array("setPermissionFolder"), "2.0.6" => array("addTemplateMimeTypes"), "2.0.8" => array("setPermissionObject"), "2.99.1" => array("createFieldSets"), ); var $descriptions = array( "rebuildSearchPermissions" => "Rebuild search permissions with updated algorithm", "setPermissionFolder" => "Set permission folder for each folder for simplified permissions management", "addTemplateMimeTypes" => "Add MIME types for Excel and Word templates", "setPermissionObject" => "Set the permission object in charge of a document or folder", "createFieldSets" => "Create a fieldset for each field without one", ); var $phases = array( "setPermissionObject" => 1, "createFieldSets" => 1, ); // {{{ _setPermissionFolder function _setPermissionFolder($oFolder) { global $default; $oInheritedFolder = $oFolder; while ($bFoundPermissions !== true) { /*ok*/$aCheckQuery = array('SELECT id FROM groups_folders_link WHERE folder_id = ? LIMIT 1', $oInheritedFolder->getID()); if (count(DBUtil::getResultArrayKey($aCheckQuery, 'id')) == 0) { $default->log->debug('No direct permissions on folder ' . $oInheritedFolder->getID()); $bInherited = true; $oInheritedFolder =& Folder::get($oInheritedFolder->getParentID()); if ($oInheritedFolder === false) { break; } // if our parent knows the permission folder, use that. $aQuery = array("SELECT permission_folder_id FROM folders WHERE id = ?", array($oInheritedFolder->getID())); $iPermissionFolderID = DBUtil::getOneResultKey($aQuery, 'permission_folder_id'); if (!empty($iPermissionFolderID)) { $aQuery = array( "UPDATE folders SET permission_folder_id = ? WHERE id = ?", array($iPermissionFolderID, $oFolder->getID()) ); DBUtil::runQuery($aQuery); return; } $default->log->debug('... trying parent: ' . $oInheritedFolder->getID()); } else { $default->log->debug('Found direct permissions on folder ' . $oInheritedFolder->getID()); $iPermissionFolderID = $oInheritedFolder->getID(); $aQuery = array( "UPDATE folders SET permission_folder_id = ? WHERE id = ?", array($iPermissionFolderID, $oFolder->getID()) ); DBUtil::runQuery($aQuery); return; } } $default->log->error('No permissions whatsoever for folder ' . $oFolder->getID()); // 0, which can never exist, for non-existent. null for not set yet (database upgrade). $iPermissionFolderID = 0; $aQuery = array( "UPDATE folders SET permission_folder_id = ? WHERE id = ?", array($iPermissionFolderID, $oFolder->getID()) ); DBUtil::runQuery($aQuery); } // }}} // {{{ setPermissionFolder function setPermissionFolder() { global $default; require_once(KT_LIB_DIR . '/foldermanagement/Folder.inc'); $sQuery = "SELECT id FROM $default->folders_table WHERE permission_folder_id IS NULL"; $aIDs = DBUtil::getResultArrayKey($sQuery, 'id'); foreach ($aIDs as $iID) { $oFolder =& Folder::get($iID); UpgradeFunctions::_setPermissionFolder($oFolder); } } // }}} // {{{ addTemplateMimeTypes function addTemplateMimeTypes() { global $default; $table = $default->mimetypes_table; $query = sprintf('SELECT id FROM %s WHERE filetypes = ?', $table); $newTypes = array( array( 'filetypes' => 'xlt', 'mimetypes' => 'application/vnd.ms-excel', 'icon_path' => 'icons/excel.gif', ), array( 'filetypes' => 'dot', 'mimetypes' => 'application/msword', 'icon_path' => 'icons/word.gif', ), ); foreach ($newTypes as $types) { $res = DBUtil::getOneResultKey(array($query, $types['filetypes']), 'id'); if (PEAR::isError($res)) { return $res; } if (is_null($res)) { $res = DBUtil::autoInsert($table, $types); if (PEAR::isError($res)) { return $res; } } } return true; } // }}} // {{{ _setRead function _setRead($iID, $oPO) { require_once(KT_LIB_DIR . '/permissions/permission.inc.php'); require_once(KT_LIB_DIR . '/permissions/permissionutil.inc.php'); $sTable = 'groups_folders_link'; $oPermission = KTPermission::getByName('ktcore.permissions.read'); $query = "SELECT group_id FROM $sTable WHERE folder_id = ? AND (can_read = ? OR can_write = ?)"; $aParams = array($iID, true, true); $aGroupIDs = DBUtil::getResultArrayKey(array($query, $aParams), 'group_id'); $aAllowed = array("group" => $aGroupIDs); KTPermissionUtil::setPermissionForID($oPermission, $oPO, $aAllowed); } // }}} // {{{ _setWrite function _setWrite($iID, $oPO) { require_once(KT_LIB_DIR . '/permissions/permission.inc.php'); require_once(KT_LIB_DIR . '/permissions/permissionutil.inc.php'); $sTable = 'groups_folders_link'; $oPermission = KTPermission::getByName('ktcore.permissions.write'); $query = "SELECT group_id