Server : Apache System : Linux indy02.toastserver.com 3.10.0-962.3.2.lve1.5.85.el7.x86_64 #1 SMP Thu Apr 18 15:18:36 UTC 2024 x86_64 User : palandch ( 1163) PHP Version : 7.1.33 Disable Function : NONE Directory : /home/palandch/www/core/model/modx/processors/security/resourcegroup/ |
<?php
/**
* Create a resource group
*
* @param string $name The name of the new resource group
*
* @package modx
* @subpackage processors.security.resourcegroup
*/
class modResourceGroupCreateProcessor extends modObjectCreateProcessor {
public $classKey = 'modResourceGroup';
public $languageTopics = array('access');
public $permission = 'resourcegroup_new';
public $objectType = 'resource_group';
public $beforeSaveEvent = 'OnBeforeChunkFormSave';
public $afterSaveEvent = 'OnChunkFormSave';
public function initialize() {
$this->setDefaultProperties(array(
'automatic_access' => false,
));
return parent::initialize();
}
public function beforeSave() {
$name = $this->getProperty('name');
if (empty($name)) {
$this->addFieldError('name',$this->modx->lexicon('resource_group_ns_name'));
}
if ($this->doesAlreadyExist(array('name' => $name))) {
$this->addFieldError('name',$this->modx->lexicon('resource_group_err_ae'));
}
$this->setCheckbox('access_admin');
$this->setCheckbox('access_anon');
$this->setCheckbox('access_parallel');
return parent::beforeSave();
}
public function afterSave() {
$contexts = $this->getProperty('access_contexts','');
$contexts = is_array($contexts) ? $contexts : explode(',',$contexts);
$contexts = array_unique($contexts);
if (!empty($contexts)) {
$flush = false;
if ($this->getProperty('access_admin')) {
if ($this->addAdminAccess($contexts)) $flush = true;
}
if ($this->getProperty('access_anon')) {
if ($this->addAnonymousAccess($contexts)) $flush = true;
}
if ($this->getProperty('access_parallel')) {
if ($this->addParallelUserGroup($contexts)) $flush = true;
}
$userGroups = $this->getProperty('access_usergroups');
if (!empty($userGroups)) {
$userGroups = is_array($userGroups) ? $userGroups : explode(',',$userGroups);
if ($this->addOtherUserGroups($userGroups,$contexts)) $flush = true;
}
if ($flush) {
$this->flushPermissions();
}
}
return parent::afterSave();
}
/**
* Give the Administrator User Group access to this Resource Group
* @param array $contexts
* @return boolean
*/
protected function addAdminAccess(array $contexts = array()) {
/** @var modUserGroup $adminGroup */
$adminGroup = $this->modx->getObject('modUserGroup',array('name' => 'Administrator'));
if (!$adminGroup) return false;
/** @var modAccessPolicy $policy */
$policy = $this->modx->getObject('modAccessPolicy',array('name' => 'Resource'));
if (!$policy) return false;
foreach ($contexts as $context) {
/** @var modAccessResourceGroup $acl */
$acl = $this->modx->newObject('modAccessResourceGroup');
$acl->fromArray(array(
'context_key' => trim($context),
'target' => $this->object->get('id'),
'principal_class' => 'modUserGroup',
'principal' => $adminGroup->get('id'),
'authority' => 9999,
'policy' => $policy->get('id'),
));
$acl->save();
}
return true;
}
/**
* Give anonymous users view access to this Resource Group
* @param array $contexts
* @return boolean
*/
protected function addAnonymousAccess(array $contexts = array()) {
/** @var modAccessPolicy $policy */
$policy = $this->modx->getObject('modAccessPolicy',array('name' => 'Load, List and View'));
if (!$policy) return false;
foreach ($contexts as $context) {
/** @var modAccessResourceGroup $acl */
$acl = $this->modx->newObject('modAccessResourceGroup');
$acl->fromArray(array(
'context_key' => trim($context),
'target' => $this->object->get('id'),
'principal_class' => 'modUserGroup',
'principal' => 0,
'authority' => 9999,
'policy' => $policy->get('id'),
));
$acl->save();
}
return true;
}
/**
* Create a User Group with the same name and give it access to this Resource Group
* @param array $contexts
* @return boolean
*/
protected function addParallelUserGroup(array $contexts = array()) {
/** @var modUserGroup $userGroup */
$userGroup = $this->modx->getObject('modUserGroup',array(
'name' => $this->object->get('name'),
));
if (!$userGroup) {
$userGroup = $this->modx->newObject('modUserGroup');
$userGroup->set('name',$this->object->get('name'));
if (!$userGroup->save()) {
return false;
}
}
/** @var modAccessPolicy $policy */
$policy = $this->modx->getObject('modAccessPolicy',array('name' => 'Resource'));
if (!$policy) return false;
foreach ($contexts as $context) {
/** @var modAccessResourceGroup $acl */
$acl = $this->modx->newObject('modAccessResourceGroup');
$acl->fromArray(array(
'context_key' => trim($context),
'target' => $this->object->get('id'),
'principal_class' => 'modUserGroup',
'principal' => $userGroup->get('id'),
'authority' => 9999,
'policy' => $policy->get('id'),
));
$acl->save();
}
return true;
}
/**
* Give a list of User Groups access to this Resource Group
*
* @param array $userGroupNames
* @param array $contexts
* @return boolean
*/
protected function addOtherUserGroups(array $userGroupNames = array(),array $contexts = array()) {
$userGroupNames = array_unique($userGroupNames);
/** @var modAccessPolicy $policy */
$policy = $this->modx->getObject('modAccessPolicy',array('name' => 'Resource'));
if (!$policy) return false;
foreach ($userGroupNames as $userGroupName) {
/** @var modUserGroup $userGroup */
$userGroup = $this->modx->getObject('modUserGroup',array('name' => trim($userGroupName)));
if (!$userGroup) return false;
foreach ($contexts as $context) {
/** @var modAccessResourceGroup $acl */
$acl = $this->modx->newObject('modAccessResourceGroup');
$acl->fromArray(array(
'context_key' => trim($context),
'target' => $this->object->get('id'),
'principal_class' => 'modUserGroup',
'principal' => $userGroup->get('id'),
'authority' => 9999,
'policy' => $policy->get('id'),
));
$acl->save();
}
}
return true;
}
/**
* Flush the permissions
*
* @return array|string
*/
protected function flushPermissions() {
$ctxQuery = $this->modx->newQuery('modContext');
$ctxQuery->select($this->modx->getSelectColumns('modContext', '', '', array('key')));
if ($ctxQuery->prepare() && $ctxQuery->stmt->execute()) {
$contexts = $ctxQuery->stmt->fetchAll(PDO::FETCH_COLUMN);
if ($contexts) {
$serialized = serialize($contexts);
$this->modx->exec("UPDATE {$this->modx->getTableName('modUser')} SET {$this->modx->escape('session_stale')} = {$this->modx->quote($serialized)}");
}
}
return $this->success();
}
}
return 'modResourceGroupCreateProcessor';