2011-03-23 10:51:00 +01:00
< ? php
/**
* Security section of the CMS
* @ package cms
* @ subpackage security
*/
class SecurityAdmin extends LeftAndMain implements PermissionProvider {
static $url_segment = 'security' ;
static $url_rule = '/$Action/$ID/$OtherID' ;
2011-03-31 11:10:32 +02:00
static $menu_title = 'Users' ;
2011-03-23 10:51:00 +01:00
static $tree_class = 'Group' ;
static $subitem_class = 'Member' ;
static $allowed_actions = array (
'EditForm' ,
'MemberImportForm' ,
'memberimport' ,
'GroupImportForm' ,
'groupimport' ,
'RootForm'
);
/**
* @ var Array
*/
static $hidden_permissions = array ();
public function init () {
parent :: init ();
2011-04-19 08:04:55 +02:00
Requirements :: javascript ( SAPPHIRE_ADMIN_DIR . '/javascript/SecurityAdmin.js' );
2011-03-23 10:51:00 +01:00
}
2012-01-23 17:12:49 +01:00
public function getEditForm ( $id = null , $fields = null ) {
2011-03-23 10:51:00 +01:00
// TODO Duplicate record fetching (see parent implementation)
if ( ! $id ) $id = $this -> currentPageID ();
$form = parent :: getEditForm ( $id );
// TODO Duplicate record fetching (see parent implementation)
$record = $this -> getRecord ( $id );
if ( $record && ! $record -> canView ()) return Security :: permissionFailure ( $this );
if ( $id && is_numeric ( $id )) {
$form = parent :: getEditForm ( $id );
if ( ! $form ) return false ;
$fields = $form -> Fields ();
if ( $fields -> hasTabSet () && $record -> canEdit ()) {
$fields -> findOrMakeTab ( 'Root.Import' , _t ( 'Group.IMPORTTABTITLE' , 'Import' ));
$fields -> addFieldToTab ( 'Root.Import' ,
new LiteralField (
'MemberImportFormIframe' ,
sprintf (
'<iframe src="%s" id="MemberImportFormIframe" width="100%%" height="400px" border="0"></iframe>' ,
$this -> Link ( 'memberimport' )
)
)
);
// Filter permissions
$permissionField = $form -> Fields () -> dataFieldByName ( 'Permissions' );
if ( $permissionField ) $permissionField -> setHiddenPermissions ( self :: $hidden_permissions );
}
$this -> extend ( 'updateEditForm' , $form );
} else {
$form = $this -> RootForm ();
}
2012-01-07 18:57:14 +01:00
$form -> setTemplate ( $this -> getTemplatesWithSuffix ( '_EditForm' ));
if ( $form -> Fields () -> hasTabset ()) $form -> Fields () -> findOrMakeTab ( 'Root' ) -> setTemplate ( 'CMSTabSet' );
$form -> addExtraClass ( 'center ss-tabset ' . $this -> BaseCSSClasses ());
2011-03-23 10:51:00 +01:00
return $form ;
}
/**
2012-03-05 17:06:07 +01:00
* The fields for individual groups will be created through { @ link Group -> getCMSFields ()} .
*
2011-10-28 03:37:27 +02:00
* @ return FieldList
2011-03-23 10:51:00 +01:00
*/
function RootForm () {
2012-03-05 17:06:07 +01:00
$config = new GridFieldConfig_RecordEditor ();
2012-01-30 07:49:10 +01:00
$config -> addComponent ( new GridFieldExporter ());
2012-03-05 17:06:07 +01:00
$config -> getComponentByType ( 'GridFieldPopupForms' ) -> setValidator ( new Member_Validator ());
2012-01-25 05:31:27 +01:00
$memberList = new GridField ( 'Members' , 'All members' , DataList :: create ( 'Member' ), $config );
2012-03-02 04:28:47 +01:00
$memberList -> addExtraClass ( " members_grid " );
2011-03-23 10:51:00 +01:00
2011-05-11 09:51:54 +02:00
$fields = new FieldList (
2011-10-29 04:41:40 +02:00
$root = new TabSet (
2011-03-23 10:51:00 +01:00
'Root' ,
new Tab ( 'Members' , singleton ( 'Member' ) -> i18n_plural_name (),
$memberList ,
new LiteralField ( 'MembersCautionText' ,
sprintf ( '<p class="caution-remove"><strong>%s</strong></p>' ,
_t (
'SecurityAdmin.MemberListCaution' ,
'Caution: Removing members from this list will remove them from all groups and the database'
)
)
)
),
new Tab ( 'Import' , _t ( 'SecurityAdmin.TABIMPORT' , 'Import' ),
