owner->class == 'Group') { return array( 'has_one' => array( 'Subsite' => 'Subsite', ), ); } } function updateCMSFields(&$fields) { $subsites = DataObject::get('Subsite'); $tab = $fields->findOrMakeTab( 'Root.Subsites', _t('GroupSubsites.SECURITYTABTITLE', 'Subsites') ); $tab->push(new DropdownField( 'SubsiteID', _t('GroupSubsites.SECURITYACCESS', 'Limit CMS access to subsites', PR_MEDIUM, 'Dropdown listing existing subsites which this group has access to'), ($subsites) ? $subsites->toDropDownMap() : null, null, null, '' )); } /** * If this group belongs to a subsite, * append the subsites title to the group title * to make it easy to distinguish in the tree-view * of the security admin interface. */ function alternateTreeTitle() { if($this->owner->SubsiteID == 0) { return $this->owner->Title . ' (global group)'; } else { return $this->owner->Title; // . ' (' . $this->owner->Subsite()->Title . ')'; } } /** * Update any requests to limit the results to the current site */ function augmentSQL(SQLQuery &$query) { if(Subsite::$disable_subsite_filter) return; // If you're querying by ID, ignore the sub-site - this is a bit ugly... if(!$query->where || (strpos($query->where[0], ".`ID` = ") === false && strpos($query->where[0], ".ID = ") === false)) { if($context = DataObject::context_obj()) $subsiteID = (int)$context->SubsiteID; else $subsiteID = (int)Subsite::currentSubsiteID(); // The foreach is an ugly way of getting the first key :-) foreach($query->from as $tableName => $info) { $query->where[] = "`$tableName`.SubsiteID IN (0, $subsiteID)"; break; } $query->orderby = 'SubsiteID' . ($query->orderby ? ', ' : '') . $query->orderby; } } function augmentBeforeWrite() { if(!is_numeric($this->owner->ID) && !$this->owner->SubsiteID) $this->owner->SubsiteID = Subsite::currentSubsiteID(); } function alternateCanEdit() { // Check the CMS_ACCESS_SecurityAdmin privileges on the subsite that owns this group $oldSubsiteID = Session::get('SubsiteID'); Session::set('SubsiteID', $this->owner->SubsiteID); $access = Permission::check('CMS_ACCESS_SecurityAdmin'); Session::set('SubsiteID', $oldSubsiteID); return $access; } /** * Create a duplicate of this group and save it to another subsite. * The group and permissions will be duplicated, but not the members. * @param $subsiteID int|Subsite The Subsite to copy to, or its ID */ public function duplicateToSubsite($subsiteID = null) { if(is_object($subsiteID)) { $subsite = $subsiteID; $subsiteID = $subsite->ID; } else { $subsite = DataObject::get_by_id('Subsite', $subsiteID); } $group = $this->owner->duplicate(false); $subsiteID = ($subsiteID ? $subsiteID : Subsite::currentSubsiteID()); $group->SubsiteID = $subsiteID; $group->write(); // Duplicate permissions $permissions = $this->owner->Permissions(); foreach($permissions as $permission) { $newPerm = $permission->duplicate(false); $newPerm->GroupID = $group->ID; $newPerm->write(); } return $group; } } ?>