FROM $sTable WHERE folder_id = ? AND can_write = ?"; $aParams = array($iID, true); $aGroupIDs = DBUtil::getResultArrayKey(array($query, $aParams), 'group_id'); $aAllowed = array("group" => $aGroupIDs); KTPermissionUtil::setPermissionForID($oPermission, $oPO, $aAllowed); } // }}} // {{{ _setAddFolder function _setAddFolder($iID, $oPO) { require_once(KT_LIB_DIR . '/permissions/permission.inc.php'); require_once(KT_LIB_DIR . '/permissions/permissionutil.inc.php'); $sTable = 'groups_folders_link'; $oPermission = KTPermission::getByName('ktcore.permissions.addFolder'); $query = "SELECT group_id FROM $sTable WHERE folder_id = ? AND can_write = ?"; $aParams = array($iID, true); $aGroupIDs = DBUtil::getResultArrayKey(array($query, $aParams), 'group_id'); $aAllowed = array("group" => $aGroupIDs); KTPermissionUtil::setPermissionForID($oPermission, $oPO, $aAllowed); } // }}} // {{{ setPermissionObject function setPermissionObject() { global $default; require_once(KT_LIB_DIR . '/permissions/permissionobject.inc.php'); // First, set permission object on all folders that were // "permission folders". $query = "SELECT id FROM $default->folders_table WHERE permission_folder_id = id AND permission_object_id IS NULL"; $aIDs = DBUtil::getResultArrayKey($query, 'id'); foreach ($aIDs as $iID) { $oPO =& KTPermissionObject::createFromArray(array()); if (PEAR::isError($oPO)) { var_dump($oPO); exit(0); } $sTableName = KTUtil::getTableName('folders'); $query = sprintf("UPDATE %s SET permission_object_id = %d WHERE id = %d", $sTableName, $oPO->getId(), $iID); $res = DBUtil::runQuery($query); UpgradeFunctions::_setRead($iID, $oPO); UpgradeFunctions::_setWrite($iID, $oPO); UpgradeFunctions::_setAddFolder($iID, $oPO); } // Next, set permission object on all folders that weren't // "permission folders" by using the permission object on their // permission folders. $query = "SELECT id FROM $default->folders_table WHERE permission_object_id IS NULL"; $aIDs = DBUtil::getResultArrayKey($query, 'id'); foreach ($aIDs as $iID) { $sTableName = KTUtil::getTableName('folders'); $query = sprintf("SELECT F2.permission_object_id AS poi FROM %s AS F LEFT JOIN %s AS F2 WHERE F2.id = F.permission_folder_id WHERE id = ?", $sTableName, $sTableName); $aParams = array($iID); $iPermissionObjectId = DBUtil::getOneResultKey(array($query, $aParams), 'poi'); $sTableName = KTUtil::getTableName('folders'); $query = sprintf("UPDATE %s SET permission_object_id = %d WHERE id = %d", $sTableName, $iPermissionObjectId, $iID); DBUtil::runQuery($query); } $sDocumentsTable = KTUtil::getTableName('documents'); $sFoldersTable = KTUtil::getTableName('folders'); $query = sprintf("UPDATE %s AS D, %s AS F SET D.permission_object_id = F.permission_object_id WHERE D.folder_id = F.id AND D.permission_object_id IS NULL", $sDocumentsTable, $sFoldersTable); DBUtil::runQuery($query); } // }}} // {{{ createFieldSets function createFieldSets () { global $default; require_once(KT_LIB_DIR . '/metadata/fieldset.inc.php'); $sFieldsTable = KTUtil::getTableName('document_fields'); $sQuery = sprintf("SELECT id, name, is_generic FROM %s", $sFieldsTable); $aFields = DBUtil::getResultArray($sQuery); foreach ($aFields as $aField) { $sName = $aField['name']; $sNamespace = 'local.' . str_replace(array(' '), array(), strtolower($sName)); $iFieldId = $aField['id']; $bIsGeneric = $aField['is_generic']; $sFieldsetsTable = KTUtil::getTableName('fieldsets'); $iFieldsetId = DBUtil::autoInsert($sFieldsetsTable, array( 'name' => $sName, 'namespace' => $sNamespace, 'mandatory' => false, 'is_conditional' => false, 'master_field' => $iFieldId, 'is_generic' => $bIsGeneric, )); if (PEAR::isError($iFieldsetId)) { return $iFieldsetId; } $sQuery = sprintf("UPDATE %s SET parent_fieldset = ? WHERE id = ?", $sFieldsTable); $aParams = array($iFieldsetId, $iFieldId); $res = DBUtil::runQuery(array($sQuery, $aParams)); if (PEAR::isError($res)) { return $res; } $sTable = KTUtil::getTableName('document_type_fields'); $aQuery = array( "SELECT document_type_id FROM $sTable WHERE field_id = ?", array($iFieldId) ); $aDocumentTypeIds = DBUtil::getResultArrayKey($aQuery, 'document_type_id'); $sTable = KTUtil::getTableName('document_type_fieldsets'); foreach ($aDocumentTypeIds as $iDocumentTypeId) { $res = DBUtil::autoInsert($sTable, array( 'document_type_id' => $iDocumentTypeId, 'fieldset_id' => $iFieldsetId, )); if (PEAR::isError($res)) { return $res; } } } } // }}} } ?>