid

* @param String $username: The username to display

* @return String The html select element

*/

protected function renderGroupSelector($page, $groupUid, $groupname = '') {

// Get usernames

$beGroups = t3lib_BEfunc::getListGroupNames('title,uid');

$beGroupKeys = array_keys($beGroups);

$beGroupsO = $beGroups = t3lib_BEfunc::getGroupNames();

if (!$GLOBALS['BE_USER']->isAdmin()) {

$beGroups = t3lib_BEfunc::blindGroupNames($beGroupsO, $beGroupKeys, 1);

}

// Group selector:

$options = '';

// flag: is set if the page-groupid equals one from the group-list

$userset = 0;

// Loop through the groups

foreach ($beGroups as $uid => $row) {

if ($uid == $groupUid) {

$userset = 1;

$selected = ' selected="selected"';

} else {

$selected = '';

}

$options .= '<option value="'.$uid.'"'.$selected.'>'.htmlspecialchars($row['title']).'</option>';

}

// If the group was not set AND there is a group for the page

if (!$userset && $groupUid) {

$options = '<option value="'.$groupUid.'" selected="selected">'.htmlspecialchars($beGroupsO[$groupUid]['title']).'</option>'.$options;

}

$elementId = 'g_'.$page;

$options = '<option value="0"></option>'.$options;

$selector = '<select name="new_page_group" id="new_page_group">'.$options.'</select>';

$saveButton = '<a onclick="WebPermissions.changeGroup('.$page.', '.$groupUid.', \''.$elementId.'\');" title="Change group">' . t3lib_iconWorks::getSpriteIcon('actions-document-save') . '</a>';

$cancelButton = '<a onclick="WebPermissions.restoreGroup('.$page.', '.$groupUid.', \''.($groupname == '' ? '<span class=not_set>[not set]</span>' : htmlspecialchars($groupname)).'\', \''.$elementId.'\');" title="Cancel">' . t3lib_iconWorks::getSpriteIcon('actions-document-close') . '</a>';

$ret = $selector.$saveButton.$cancelButton;

return $ret;

}

/**

* Print the string with the new owner of a page record

*

* @param Integer $page: The TYPO3 page id

* @param Integer $ownerUid: The new page user uid

* @param String $username: The TYPO3 BE username (used to display in the element)

* @param Boolean $validUser: Must be set to FALSE, if the user has no name or is deleted

* @return String The new group wrapped in HTML

*/

public function renderOwnername($page, $ownerUid, $username, $validUser = true) {

$elementId = 'o_'.$page;

$ret = '<span id="' . $elementId . '"><a class="ug_selector" onclick="WebPermissions.showChangeOwnerSelector(' . $page . ', ' . $ownerUid . ', \'' . $elementId.'\', \'' . htmlspecialchars($username) . '\');">' . ($validUser ? ($username == '' ? ('<span class=not_set>['. $GLOBALS['LANG']->getLL('notSet') .']</span>') : htmlspecialchars(t3lib_div::fixed_lgd_cs($username, 20))) : ('<span class=not_set title="' . htmlspecialchars(t3lib_div::fixed_lgd_cs($username, 20)) . '">[' . $GLOBALS['LANG']->getLL('deleted') . ']</span>')) . '</a></span>';

return $ret;

}

/**

* Print the string with the new group of a page record

*

* @param Integer $page: The TYPO3 page id

* @param Integer $groupUid: The new page group uid

* @param String $groupname: The TYPO3 BE groupname (used to display in the element)

* @param Boolean $validGroup: Must be set to FALSE, if the group has no name or is deleted

* @return String The new group wrapped in HTML

*/

public function renderGroupname($page, $groupUid, $groupname, $validGroup = true) {

$elementId = 'g_'.$page;

$ret = '<span id="'.$elementId . '"><a class="ug_selector" onclick="WebPermissions.showChangeGroupSelector(' . $page . ', ' . $groupUid . ', \'' . $elementId . '\', \'' . htmlspecialchars($groupname) . '\');">'. ($validGroup ? ($groupname == '' ? ('<span class=not_set>['. $GLOBALS['LANG']->getLL('notSet') .']</span>') : htmlspecialchars(t3lib_div::fixed_lgd_cs($groupname, 20))) : ('<span class=not_set title="' . htmlspecialchars(t3lib_div::fixed_lgd_cs($groupname, 20)) . '">[' . $GLOBALS['LANG']->getLL('deleted') . ']</span>')) . '</a></span>';

return $ret;

}

/**

* Print the string with the new edit lock state of a page record

*

* @param Integer $page: The TYPO3 page id

* @param String $editlockstate: The state of the TYPO3 page (locked, unlocked)

* @return String The new edit lock string wrapped in HTML

*/

protected function renderToggleEditLock($page, $editLockState) {

if ($editLockState === 1) {

$ret = '<a class="editlock" onclick="WebPermissions.toggleEditLock('.$page.', 1);" title="The page and all content is locked for editing by all non-Admin users.">' . t3lib_iconWorks::getSpriteIcon('status-warning-lock') . '</a>';

} else {

$ret = '<a class="editlock" onclick="WebPermissions.toggleEditLock('.$page.', 0);" title="Enable the &raquo;Admin-only&laquo; edit lock for this page">[+]</a>';

}

return $ret;

}

/**

* Print a set of permissions. Also used in index.php

*

* @param integer Permission integer (bits)

* @param Integer $page: The TYPO3 page id

* @param String $who: The scope (user, group or everybody)

* @return string HTML marked up x/* indications.

