From 9f61ed5a44a06aece4e26ed6afb82ae28ab8a4ea Mon Sep 17 00:00:00 2001
From: Neil Blakey-Milner <nbm@knowledgetree.com>
Date: Wed, 21 Sep 2005 20:42:19 +0000
Subject: [PATCH] Add a mechanism to view permissions applicable to a document.

---
 presentation/lookAndFeel/knowledgeTree/documentmanagement/documentPermissions.php | 141 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 templates/ktcore/document/document_permissions.smarty                             | 149 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 290 insertions(+), 0 deletions(-)
 create mode 100644 presentation/lookAndFeel/knowledgeTree/documentmanagement/documentPermissions.php
 create mode 100644 templates/ktcore/document/document_permissions.smarty

diff --git a/presentation/lookAndFeel/knowledgeTree/documentmanagement/documentPermissions.php b/presentation/lookAndFeel/knowledgeTree/documentmanagement/documentPermissions.php
new file mode 100644
index 0000000..727af45
--- /dev/null
+++ b/presentation/lookAndFeel/knowledgeTree/documentmanagement/documentPermissions.php
@@ -0,0 +1,141 @@
+<?php
+
+require_once("../../../../config/dmsDefaults.php");
+
+require_once(KT_DIR . "/presentation/Html.inc");
+
+require_once(KT_LIB_DIR . "/templating/templating.inc.php");
+require_once(KT_LIB_DIR . "/permissions/permission.inc.php");
+require_once(KT_LIB_DIR . "/foldermanagement/Folder.inc");
+require_once(KT_LIB_DIR . "/groups/Group.inc");
+
+require_once(KT_LIB_DIR . "/permissions/permission.inc.php");
+require_once(KT_LIB_DIR . "/permissions/permissionobject.inc.php");
+require_once(KT_LIB_DIR . "/permissions/permissionassignment.inc.php");
+require_once(KT_LIB_DIR . "/permissions/permissiondescriptor.inc.php");
+require_once(KT_LIB_DIR . "/permissions/permissionutil.inc.php");
+
+require_once(KT_LIB_DIR . "/dispatcher.inc.php");
+$sectionName = "Manage Documents";
+require_once(KT_DIR . "/presentation/webpageTemplate.inc");
+
+function displayFolderPathLink($aPathArray, $aPathNameArray, $sLinkPage = "") {
+    global $default;
+    if (strlen($sLinkPage) == 0) {
+        $sLinkPage = $_SERVER["PHP_SELF"];
+    }
+    $default->log->debug("displayFolderPathLink: slinkPage=$sLinkPage");
+    // display a separate link to each folder in the path
+    for ($i=0; $i<count($aPathArray); $i++) {
+        $iFolderID = $aPathArray[$i];
+        // retrieve the folder name for this folder
+        $sFolderName = $aPathNameArray[$i];
+        // generate a link back to this page setting fFolderID
+        $sLink = generateLink($sLinkPage,
+                              "fBrowseType=folder&fFolderID=$iFolderID",
+                              $sFolderName);
+        $sPathLinks = (strlen($sPathLinks) > 0) ? $sPathLinks . " > " . $sLink : $sLink;
+    }
+    return $sPathLinks;
+}
+
+
+class DocumentPermissionsDispatcher extends KTStandardDispatcher {
+    function do_main() {
+        $oTemplating = new KTTemplating;
+        $oTemplate = $oTemplating->loadTemplate("ktcore/document/document_permissions");
+        $oDocument = Document::get($_REQUEST['fDocumentID']);
+        $oPO = KTPermissionObject::get($oDocument->getPermissionObjectID());
+        $aPermissions = KTPermission::getList();
+        $aMapPermissionGroup = array();
+        foreach ($aPermissions as $oPermission) {
+            $oPA = KTPermissionAssignment::getByPermissionAndObject($oPermission, $oPO);
+            if (PEAR::isError($oPA)) {
+                continue;
+            }
+            $oDescriptor = KTPermissionDescriptor::get($oPA->getPermissionDescriptorID());
+            $iPermissionID = $oPermission->getID();
+            $aIDs = $oDescriptor->getGroups();
+            $aMapPermissionGroup[$iPermissionID] = array();
+            foreach ($aIDs as $iID) {
