Rev 12 | Rev 20 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log | RSS feed
| Rev | Author | Line No. | Line |
|---|---|---|---|
| 2 | daniel-mar | 1 | <?php |
| 2 | |||
| 3 | /* |
||
| 4 | * OIDplus 2.0 |
||
| 5 | * Copyright 2019 Daniel Marschall, ViaThinkSoft |
||
| 6 | * |
||
| 7 | * Licensed under the Apache License, Version 2.0 (the "License"); |
||
| 8 | * you may not use this file except in compliance with the License. |
||
| 9 | * You may obtain a copy of the License at |
||
| 10 | * |
||
| 11 | * http://www.apache.org/licenses/LICENSE-2.0 |
||
| 12 | * |
||
| 13 | * Unless required by applicable law or agreed to in writing, software |
||
| 14 | * distributed under the License is distributed on an "AS IS" BASIS, |
||
| 15 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
||
| 16 | * See the License for the specific language governing permissions and |
||
| 17 | * limitations under the License. |
||
| 18 | */ |
||
| 19 | |||
| 20 | abstract class OIDplusObject { |
||
| 21 | public static $registeredObjectTypes = array(); |
||
| 22 | |||
| 23 | public static function parse($node_id) { // please overwrite this function! |
||
| 24 | // TODO: in case we are not calling this class directly, check if function is overwritten and throw exception otherwise |
||
| 25 | foreach (self::$registeredObjectTypes as $ot) { |
||
| 26 | if ($obj = $ot::parse($node_id)) return $obj; |
||
| 27 | } |
||
| 28 | return null; |
||
| 29 | } |
||
| 30 | |||
| 31 | public abstract static function objectTypeTitle(); |
||
| 32 | |||
| 33 | public abstract static function objectTypeTitleShort(); |
||
| 34 | |||
| 35 | public abstract static function ns(); |
||
| 36 | |||
| 37 | public abstract static function root(); |
||
| 38 | |||
| 39 | public abstract function isRoot(); |
||
| 40 | |||
| 41 | public abstract function nodeId(); |
||
| 42 | |||
| 43 | public abstract function addString($str); |
||
| 44 | |||
| 45 | public abstract function crudShowId(OIDplusObject $parent); |
||
| 46 | |||
| 47 | public abstract function crudInsertPrefix(); |
||
| 48 | |||
| 49 | public abstract function jsTreeNodeName(OIDplusObject $parent = null); |
||
| 50 | |||
| 51 | public abstract function defaultTitle(); |
||
| 52 | |||
| 16 | daniel-mar | 53 | public abstract function isLeafNode(); |
| 54 | |||
| 2 | daniel-mar | 55 | public abstract function getContentPage(&$title, &$content); |
| 56 | |||
| 57 | private static function getRaRoots_rec($parent=null, $ra_email=null, &$out, $prev_owns) { |
||
| 58 | if (is_null($parent)) { |
||
| 59 | $roots = array(); |
||
| 60 | foreach (self::$registeredObjectTypes as $ot) { |
||
| 61 | $roots[] = "parent = '" . OIDplus::db()->real_escape_string($ot::root()) . "'"; |
||
| 62 | } |
||
| 63 | $roots = implode(' or ', $roots); |
||
| 64 | } else { |
||
| 65 | $roots = "parent = '" . OIDplus::db()->real_escape_string($parent) . "'"; |
||
| 66 | } |
||
| 67 | |||
| 68 | $res = OIDplus::db()->query("select id, ra_email from ".OIDPLUS_TABLENAME_PREFIX."objects where $roots order by ".OIDplus::db()->natOrder('id')); |
||
| 69 | |||
| 70 | $this_owns = array(); |
||
| 71 | $this_all = array(); |
||
| 72 | while ($row = OIDplus::db()->fetch_array($res)) { |
||
| 73 | if (is_null($ra_email)) { |
||
| 74 | // if $ra_email is null, we want to query only the roots of the currently logged in user |
||
| 75 | $owns = OIDplus::authUtils()::isRaLoggedIn($row['ra_email']); |
||
| 76 | } else { |
||
| 77 | $owns = $row['ra_email'] == $ra_email; |
||
| 78 | } |
||
| 79 | |||
| 80 | if ($owns) $this_owns[] = $row['id']; |
||
| 81 | $this_all[] = $row['id']; |
||
| 82 | } |
||
| 83 | |||
| 84 | foreach ($this_owns as $this_ra) { |
||
| 85 | $nogap = true; |
||
| 86 | if (!is_null($prev_owns)) { |
||
| 87 | // Check if we have any gaps. If there is a "gap" in the hierarchy, then we need to count that as a second root of that RA ("reintroduce ownership") |
||
| 88 | foreach ($prev_owns as $prev) { |
||
| 89 | if (oid_up(explode(':',$this_ra)[1]) == explode(':',$prev)[1]) $nogap = false; |