*/

public function renderPermissions($int, $pageId = 0, $who = 'user') {

global $LANG;

$str = '';

$permissions = array(1,16,2,4,8);

foreach ($permissions as $permission) {

if ($int&$permission) {

$str .= t3lib_iconWorks::getSpriteIcon('status-status-permission-granted',array('tag'=>'a','title'=>$LANG->getLL($permission,1), 'onclick'=> 'WebPermissions.setPermissions('.$pageId.', '.$permission.', \'delete\', \''.$who.'\', '.$int.');'));

} else {

$str .= t3lib_iconWorks::getSpriteIcon('status-status-permission-denied',array('tag'=>'a','title'=>$LANG->getLL($permission,1),'onclick'=>'WebPermissions.setPermissions('.$pageId.', '.$permission.', \'add\', \''.$who.'\', '.$int.');'));

}

}

return '<span id="'.$pageId.'_'.$who.'">'.$str.'</span>';

}

}

if (defined('TYPO3_MODE') && $TYPO3_CONF_VARS[TYPO3_MODE]['XCLASS']['typo3/mod/web/perm/class.sc_mod_web_perm_ajax.php']) {

include_once($TYPO3_CONF_VARS[TYPO3_MODE]['XCLASS']['typo3/mod/web/perm/class.sc_mod_web_perm_ajax.php']);

}

?>

<?php

define('TYPO3_MOD_PATH', 'sysext/perm/mod1/');

$BACK_PATH='../../../';

$MLANG['default']['tabs_images']['tab'] = 'perm.gif';

$MLANG['default']['ll_ref']='LLL:EXT:lang/locallang_mod_web_perm.php';

$MCONF['script']='index.php';

$MCONF['access']='user,group';

$MCONF['name']='web_perm';

?>

<?php

/***************************************************************

* Copyright notice

*

* (c) 1999-2010 Kasper Skaarhoj (kasperYYYY@typo3.com)

* All rights reserved

*

* This script is part of the TYPO3 project. The TYPO3 project is

* free software; you can redistribute it and/or modify

* it under the terms of the GNU General Public License as published by

* the Free Software Foundation; either version 2 of the License, or

* (at your option) any later version.

*

* The GNU General Public License can be found at

* http://www.gnu.org/copyleft/gpl.html.

* A copy is found in the textfile GPL.txt and important notices to the license

* from the author is found in LICENSE.txt distributed with these scripts.

*

*

* This script is distributed in the hope that it will be useful,

* but WITHOUT ANY WARRANTY; without even the implied warranty of

* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

* GNU General Public License for more details.

*

* This copyright notice MUST APPEAR in all copies of the script!

***************************************************************/

/**

* Module: Permission setting

*

* $Id: index.php 8156 2010-07-11 12:42:05Z psychomieze $

* Revised for TYPO3 3.6 November/2003 by Kasper Skaarhoj

* XHTML compliant

*

* @author Kasper Skaarhoj <kasperYYYY@typo3.com>

*/

/**

* [CLASS/FUNCTION INDEX of SCRIPT]

*

*

*

* 90: class SC_mod_web_perm_index

* 194: public function init()

* 246: public function menuConfig()

* 277: public function main()

* 344: public function printContent()

* 354: private function getButtons()

*

* SECTION: Listing and Form rendering

* 398: public function doEdit()

* 545: public function notEdit()

*

* SECTION: Helper functions

* 739: public function printCheckBox($checkName, $num)

* 752: public function printPerms($int, $pageId = 0, $who = 'user')

* 772: public function groupPerms($row, $firstGroup)

* 789: public function getRecursiveSelect($id,$perms_clause)

*

* TOTAL FUNCTIONS: 11

* (This index is automatically created/updated by the extension "extdeveval")

*

*/

unset($MCONF);

require('conf.php');

require($BACK_PATH.'init.php');

require($BACK_PATH.'template.php');

require('class.sc_mod_web_perm_ajax.php');

$LANG->includeLLFile('EXT:lang/locallang_mod_web_perm.xml');

$BE_USER->modAccess($MCONF,1);

/**

* Module: Permission setting

*

* Script Class for the Web > Access module

* This module lets you view and change permissions for pages.

*

* Variables:

* $this->MOD_SETTINGS['depth']: intval 1-3: decides the depth of the list

* $this->MOD_SETTINGS['mode']: 'perms' / '': decides if we view a user-overview or the permissions.

*

* @author Kasper Skaarhoj <kasperYYYY@typo3.com>

* @author Andreas Kundoch <typo3@mehrwert.de>

* @package TYPO3

* @subpackage core

* @version $Id: index.php 8156 2010-07-11 12:42:05Z psychomieze $

*/

class SC_mod_web_perm_index {

/**

* Number of levels to enable recursive settings for

* @var integer

*/

public $getLevels = 10;

/**

* Module config

* Internal static

* @var array

*/

protected $MCONF = array();

/**

* Document Template Object

* @var template

*/

public $doc;

/**

* Content accumulation

* @var string

*/

public $content;

/**

* Module menu

* @var array

*/

public $MOD_MENU = array();

/**

* Module settings, cleansed.

* @var aray

*/

public $MOD_SETTINGS = array();

/**

* Page select permissions

* @var string

*/

public $perms_clause;

/**

* Current page record

* @var array

*/

public $pageinfo;

/**

* Background color 1

* @var string

*/

public $color;

/**

* Background color 2

* @var string

*/

public $color2;

/**

* Background color 3

* @var string

*/

public $color3;

/**

* Set internally if the current user either OWNS the page OR is admin user!

* @var boolean

*/

public $editingAllowed;

/**

* Internal, static: GPvars: Page id.

* @var integer

*/

public $id;

/**

* If set, editing of the page permissions will occur (showing the editing screen). Notice:

* This value is evaluated against permissions and so it will change internally!

* @var boolean

*/

public $edit;

/**

* ID to return to after editing.

