blob: c50dd8b4c50207e57ad07503789c83602dbd1129 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
|
<?php
use Bitweaver\KernelTools;
use Bitweaver\Liberty\LibertyContent;
require_once '../../kernel/includes/setup_inc.php';
$gBitSystem->verifyPermission( 'p_admin' );
$feedback = [];
// get a list of all roles and their permissions
$listHash = [
'only_root_roles' => true,
'sort_mode' => !empty( $_REQUEST['sort_mode'] ) ? $_REQUEST['sort_mode'] : 'role_name_asc'
];
$allRoles = $gBitUser->getAllRoles( $listHash );
$allPerms = $gBitUser->getRolePermissions( $_REQUEST );
// deal with assigning permissions to various roles
if( !empty( $_REQUEST['save'] )) {
$gBitUser->verifyTicket();
foreach( array_keys( $allRoles ) as $roleId ) {
foreach( array_keys( $allPerms ) as $perm ) {
if( !empty( $_REQUEST['perms'][$roleId][$perm] )) {
$gBitUser->assignPermissionToRole( $perm, $roleId );
} else {
$gBitUser->removePermissionFromRole( $perm, $roleId );
}
}
}
$feedback['success'] = KernelTools::tra( "The permissions were successfully added to the requested roles." );
// we need to update the roles list
$allRoles = $gBitUser->getAllRoles( $listHash );
}
// Check to see if we have unassigned permissions
if(( $unassignedPerms = $gBitUser->getUnassignedPerms() )) {
$feedback['warning'] = KernelTools::tra( 'You have some permissions that are not assigned to any role. You need to assign these to at least one role each.' );
$gBitSmarty->assign( 'unassignedPerms', $unassignedPerms );
}
$gBitSmarty->assign( 'allPerms', $allPerms );
$gBitSmarty->assign( 'allRoles', $allRoles );
$gBitSmarty->assign( 'permPackages', $gBitUser->getPermissionPackages() );
$gBitSmarty->assign( 'feedback', $feedback );
$gBitSmarty->assign( 'bitTk', $gBitUser->mTicket );
$gBitSmarty->assign( 'contentWithPermissions', LibertyContent::getContentWithPermissionsList() );
$gBitSystem->display( 'bitpackage:users/admin_role_permissions.tpl', KernelTools::tra( 'Permission Maintenance' ), [ 'display_mode' => 'admin' ]);
|