+                $aMapPermissionGroup[$iPermissionID][$iID] = true;
+            }
+        }
+        $aMapPermissionUser = array();
+        $aUsers = User::getList();
+        foreach ($aPermissions as $oPermission) {
+            $iPermissionID = $oPermission->getID();
+            foreach ($aUsers as $oUser) {
+                if (KTPermissionUtil::userHasPermissionOnItem($oUser, $oPermission, $oDocument)) {
+                    $aMapPermissionUser[$iPermissionID][$oUser->getID()] = true;
+                }
+            }
+        }
+
+        $oInherited = KTPermissionUtil::findRootObjectForPermissionObject($oPO);
+        if ($oInherited === $oDocument) {
+            $bEdit = true;
+        } else {
+            $iInheritedFolderID = $oInherited->getID();
+            $sInherited = displayFolderPathLink(Folder::getFolderPathAsArray($iInheritedFolderID),
+                        Folder::getFolderPathNamesAsArray($iInheritedFolderID),
+                        "$default->rootUrl/control.php?action=editFolderPermissions");
+            $bEdit = false;
+        }
+
+        $aTemplateData = array(
+            "permissions" => $aPermissions,
+            "groups" => Group::getList(),
+            "iDocumentID" => $_REQUEST['fDocumentID'],
+            "aMapPermissionGroup" => $aMapPermissionGroup,
+            "users" => $aUsers,
+            "aMapPermissionUser" => $aMapPermissionUser,
+            "edit" => $bEdit,
+            "inherited" => $sInherited,
+        );
+        return $oTemplate->render($aTemplateData);
+    }
+
+    function handleOutput($data) {
+        global $main;
+        $main->bFormDisabled = true;
+        $main->setCentralPayload($data);
+        $main->render();
+    }
+
+    function do_update() {
+        $oDocument = Document::get($_REQUEST['fDocumentID']);
+        $oPO = KTPermissionObject::get($oDocument->getPermissionObjectID());
+        $aFoo = $_REQUEST['foo'];
+        $aPermissions = KTPermission::getList();
+        foreach ($aPermissions as $oPermission) {
+            $iPermID = $oPermission->getID();
+            $aAllowed = KTUtil::arrayGet($aFoo, $iPermID, array());
+            KTPermissionUtil::setPermissionForID($oPermission, $oPO, $aAllowed);
+        }
+        KTPermissionUtil::updatePermissionLookupForPO($oPO);
+        return $this->errorRedirectToMain('Permissions updated',
+                array('fDocumentID' => $oDocument->getID()));
+    }
+
+    function do_copyPermissions() {
+        $oDocument = Document::get($_REQUEST['fDocumentID']);
+        KTPermissionUtil::copyPermissionObject($oDocument);
+        return $this->errorRedirectToMain('Permissions updated',
+                array('fDocumentID' => $oDocument->getID()));
+    }
+
+    function do_inheritPermissions() {
+        $oDocument = Document::get($_REQUEST['fDocumentID']);
+        KTPermissionUtil::inheritPermissionObject($oDocument);
+        return $this->errorRedirectToMain('Permissions updated',
+                array('fDocumentID' => $oDocument->getID()));
+    }
+
+    
+}
+
+$oDispatcher = new DocumentPermissionsDispatcher;
+$oDispatcher->dispatch();
+
+?>
diff --git a/templates/ktcore/document/document_permissions.smarty b/templates/ktcore/document/document_permissions.smarty
new file mode 100644
index 0000000..f2d9c92
--- /dev/null
+++ b/templates/ktcore/document/document_permissions.smarty
@@ -0,0 +1,149 @@
+{literal}
+<style>
+td.true { background-color: #aaffaa; text-align: centre }
+td.false { background-color: #ffaaaa; text-align: centre }
+.edit { display: none; }
+.view { display: block; }
+
+.tablebutton {
+    margin: 0em;
+    margin-right: 1em;
+    border: 1px solid #cccccc;
+}
+.activebutton {
+    background-color: #eeeeff;
+}
+.inactivebutton {
+    background-color: #ffeeee;