* @var integer

*/

public $return_id;

/**

* Id of the page which was just edited.

* @var integer

*/

public $lastEdited;

/**

* Initialization of the class

*

* @return void

*/

public function init() {

// Setting GPvars:

$this->id = intval(t3lib_div::_GP('id'));

$this->edit = t3lib_div::_GP('edit');

$this->return_id = t3lib_div::_GP('return_id');

$this->lastEdited = t3lib_div::_GP('lastEdited');

// Module name;

$this->MCONF = $GLOBALS['MCONF'];

// Page select clause:

$this->perms_clause = $GLOBALS['BE_USER']->getPagePermsClause(1);

// Initializing document template object:

$this->doc = t3lib_div::makeInstance('template');

$this->doc->backPath = $GLOBALS['BACK_PATH'];

$this->doc->setModuleTemplate('templates/perm.html');

$this->doc->form = '<form action="'.$GLOBALS['BACK_PATH'].'tce_db.php" method="post" name="editform">';

$this->doc->loadJavascriptLib('../t3lib/jsfunc.updateform.js');

$this->doc->getPageRenderer()->loadPrototype();

$this->doc->loadJavascriptLib(TYPO3_MOD_PATH . 'perm.js');

// Setting up the context sensitive menu:

$this->doc->getContextMenuCode();

// Set up menus:

$this->menuConfig();

}

/**

* Configuration of the menu and initialization of ->MOD_SETTINGS

*

* @return void

*/

public function menuConfig() {

global $LANG;

// MENU-ITEMS:

// If array, then it's a selector box menu

// If empty string it's just a variable, that'll be saved.

// Values NOT in this array will not be saved in the settings-array for the module.

$temp = $LANG->getLL('levels');

$this->MOD_MENU = array(

'depth' => array(

1 => '1 '.$temp,

2 => '2 '.$temp,

3 => '3 '.$temp,

4 => '4 '.$temp,

10 => '10 '.$temp

),

'mode' => array(

0 => $LANG->getLL('user_overview'),

'perms' => $LANG->getLL('permissions')

)

);

// Clean up settings:

$this->MOD_SETTINGS = t3lib_BEfunc::getModuleData($this->MOD_MENU, t3lib_div::_GP('SET'), $this->MCONF['name']);

}

/**

* Main function, creating the content for the access editing forms/listings

*

* @return void

*/

public function main() {

global $BE_USER, $LANG;

// Access check...

// The page will show only if there is a valid page and if this page may be viewed by the user

$this->pageinfo = t3lib_BEfunc::readPageAccess($this->id, $this->perms_clause);

$access = is_array($this->pageinfo);

// Checking access:

if (($this->id && $access) || ($BE_USER->isAdmin() && !$this->id)) {

if ($BE_USER->isAdmin() && !$this->id) {

$this->pageinfo=array('title' => '[root-level]','uid'=>0,'pid'=>0);

}

// This decides if the editform can and will be drawn:

$this->editingAllowed = ($this->pageinfo['perms_userid']==$BE_USER->user['uid'] || $BE_USER->isAdmin());

$this->edit = $this->edit && $this->editingAllowed;

// If $this->edit then these functions are called in the end of the page...

if ($this->edit) {

$this->doc->postCode.= $this->doc->wrapScriptTags('

setCheck("check[perms_user]","data[pages]['.$this->id.'][perms_user]");

setCheck("check[perms_group]","data[pages]['.$this->id.'][perms_group]");

setCheck("check[perms_everybody]","data[pages]['.$this->id.'][perms_everybody]");

');

}

// Draw the HTML page header.

$this->content.=$this->doc->header($LANG->getLL('permissions') . ($this->edit ? ': '.$LANG->getLL('Edit') : ''));

$this->content.=$this->doc->spacer(5);

$vContent = $this->doc->getVersionSelector($this->id,1);

if ($vContent) {

$this->content .= $this->doc->section('',$vContent);

}

// Main function, branching out:

if (!$this->edit) {

$this->notEdit();

} else {

$this->doEdit();

}

$docHeaderButtons = $this->getButtons();

$markers['CSH'] = $this->docHeaderButtons['csh'];

$markers['FUNC_MENU'] = t3lib_BEfunc::getFuncMenu($this->id, 'SET[mode]', $this->MOD_SETTINGS['mode'], $this->MOD_MENU['mode']);

$markers['CONTENT'] = $this->content;

// Build the <body> for the module

$this->content = $this->doc->startPage($LANG->getLL('permissions'));

$this->content.= $this->doc->moduleBody($this->pageinfo, $docHeaderButtons, $markers);

} else {

// If no access or if ID == zero

$this->content.=$this->doc->startPage($LANG->getLL('permissions'));

$this->content.=$this->doc->header($LANG->getLL('permissions'));

}

$this->content.= $this->doc->endPage();

}

/**

* Outputting the accumulated content to screen

*

* @return void

*/

public function printContent() {

$this->content = $this->doc->insertStylesAndJS($this->content);

echo $this->content;

}

/**

* Create the panel of buttons for submitting the form or otherwise perform operations.

*

* @return array all available buttons as an assoc. array

*/

protected function getButtons() {

$buttons = array(

'csh' => '',

'view' => '',

'record_list' => '',

'shortcut' => '',

);

// CSH

$buttons['csh'] = t3lib_BEfunc::cshItem('_MOD_web_info', '', $GLOBALS['BACK_PATH'], '', TRUE);

// View page

$buttons['view'] = '<a href="#" onclick="' . htmlspecialchars(t3lib_BEfunc::viewonclick($this->pageinfo['uid'], $GLOBALS['BACK_PATH'], t3lib_BEfunc::BEgetRootLine($this->pageinfo['uid']))) . '" title="' . $GLOBALS['LANG']->sL('LLL:EXT:lang/locallang_core.php:labels.showPage', 1) . '">' .

t3lib_iconWorks::getSpriteIcon('actions-document-view') .