new LiteralField (
'GroupImportFormIframe' ,
sprintf (
2012-01-30 07:25:27 +01:00
'<iframe src="%s" id="GroupImportFormIframe" width="100%%" height="400px" border="0"></iframe>' ,
2011-03-23 10:51:00 +01:00
$this -> Link ( 'groupimport' )
)
)
)
),
// necessary for tree node selection in LeftAndMain.EditForm.js
new HiddenField ( 'ID' , false , 0 )
);
2011-10-29 04:41:40 +02:00
$root -> setTemplate ( 'CMSTabSet' );
2011-03-23 10:51:00 +01:00
// Add roles editing interface
if ( Permission :: check ( 'APPLY_ROLES' )) {
2012-03-05 14:04:19 +01:00
$rolesField = new GridField (
2011-03-23 10:51:00 +01:00
'Roles' ,
2012-03-05 14:04:19 +01:00
false ,
DataList :: create ( 'PermissionRole' ),
GridFieldConfig_RecordEditor :: create ()
2011-03-23 10:51:00 +01:00
);
2012-03-05 14:04:19 +01:00
// $rolesCTF->setPermissions(array('add', 'edit', 'delete'));
2011-03-23 10:51:00 +01:00
$rolesTab = $fields -> findOrMakeTab ( 'Root.Roles' , _t ( 'SecurityAdmin.TABROLES' , 'Roles' ));
$rolesTab -> push ( new LiteralField (
'RolesDescription' ,
''
));
2012-03-05 14:04:19 +01:00
$rolesTab -> push ( $rolesField );
2011-03-23 10:51:00 +01:00
}
2012-03-01 17:06:30 +01:00
$actions = new FieldList ();
2011-03-23 10:51:00 +01:00
$this -> extend ( 'updateRootFormFields' , $fields , $actions );
$form = new Form (
$this ,
'EditForm' ,
$fields ,
$actions
);
2011-03-31 10:52:29 +02:00
$form -> addExtraClass ( 'cms-edit-form' );
2011-03-23 10:51:00 +01:00
return $form ;
}
2011-04-19 08:04:55 +02:00
function AddForm () {
$form = parent :: AddForm ();
2012-01-07 18:57:14 +01:00
$form -> Actions () -> fieldByName ( 'action_doAdd' ) -> setTitle ( _t ( 'SecurityAdmin.ActionAdd' , 'Add group' ));
2011-04-19 08:04:55 +02:00
return $form ;
}
2011-03-23 10:51:00 +01:00
public function memberimport () {
Requirements :: clear ();
2012-01-07 18:57:14 +01:00
Requirements :: css ( SAPPHIRE_ADMIN_DIR . '/css/screen.css' );
2011-03-23 10:51:00 +01:00
Requirements :: javascript ( THIRDPARTY_DIR . '/jquery/jquery.js' );
Requirements :: javascript ( THIRDPARTY_DIR . '/jquery-livequery/jquery.livequery.js' );
2011-03-23 11:07:31 +01:00
Requirements :: css ( SAPPHIRE_ADMIN_DIR . '/css/MemberImportForm.css' );
2011-03-23 10:51:00 +01:00
Requirements :: javascript ( SAPPHIRE_DIR . '/thirdparty/jquery-entwine/dist/jquery.entwine-dist.js' );
2011-03-23 11:07:31 +01:00
Requirements :: javascript ( SAPPHIRE_ADMIN_DIR . '/javascript/MemberImportForm.js' );
2011-03-23 10:51:00 +01:00
return $this -> renderWith ( 'BlankPage' , array (
2012-01-07 18:57:14 +01:00
'Form' => $this -> MemberImportForm (),
'Content' => ' '
2011-03-23 10:51:00 +01:00
));
}
/**
* @ see SecurityAdmin_MemberImportForm
*
* @ return Form
*/
public function MemberImportForm () {
$group = $this -> currentPage ();
$form = new MemberImportForm (
$this ,
'MemberImportForm'
);
$form -> setGroup ( $group );
return $form ;
}
public function groupimport () {
Requirements :: clear ();
2012-01-07 18:57:14 +01:00
Requirements :: css ( SAPPHIRE_ADMIN_DIR . '/css/screen.css' );
2011-03-23 10:51:00 +01:00
Requirements :: javascript ( THIRDPARTY_DIR . '/jquery/jquery.js' );
Requirements :: javascript ( THIRDPARTY_DIR . '/jquery-livequery/jquery.livequery.js' );
2011-03-23 11:07:31 +01:00
Requirements :: css ( SAPPHIRE_ADMIN_DIR . '/css/MemberImportForm.css' );
2011-03-23 10:51:00 +01:00
Requirements :: javascript ( SAPPHIRE_DIR . '/thirdparty/jquery-entwine/dist/jquery.entwine-dist.js' );
2011-03-23 11:07:31 +01:00
Requirements :: javascript ( SAPPHIRE_ADMIN_DIR . '/javascript/MemberImportForm.js' );
2011-03-23 10:51:00 +01:00
return $this -> renderWith ( 'BlankPage' , array (
2011-12-18 18:18:44 +01:00