+}
+</style>
+{/literal}
+<script language="javascript" src="/thirdpartyjs/MochiKit/Base.js">
+<script language="javascript" src="/thirdpartyjs/MochiKit/Iter.js">
+<script language="javascript" src="/thirdpartyjs/MochiKit/DOM.js">
+<h2>Document permissions</h2>
+
+{ if $edit }
+<div style="text-align: right">
+<span class="tablebutton activebutton">
+<a href="javascript:MochiKit.DOM.showElement('view'); MochiKit.DOM.hideElement('edit');">View</a>
+</span>
+<span class="tablebutton inactivebutton">
+<a href="javascript:MochiKit.DOM.showElement('edit'); MochiKit.DOM.hideElement('view');">Edit</a>
+</span>
+</div>
+{ /if }
+<div class="view" id="view">
+<table class="pretty" cellspacing="0" cellpadding="0" border="0" width="100%">
+<thead>
+<tr>
+<th>Group</th>
+{ foreach item=oPerm from=$permissions }
+<th title="{$oPerm->sName}">{$oPerm->sHumanName}</th>
+{ /foreach }
+</tr>
+</thead>
+<tbody>
+{ foreach item=oGroup from=$groups }
+<td>{$oGroup->getID()} / {$oGroup->getName()}</td>
+  { assign var=iGroupID value=$oGroup->getID() }
+  { foreach item=oPerm from=$permissions }
+    { assign var=iPermID value=$oPerm->getID() }
+    { assign var=bHasPerm value=$aMapPermissionGroup[$iPermID][$iGroupID] }
+{ if $bHasPerm }
+<td class="true">True</td>
+{ else }
+<td class="false">False</td>
+{ /if }
+  { /foreach }
+</tr>
+{ /foreach }
+</tbody>
+</table>
+
+<div style="text-align: center; padding-top: 2px">
+<span style="border: 1px solid #cccccc; background-color: #ffeeee;
+padding: 2px; padding-right: 1em; padding-left: 1em">
+{ if $inherited }
+Inherited from {$inherited}
+{* [<a
+href="{$smarty.server.PHP_SELF}?action=copyPermissions&fDocumentID={$iDocumentID}">Copy</a>]
+*}
+{ else }
+[<a
+href="{$smarty.server.PHP_SELF}?action=inheritPermissions&fDocumentID={$iDocumentID}">Use
+parent's permissions</a>]
+{ /if }
+</span>
+</div>
+</div>
+
+{ if $edit }
+<div class="edit" id="edit">
+<form method="POST">
+<input type="hidden" name="action" value="update">
+<input type="hidden" name="fDocumentID" value="{$iDocumentID}">
+<table class="pretty" cellspacing="0" cellpadding="0" border="0" width="100%">
+<thead>
+<tr>
+<th>Group</th>
+{ foreach item=oPerm from=$permissions }
+<th title="{$oPerm->sName}">{$oPerm->sHumanName}</th>
+{ /foreach }
+</tr>
+</thead>
+<tbody>
+{ foreach item=oGroup from=$groups }
+<td>{$oGroup->getID()} / {$oGroup->getName()}</td>
+  { assign var=iGroupID value=$oGroup->getID() }
+  { foreach item=oPerm from=$permissions }
+    { assign var=iPermID value=$oPerm->getID() }
+    { assign var=bHasPerm value=$aMapPermissionGroup[$iPermID][$iGroupID] }
+{ if $bHasPerm }
+<td class="true"><input type="checkbox" name="foo[{$iPermID}][group][]"
+value="{$iGroupID}" checked="true"></td>
+{ else }
+<td class="false"><input type="checkbox" name="foo[{$iPermID}][group][]"
+value="{$iGroupID}"></td>
+{ /if }
+  { /foreach }
+</tr>
+{ /foreach }
+</tbody>
+</table>
+
+<input type="submit" name="submit" value="Update">
+</form>
+</div>
+{ /if }
+
+<h2>User permissions</h2>
+
+<div>
+<table class="pretty" cellspacing="0" cellpadding="0" border="0" width="100%">
+<thead>
+<tr>
+<th>User</th>
+{ foreach item=oPerm from=$permissions }
+<th title="{$oPerm->sName}">{$oPerm->sHumanName}</th>
+{ /foreach }
+</tr>
+</thead>
+<tbody>
+{ foreach item=oUser from=$users }
+<td>{$oUser->getID()} / {$oUser->getName()}</td>
+  { assign var=iUserID value=$oUser->getID() }
+  { foreach item=oPerm from=$permissions }
+    { assign var=iPermID value=$oPerm->getID() }
+    { assign var=bHasPerm value=$aMapPermissionUser[$iPermID][$iUserID] }
+{ if $bHasPerm }
+<td class="true">True</td>
+{ else }
+<td class="false">False</td>
+{ /if }
+  { /foreach }
+</tr>
+{ /foreach }
+</tbody>
+</table>
+</div>
--
libgit2 0.21.4