'</a>';

// Shortcut

if ($GLOBALS['BE_USER']->mayMakeShortcut()) {

$buttons['shortcut'] = $this->doc->makeShortcutIcon('id, edit_record, pointer, new_unique_uid, search_field, search_levels, showLimit', implode(',', array_keys($this->MOD_MENU)), $this->MCONF['name']);

}

// If access to Web>List for user, then link to that module.

if ($GLOBALS['BE_USER']->check('modules','web_list')) {

$href = $GLOBALS['BACK_PATH'] . 'db_list.php?id=' . $this->pageinfo['uid'] . '&returnUrl=' . rawurlencode(t3lib_div::getIndpEnv('REQUEST_URI'));

$buttons['record_list'] = '<a href="' . htmlspecialchars($href) . '" title="' . $GLOBALS['LANG']->sL('LLL:EXT:lang/locallang_core.php:labels.showList', 1) . '">' .

t3lib_iconWorks::getSpriteIcon('actions-system-list-open') .

'</a>';

}

return $buttons;

}

/*****************************

*

* Listing and Form rendering

*

*****************************/

/**

* Creating form for editing the permissions ($this->edit = true)

* (Adding content to internal content variable)

*

* @return void

*/

public function doEdit() {

global $BE_USER,$LANG;

if ($BE_USER->workspace != 0) {

// Adding section with the permission setting matrix:

$lockedMessage = t3lib_div::makeInstance(

't3lib_FlashMessage',

$LANG->getLL('WorkspaceWarningText'),

$LANG->getLL('WorkspaceWarning'),

t3lib_FlashMessage::WARNING

);

t3lib_FlashMessageQueue::addMessage($lockedMessage);

}

// Get usernames and groupnames

$beGroupArray = t3lib_BEfunc::getListGroupNames('title,uid');

$beGroupKeys = array_keys($beGroupArray);

$beUserArray = t3lib_BEfunc::getUserNames();

if (!$GLOBALS['BE_USER']->isAdmin()) {

$beUserArray = t3lib_BEfunc::blindUserNames($beUserArray,$beGroupKeys,1);

}

$beGroupArray_o = $beGroupArray = t3lib_BEfunc::getGroupNames();

if (!$GLOBALS['BE_USER']->isAdmin()) {

$beGroupArray = t3lib_BEfunc::blindGroupNames($beGroupArray_o,$beGroupKeys,1);

}

$firstGroup = $beGroupKeys[0] ? $beGroupArray[$beGroupKeys[0]] : ''; // data of the first group, the user is member of

// Owner selector:

$options='';

$userset=0; // flag: is set if the page-userid equals one from the user-list

foreach($beUserArray as $uid => $row) {

if ($uid==$this->pageinfo['perms_userid']) {

$userset = 1;

$selected=' selected="selected"';

} else {

$selected='';

}

$options.='

<option value="'.$uid.'"'.$selected.'>'.htmlspecialchars($row['username']).'</option>';

}

$options='

<option value="0"></option>'.$options;

$selector='

<select name="data[pages]['.$this->id.'][perms_userid]">

'.$options.'

</select>';

$this->content.=$this->doc->section($LANG->getLL('Owner').':',$selector);

// Group selector:

$options='';

$userset=0;

foreach($beGroupArray as $uid => $row) {

if ($uid==$this->pageinfo['perms_groupid']) {

$userset = 1;

$selected=' selected="selected"';

} else {

$selected='';

}

$options.='

<option value="'.$uid.'"'.$selected.'>'.htmlspecialchars($row['title']).'</option>';

}

if (!$userset && $this->pageinfo['perms_groupid']) { // If the group was not set AND there is a group for the page

$options='

<option value="'.$this->pageinfo['perms_groupid'].'" selected="selected">'.

htmlspecialchars($beGroupArray_o[$this->pageinfo['perms_groupid']]['title']).

'</option>'.

$options;

}

$options='

<option value="0"></option>'.$options;

$selector='

<select name="data[pages]['.$this->id.'][perms_groupid]">

'.$options.'

</select>';

$this->content.=$this->doc->divider(5);

$this->content.=$this->doc->section($LANG->getLL('Group').':',$selector);

// Permissions checkbox matrix:

$code='

<table border="0" cellspacing="2" cellpadding="0" id="typo3-permissionMatrix">

<tr>

<td></td>

<td class="bgColor2">'.str_replace(' ','<br />',$LANG->getLL('1',1)).'</td>

<td class="bgColor2">'.str_replace(' ','<br />',$LANG->getLL('16',1)).'</td>

<td class="bgColor2">'.str_replace(' ','<br />',$LANG->getLL('2',1)).'</td>

<td class="bgColor2">'.str_replace(' ','<br />',$LANG->getLL('4',1)).'</td>

<td class="bgColor2">'.str_replace(' ','<br />',$LANG->getLL('8',1)).'</td>

</tr>

<tr>

<td align="right" class="bgColor2">'.$LANG->getLL('Owner',1).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_user',1).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_user',5).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_user',2).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_user',3).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_user',4).'</td>

</tr>

<tr>

<td align="right" class="bgColor2">'.$LANG->getLL('Group',1).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_group',1).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_group',5).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_group',2).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_group',3).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_group',4).'</td>

</tr>

<tr>

<td align="right" class="bgColor2">'.$LANG->getLL('Everybody',1).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_everybody',1).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_everybody',5).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_everybody',2).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_everybody',3).'</td>

<td class="bgColor-20">'.$this->printCheckBox('perms_everybody',4).'</td>

</tr>

</table>

<br />

<input type="hidden" name="data[pages]['.$this->id.'][perms_user]" value="'.$this->pageinfo['perms_user'].'" />

<input type="hidden" name="data[pages]['.$this->id.'][perms_group]" value="'.$this->pageinfo['perms_group'].'" />

<input type="hidden" name="data[pages]['.$this->id.'][perms_everybody]" value="'.$this->pageinfo['perms_everybody'].'" />

'.$this->getRecursiveSelect($this->id,$this->perms_clause).'