'Content' => ' ' ,
2011-03-23 10:51:00 +01:00
'Form' => $this -> GroupImportForm ()
));
}
/**
* @ see SecurityAdmin_MemberImportForm
*
* @ return Form
*/
public function GroupImportForm () {
$form = new GroupImportForm (
$this ,
'GroupImportForm'
);
return $form ;
}
function getCMSTreeTitle () {
return _t ( 'SecurityAdmin.SGROUPS' , 'Security Groups' );
}
public function EditedMember () {
if ( Session :: get ( 'currentMember' )) return DataObject :: get_by_id ( 'Member' , ( int ) Session :: get ( 'currentMember' ));
}
function providePermissions () {
2012-03-05 16:07:20 +01:00
$title = _t ( " SecurityAdmin.MENUTITLE " , LeftAndMain :: menu_title_for_class ( $this -> class ));
2011-03-23 10:51:00 +01:00
return array (
2012-03-05 16:07:20 +01:00
" CMS_ACCESS_SecurityAdmin " => array (
'name' => sprintf ( _t ( 'CMSMain.ACCESS' , " Access to '%s' section " ), $title ),
'category' => _t ( 'Permission.CMS_ACCESS_CATEGORY' , 'CMS Access' ),
'help' => _t (
'SecurityAdmin.ACCESS_HELP' ,
'Allow viewing, adding and editing users, as well as assigning permissions and roles to them.'
)
),
2011-03-23 10:51:00 +01:00
'EDIT_PERMISSIONS' => array (
'name' => _t ( 'SecurityAdmin.EDITPERMISSIONS' , 'Manage permissions for groups' ),
'category' => _t ( 'Permissions.PERMISSIONS_CATEGORY' , 'Roles and access permissions' ),
'help' => _t ( 'SecurityAdmin.EDITPERMISSIONS_HELP' , 'Ability to edit Permissions and IP Addresses for a group. Requires the "Access to \'Security\' section" permission.' ),
'sort' => 0
),
'APPLY_ROLES' => array (
'name' => _t ( 'SecurityAdmin.APPLY_ROLES' , 'Apply roles to groups' ),
'category' => _t ( 'Permissions.PERMISSIONS_CATEGORY' , 'Roles and access permissions' ),
2012-03-05 16:07:20 +01:00
'help' => _t ( 'SecurityAdmin.APPLY_ROLES_HELP' , 'Ability to edit the roles assigned to a group. Requires the "Access to \'Users\' section" permission.' ),
2011-03-23 10:51:00 +01:00
'sort' => 0
)
);
}
/**
* The permissions represented in the $codes will not appearing in the form
* containing { @ link PermissionCheckboxSetField } so as not to be checked / unchecked .
*
* @ param $codes String | Array
*/
static function add_hidden_permission ( $codes ){
if ( is_string ( $codes )) $codes = array ( $codes );
self :: $hidden_permissions = array_merge ( self :: $hidden_permissions , $codes );
}
/**
* @ param $codes String | Array
*/
static function remove_hidden_permission ( $codes ){
if ( is_string ( $codes )) $codes = array ( $codes );
self :: $hidden_permissions = array_diff ( self :: $hidden_permissions , $codes );
}
/**
* @ return Array
*/
static function get_hidden_permissions (){
return self :: $hidden_permissions ;
}
/**
* Clear all permissions previously hidden with { @ link add_hidden_permission }
*/
static function clear_hidden_permissions (){
self :: $hidden_permissions = array ();
}
}
/**
* Delete multiple { @ link Group } records . Usually used through the { @ link SecurityAdmin } interface .
*
* @ package cms
* @ subpackage batchactions
*/
class SecurityAdmin_DeleteBatchAction extends CMSBatchAction {
function getActionTitle () {
return _t ( 'AssetAdmin_DeleteBatchAction.TITLE' , 'Delete groups' );
}
2011-05-02 09:14:05 +02:00
function run ( SS_List $records ) {
2011-03-23 10:51:00 +01:00
$status = array (
'modified' => array (),
'deleted' => array ()
);
foreach ( $records as $record ) {
// TODO Provide better feedback if permission was denied
if ( ! $record -> canDelete ()) continue ;
$id = $record -> ID ;
$record -> delete ();
$status [ 'deleted' ][ $id ] = array ();
$record -> destroy ();
unset ( $record );
}
return Convert :: raw2json ( $status );
}
}
2012-02-12 21:22:11 +01:00