<input type="submit" name="submit" value="'.$LANG->getLL('Save',1).'" />'.

'<input type="submit" value="'.$LANG->getLL('Abort',1).'" onclick="'.htmlspecialchars('jumpToUrl(\'index.php?id='.$this->id.'\'); return false;').'" />

<input type="hidden" name="redirect" value="'.htmlspecialchars(TYPO3_MOD_PATH.'index.php?mode='.$this->MOD_SETTINGS['mode'].'&depth='.$this->MOD_SETTINGS['depth'].'&id='.intval($this->return_id).'&lastEdited='.$this->id).'" />

';

// Adding section with the permission setting matrix:

$this->content.=$this->doc->divider(5);

$this->content.=$this->doc->section($LANG->getLL('permissions').':',$code);

// CSH for permissions setting

$this->content.= t3lib_BEfunc::cshItem('xMOD_csh_corebe', 'perm_module_setting', $GLOBALS['BACK_PATH'], '<br /><br />');

// Adding help text:

if ($BE_USER->uc['helpText']) {

$this->content.=$this->doc->divider(20);

$legendText = '<strong>'.$LANG->getLL('1',1).'</strong>: '.$LANG->getLL('1_t',1);

$legendText.= '<br /><strong>'.$LANG->getLL('16',1).'</strong>: '.$LANG->getLL('16_t',1);

$legendText.= '<br /><strong>'.$LANG->getLL('2',1).'</strong>: '.$LANG->getLL('2_t',1);

$legendText.= '<br /><strong>'.$LANG->getLL('4',1).'</strong>: '.$LANG->getLL('4_t',1);

$legendText.= '<br /><strong>'.$LANG->getLL('8',1).'</strong>: '.$LANG->getLL('8_t',1);

$code=$legendText.'<br /><br />'.$LANG->getLL('def',1);

$this->content.=$this->doc->section($LANG->getLL('Legend',1).':',$code);

}

}

/**

* Showing the permissions in a tree ($this->edit = false)

* (Adding content to internal content variable)

*

* @return void

*/

public function notEdit() {

global $BE_USER,$LANG,$BACK_PATH;

// Get usernames and groupnames: The arrays we get in return contains only 1) users which are members of the groups of the current user, 2) groups that the current user is member of

$beGroupKeys = $BE_USER->userGroupsUID;

$beUserArray = t3lib_BEfunc::getUserNames();

if (!$GLOBALS['BE_USER']->isAdmin()) {

$beUserArray = t3lib_BEfunc::blindUserNames($beUserArray,$beGroupKeys,0);

}

$beGroupArray = t3lib_BEfunc::getGroupNames();

if (!$GLOBALS['BE_USER']->isAdmin()) {

$beGroupArray = t3lib_BEfunc::blindGroupNames($beGroupArray,$beGroupKeys,0);

}

// Length of strings:

$tLen= ($this->MOD_SETTINGS['mode']=='perms' ? 20 : 30);

// Selector for depth:

$code.=$LANG->getLL('Depth').': ';

$code.=t3lib_BEfunc::getFuncMenu($this->id,'SET[depth]',$this->MOD_SETTINGS['depth'],$this->MOD_MENU['depth']);

$this->content.=$this->doc->section('',$code);

$this->content.=$this->doc->spacer(5);

// Initialize tree object:

$tree = t3lib_div::makeInstance('t3lib_pageTree');

$tree->init('AND '.$this->perms_clause);

$tree->addField('perms_user',1);

$tree->addField('perms_group',1);

$tree->addField('perms_everybody',1);

$tree->addField('perms_userid',1);

$tree->addField('perms_groupid',1);

$tree->addField('hidden');

$tree->addField('fe_group');

$tree->addField('starttime');

$tree->addField('endtime');

$tree->addField('editlock');

// Creating top icon; the current page

$HTML=t3lib_iconWorks::getSpriteIconForRecord('pages',$this->pageinfo);

$tree->tree[] = array('row'=>$this->pageinfo,'HTML'=>$HTML);

// Create the tree from $this->id:

$tree->getTree($this->id,$this->MOD_SETTINGS['depth'],'');

// Make header of table:

$code='';

if ($this->MOD_SETTINGS['mode']=='perms') {

$code.='

<tr class="t3-row-header">

<td colspan="2">&nbsp;</td>

<td><img' . t3lib_iconWorks::skinImg($BACK_PATH, 'gfx/line.gif', 'width="5" height="16"') . ' alt="" /></td>

<td>' . $LANG->getLL('Owner', TRUE) . '</td>

<td><img' . t3lib_iconWorks::skinImg($BACK_PATH, 'gfx/line.gif', 'width="5" height="16"') . ' alt="" /></td>

<td align="center">' . $LANG->getLL('Group', TRUE) . '</td>

<td><img' . t3lib_iconWorks::skinImg($BACK_PATH, 'gfx/line.gif', 'width="5" height="16"') . ' alt="" /></td>

<td align="center">' . $LANG->getLL('Everybody', TRUE) . '</td>

<td><img' . t3lib_iconWorks::skinImg($BACK_PATH, 'gfx/line.gif', 'width="5" height="16"') . ' alt="" /></td>

<td align="center">' . $LANG->getLL('EditLock', TRUE) . '</td>

</tr>

';

} else {

$code.='

<tr class="t3-row-header">

<td colspan="2">&nbsp;</td>

<td><img' . t3lib_iconWorks::skinImg($BACK_PATH, 'gfx/line.gif', 'width="5" height="16"') . ' alt="" /></td>

<td align="center" nowrap="nowrap">' . $LANG->getLL('User', TRUE) . ': ' . htmlspecialchars($BE_USER->user['username']) . '</td>

' . (!$BE_USER->isAdmin() ? '<td><img' . t3lib_iconWorks::skinImg($BACK_PATH, 'gfx/line.gif', 'width="5" height="16"') . ' alt="" /></td>

<td align="center">' . $LANG->getLL('EditLock', TRUE) . '</td>' : '') . '

</tr>';

}

// Traverse tree:

foreach ($tree->tree as $data) {

$cells = array();

$pageId = $data['row']['uid'];

// Background colors:

$bgCol = ($this->lastEdited == $pageId ? ' class="bgColor-20"' : '');

$lE_bgCol = $bgCol;

// User/Group names:

$userName = $beUserArray[$data['row']['perms_userid']] ? $beUserArray[$data['row']['perms_userid']]['username'] : ($data['row']['perms_userid'] ? $data['row']['perms_userid'] : '');

if ($data['row']['perms_userid'] && (!$beUserArray[$data['row']['perms_userid']])) {

$userName = SC_mod_web_perm_ajax::renderOwnername($pageId, $data['row']['perms_userid'], htmlspecialchars(t3lib_div::fixed_lgd_cs($userName, 20)), false);

} else {

$userName = SC_mod_web_perm_ajax::renderOwnername($pageId, $data['row']['perms_userid'], htmlspecialchars(t3lib_div::fixed_lgd_cs($userName, 20)));

}

$groupName = $beGroupArray[$data['row']['perms_groupid']] ? $beGroupArray[$data['row']['perms_groupid']]['title'] : ($data['row']['perms_groupid'] ? $data['row']['perms_groupid'] : '');

if ($data['row']['perms_groupid'] && (!$beGroupArray[$data['row']['perms_groupid']])) {

$groupName = SC_mod_web_perm_ajax::renderGroupname($pageId, $data['row']['perms_groupid'], htmlspecialchars(t3lib_div::fixed_lgd_cs($groupName, 20)), false);

} else {

$groupName = SC_mod_web_perm_ajax::renderGroupname($pageId, $data['row']['perms_groupid'], htmlspecialchars(t3lib_div::fixed_lgd_cs($groupName, 20)));

}

// Seeing if editing of permissions are allowed for that page:

$editPermsAllowed = ($data['row']['perms_userid'] == $BE_USER->user['uid'] || $BE_USER->isAdmin());

// First column:

$cellAttrib = ($data['row']['_CSSCLASS'] ? ' class="'.$data['row']['_CSSCLASS'].'"' : '');

$cells[]='

<td align="left" nowrap="nowrap"'.($cellAttrib ? $cellAttrib : $bgCol).'>'.$data['HTML'].htmlspecialchars(t3lib_div::fixed_lgd_cs($data['row']['title'],$tLen)).'&nbsp;</td>';

// "Edit permissions" -icon

if ($editPermsAllowed && $pageId) {

$aHref = 'index.php?mode='.$this->MOD_SETTINGS['mode'].'&depth='.$this->MOD_SETTINGS['depth'].'&id='.($data['row']['_ORIG_uid'] ? $data['row']['_ORIG_uid'] : $pageId).'&return_id='.$this->id.'&edit=1';

$cells[]='

<td'.$bgCol.'><a href="'.htmlspecialchars($aHref).'" title="'.$LANG->getLL('ch_permissions',1).'">' . t3lib_iconWorks::getSpriteIcon('actions-document-open') . '</a></td>';

} else {

$cells[]='

<td'.$bgCol.'></td>';

}

// Rest of columns (depending on mode)

if ($this->MOD_SETTINGS['mode'] == 'perms') {

$cells[]='

<td' . $bgCol . ' class="center"><img' . t3lib_iconWorks::skinImg($BACK_PATH, 'gfx/line.gif', 'width="5" height="16"') . ' alt="" /></td>

<td'.$bgCol.' nowrap="nowrap">'.($pageId ? SC_mod_web_perm_ajax::renderPermissions($data['row']['perms_user'], $pageId, 'user').' '.$userName : '').'</td>

<td' . $bgCol . ' class="center"><img' . t3lib_iconWorks::skinImg($BACK_PATH, 'gfx/line.gif', 'width="5" height="16"') . ' alt="" /></td>

<td'.$bgCol.' nowrap="nowrap">'.($pageId ? SC_mod_web_perm_ajax::renderPermissions($data['row']['perms_group'], $pageId, 'group').' '.$groupName : '').'</td>

<td' . $bgCol . ' class="center"><img' . t3lib_iconWorks::skinImg($BACK_PATH, 'gfx/line.gif', 'width="5" height="16"') . ' alt="" /></td>

<td'.$bgCol.' nowrap="nowrap">'.($pageId ? ' '.SC_mod_web_perm_ajax::renderPermissions($data['row']['perms_everybody'], $pageId, 'everybody') : '').'</td>

<td' . $bgCol . ' class="center"><img' . t3lib_iconWorks::skinImg($BACK_PATH, 'gfx/line.gif', 'width="5" height="16"') . ' alt="" /></td>

<td'.$bgCol.' nowrap="nowrap">'.($data['row']['editlock']?'<span id="el_'.$pageId.'" class="editlock"><a class="editlock" onclick="WebPermissions.toggleEditLock(\''.$pageId.'\', \'1\');" title="'.$LANG->getLL('EditLock_descr',1).'">' .

t3lib_iconWorks::getSpriteIcon('status-warning-lock') . '</a></span>' : ( $pageId === 0 ? '' : '<span id="el_'.$pageId.'" class="editlock"><a class="editlock" onclick="WebPermissions.toggleEditLock(\''.$pageId.'\', \'0\');" title="Enable the &raquo;Admin-only&laquo; edit lock for this page">[+]</a></span>')).'</td>

';

} else {

$cells[]='

<td' . $bgCol . ' class="center"><img' . t3lib_iconWorks::skinImg($BACK_PATH, 'gfx/line.gif', 'width="5" height="16"') . ' alt="" /></td>';

$bgCol = ($BE_USER->user['uid'] == $data['row']['perms_userid'] ? ' class="bgColor-20"' : $lE_bgCol);

// FIXME $owner undefined

$cells[]='

<td'.$bgCol.' nowrap="nowrap" align="center">'.($pageId ? $owner.SC_mod_web_perm_ajax::renderPermissions($BE_USER->calcPerms($data['row']), $pageId, 'user') : '').'</td>

'.(!$BE_USER->isAdmin()?'

<td' . $bgCol . ' class="center"><img' . t3lib_iconWorks::skinImg($BACK_PATH, 'gfx/line.gif', 'width="5" height="16"') . ' alt="" /></td>

<td'.$bgCol.' nowrap="nowrap">'.($data['row']['editlock'] ? t3lib_iconWorks::getSpriteIcon('status-warning-lock', array('title' => $LANG->getLL('EditLock_descr', TRUE))) : '').'</td>

':'');

$bgCol = $lE_bgCol;

}

// Compile table row:

$code .= '

<tr>

'.implode('

',$cells).'

</tr>';

}

// Wrap rows in table tags:

$code = '<table border="0" cellspacing="0" cellpadding="0" id="typo3-permissionList">' . $code . '</table>';

// Adding the content as a section:

$this->content.=$this->doc->section('',$code);

// CSH for permissions setting

$this->content.= t3lib_BEfunc::cshItem('xMOD_csh_corebe', 'perm_module', $GLOBALS['BACK_PATH'], '<br />|');

// Creating legend table:

$legendText = '<strong>'.$LANG->getLL('1',1).'</strong>: '.$LANG->getLL('1_t',1);

$legendText.= '<br /><strong>'.$LANG->getLL('16',1).'</strong>: '.$LANG->getLL('16_t',1);

$legendText.= '<br /><strong>'.$LANG->getLL('2',1).'</strong>: '.$LANG->getLL('2_t',1);

$legendText.= '<br /><strong>'.$LANG->getLL('4',1).'</strong>: '.$LANG->getLL('4_t',1);

$legendText.= '<br /><strong>'.$LANG->getLL('8',1).'</strong>: '.$LANG->getLL('8_t',1);

$code='<table border="0" id="typo3-legendTable">

<tr>

<td valign="top">

<img' . t3lib_iconWorks::skinImg($BACK_PATH, 'gfx/legend.gif', 'width="86" height="75"') . ' alt="" />

</td>

<td valign="top" nowrap="nowrap">'.$legendText.'</td>

</tr>

</table>';

$code.='<div id="perm-legend">'.$LANG->getLL('def',1);

$code.='<br /><br />'.t3lib_iconWorks::getSpriteIcon('status-status-permission-granted').': '.$LANG->getLL('A_Granted', 1);

$code.='<br />'.t3lib_iconWorks::getSpriteIcon('status-status-permission-denied').': '.$LANG->getLL('A_Denied', 1);

$code.='</div>';

// Adding section with legend code:

$this->content.=$this->doc->spacer(20);

$this->content.=$this->doc->section($LANG->getLL('Legend').':',$code,0,1);

}

/*****************************

*

* Helper functions

*

*****************************/

/**

* Print a checkbox for the edit-permission form

*

* @param string Checkbox name key

* @param integer Checkbox number index

* @return string HTML checkbox

*/

public function printCheckBox($checkName, $num) {

$onclick = 'checkChange(\'check['.$checkName.']\', \'data[pages]['.$GLOBALS['SOBE']->id.']['.$checkName.']\')';

return '<input type="checkbox" name="check['.$checkName.']['.$num.']" onclick="'.htmlspecialchars($onclick).'" /><br />';

}

/**

* Returns the permissions for a group based of the perms_groupid of $row. If the $row[perms_groupid] equals the $firstGroup[uid] then the function returns perms_everybody OR'ed with perms_group, else just perms_everybody

*

* @param array Row array (from pages table)

* @param array First group data

* @return integer Integer: Combined permissions.

*/

public function groupPerms($row, $firstGroup) {

if (is_array($row)) {

$out = intval($row['perms_everybody']);

if ($row['perms_groupid'] && $firstGroup['uid']==$row['perms_groupid']) {

$out |= intval($row['perms_group']);

}

return $out;

}

}

/**

* Finding tree and offer setting of values recursively.

*

* @param integer Page id.

* @param string Select clause

* @return string Select form element for recursive levels (if any levels are found)

*/

public function getRecursiveSelect($id,$perms_clause) {

// Initialize tree object:

$tree = t3lib_div::makeInstance('t3lib_pageTree');

$tree->init('AND '.$perms_clause);

$tree->addField('perms_userid',1);

$tree->makeHTML=0;

$tree->setRecs = 1;

// Make tree:

$tree->getTree($id,$this->getLevels,'');

// If there are a hierarchy of page ids, then...

if ($GLOBALS['BE_USER']->user['uid'] && count($tree->orig_ids_hierarchy)) {

// Init:

$label_recur = $GLOBALS['LANG']->getLL('recursive');

$label_levels = $GLOBALS['LANG']->getLL('levels');

$label_pA = $GLOBALS['LANG']->getLL('pages_affected');

$theIdListArr=array();

$opts='

<option value=""></option>';

// Traverse the number of levels we want to allow recursive setting of permissions for:

for ($a=$this->getLevels;$a>0;$a--) {

if (is_array($tree->orig_ids_hierarchy[$a])) {

foreach($tree->orig_ids_hierarchy[$a] as $theId) {

if ($GLOBALS['BE_USER']->isAdmin() || $GLOBALS['BE_USER']->user['uid']==$tree->recs[$theId]['perms_userid']) {

$theIdListArr[]=$theId;

}

}

$lKey = $this->getLevels-$a+1;

$opts.='

<option value="'.htmlspecialchars(implode(',',$theIdListArr)).'">'.

t3lib_div::deHSCentities(htmlspecialchars($label_recur.' '.$lKey.' '.$label_levels)).' ('.count($theIdListArr).' '.$label_pA.')'.

'</option>';

}

}

// Put the selector box together:

$theRecursiveSelect = '<br />

<select name="mirror[pages]['.$id.']">

'.$opts.'

</select>

<br /><br />';

} else {

$theRecursiveSelect = '';

}

// Return selector box element:

return $theRecursiveSelect;

}

}

if (defined('TYPO3_MODE') && $TYPO3_CONF_VARS[TYPO3_MODE]['XCLASS']['typo3/mod/web/perm/index.php']) {

include_once($TYPO3_CONF_VARS[TYPO3_MODE]['XCLASS']['typo3/mod/web/perm/index.php']);

}

// Make instance:

$SOBE = t3lib_div::makeInstance('SC_mod_web_perm_index');

$SOBE->init();

$SOBE->main();

$SOBE->printContent();

?>

/***************************************************************

*

* Javascript functions regarding the permissions module

* Relies on the javascript library "prototype"

*

* Copyright notice

*

* (c) 2007-2010 Andreas Beutel <typo3@mehrwert.de>

* (c) 2007-2010 Benjamin Mack <benni@typo3.org>

* All rights reserved

*

* This script is part of the TYPO3 project. The TYPO3 project is

* free software; you can redistribute it and/or modify

* it under the terms of the GNU General Public License as published by

* the Free Software Foundation; either version 2 of the License, or

* (at your option) any later version.

*

* The GNU General Public License can be found at

* http://www.gnu.org/copyleft/gpl.html.

* A copy is found in the textfile GPL.txt and important notices to the license

* from the author is found in LICENSE.txt distributed with these scripts.

*

*

* This script is distributed in the hope that it will be useful,

* but WITHOUT ANY WARRANTY; without even the implied warranty of

* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

* GNU General Public License for more details.

*

* This copyright notice MUST APPEAR in all copies of the script!

***************************************************************/

/**

* @author Andreas Kundoch <typo3@mehrwert.de>

* @author Benjamin Mack <www.xnos.org>

* @package TYPO3

* @subpackage core

* @version $Id: perm.js 7905 2010-06-13 14:42:33Z ohader $

*/

// TYPO3 code extracted from index.php

function checkChange(checknames, varname) {

var res = 0;

for (var a=1; a<=5; a++) {

if (document.editform[checknames+'['+a+']'].checked) {

res|=Math.pow(2,a-1);

}

}

document.editform[varname].value = res | (checknames == 'check[perms_user]' ? 1 : 0);

setCheck(checknames, varname);

}

function setCheck(checknames, varname) {

if (document.editform[varname]) {

var res = document.editform[varname].value;

for (var a=1; a<=5; a++) {

document.editform[checknames+'['+a+']'].checked = (res & Math.pow(2,a-1));

}

}

}

function jumpToUrl(URL) { window.location.href = URL; }

// Methods for AJAX permission manipulation

var WebPermissions = {

thisScript: '../../../ajax.php',

ajaxID: 'SC_mod_web_perm_ajax::dispatch',

// set the permission bits through an ajax call

setPermissions: function(page, bits, mode, who, permissions) {

new Ajax.Updater($(page + '_' + who), this.thisScript, {

parameters: { ajaxID: this.ajaxID, page: page, permissions: permissions, mode: mode, who: who, bits: bits }

});

},

// load the selector for selecting the owner of a page by executing an ajax call

showChangeOwnerSelector: function(page, ownerUid, elementID, username) {

new Ajax.Updater($(elementID), this.thisScript, {

parameters: { ajaxID: this.ajaxID, action: 'show_change_owner_selector', page: page, ownerUid: ownerUid, username: username }

});

},

// Set the new owner of a page by executing an ajax call

changeOwner: function(page, ownerUid, elementID) {

new Ajax.Updater($(elementID), this.thisScript, {

parameters: { ajaxID: this.ajaxID, action: 'change_owner', page: page, ownerUid: ownerUid, newOwnerUid: $('new_page_owner').value }

});

},

// Update the HTML view and show the original owner

restoreOwner: function(page, ownerUid, username, elementID) {

var idName = 'o_' + page;

$(elementID).innerHTML = '<a class="ug_selector" onclick="WebPermissions.showChangeOwnerSelector(' + page + ', ' + ownerUid + ', \'' + idName + '\', \'' + username + '\');">' + username + '</a>';

},

// Load the selector by executing an ajax call

showChangeGroupSelector: function(page, groupUid, elementID, groupname) {

new Ajax.Updater($(elementID), this.thisScript, {

parameters: { ajaxID: this.ajaxID, action: 'show_change_group_selector', page: page, groupUid: groupUid, groupname: groupname }

});

},