||
| 90 | } |
||
| 91 | } |
||
| 92 | if ($nogap) $out[] = self::parse($this_ra); |
||
| 93 | } |
||
| 94 | |||
| 95 | foreach ($this_all as $this_ra) { |
||
| 96 | self::getRaRoots_rec($this_ra, $ra_email, $out, $this_owns); |
||
| 97 | } |
||
| 98 | } |
||
| 99 | |||
| 100 | public static function getRaRoots($ra_email=null) { |
||
| 101 | $out = array(); |
||
| 102 | self::getRaRoots_rec(null, $ra_email, $out, null); |
||
| 103 | return $out; |
||
| 104 | } |
||
| 105 | |||
| 106 | private static function getAllNonConfidential_rec($parent=null, &$out) { |
||
| 107 | if (is_null($parent)) { |
||
| 108 | $roots = array(); |
||
| 109 | foreach (self::$registeredObjectTypes as $ot) { |
||
| 110 | $roots[] = "parent = '" . OIDplus::db()->real_escape_string($ot::root()) . "'"; |
||
| 111 | } |
||
| 112 | $roots = implode(' or ', $roots); |
||
| 113 | } else { |
||
| 114 | $roots = "parent = '" . OIDplus::db()->real_escape_string($parent) . "'"; |
||
| 115 | } |
||
| 116 | |||
| 117 | $res = OIDplus::db()->query("select id, confidential from ".OIDPLUS_TABLENAME_PREFIX."objects where $roots order by ".OIDplus::db()->natOrder('id')); |
||
| 118 | |||
| 119 | while ($row = OIDplus::db()->fetch_array($res)) { |
||
| 120 | if ($row['confidential'] == '1') { |
||
| 121 | // do nothing |
||
| 122 | } else { |
||
| 123 | $out[] = $row['id']; |
||
| 124 | self::getAllNonConfidential_rec($row['id'], $out); |
||
| 125 | } |
||
| 126 | } |
||
| 127 | } |
||
| 128 | |||
| 129 | public static function getAllNonConfidential() { |
||
| 130 | $out = array(); |
||
| 131 | self::getAllNonConfidential_rec(null, $out); |
||
| 132 | return $out; |
||
| 133 | } |
||
| 134 | |||
| 135 | public function isConfidential() { |
||
| 136 | $curid = $this->nodeId(); |
||
| 137 | // Recursively search for the confidential flag in the parents |
||
| 138 | while (OIDplus::db()->num_rows($res = OIDplus::db()->query("select parent, confidential from ".OIDPLUS_TABLENAME_PREFIX."objects where id = '".OIDplus::db()->real_escape_string($curid)."'")) > 0) { |
||
| 139 | $row = OIDplus::db()->fetch_array($res); |
||
| 140 | if ($row['confidential']) return true; |
||
| 141 | $curid = $row['parent']; |
||
| 142 | } |
||
| 143 | |||
| 144 | return false; |
||
| 145 | } |
||
| 146 | |||
| 147 | public function isChildOf(OIDplusObject $obj) { |
||
| 148 | $curid = $this->nodeId(); |
||
| 149 | while (OIDplus::db()->num_rows($res = OIDplus::db()->query("select parent from ".OIDPLUS_TABLENAME_PREFIX."objects where id = '".OIDplus::db()->real_escape_string($curid)."'")) > 0) { |
||
| 150 | $row = OIDplus::db()->fetch_array($res); |
||
| 151 | if ($curid == $obj->nodeId()) return true; |
||
| 152 | $curid = $row['parent']; |
||
| 153 | } |
||
| 154 | |||
| 155 | return false; |
||
| 156 | } |
||
| 157 | |||
| 158 | public function userHasReadRights($ra_email=null) { |
||
| 159 | // Admin may do everything |
||
| 160 | if (OIDplus::authUtils()::isAdminLoggedIn()) return true; |
||
| 161 | |||
| 162 | // If it is not confidential, everybody can read/see it. |
||
| 163 | if (!$this->isConfidential()) return true; |
||
| 164 | |||
| 165 | // If we own the object, we may see it |
||
| 166 | if (is_null($ra_email)) { |
||
| 167 | if ($this->userHasWriteRights()) return true; |
||
| 168 | } else { |
||
| 169 | $res = OIDplus::db()->query("select ra_email from ".OIDPLUS_TABLENAME_PREFIX."objects where id = '".OIDplus::db()->real_escape_string($this->nodeId())."'"); |
||
| 170 | $row = OIDplus::db()->fetch_array($res); |
||
| 171 | if ($row['ra_email'] == $ra_email) return true; |
||
| 172 | } |
||
| 173 | |||
| 174 | // If someone has rights to an object below our confidential node, |
||
| 175 | // we let him see the confidential node, |
||
| 176 | // Otherwise he could not browse through to his own node. |
||
| 177 | $roots = $this->getRaRoots($ra_email); |
||
| 178 | foreach ($roots as $root) { |
||
| 179 | if ($root->isChildOf($this)) return true; |
||
| 180 | } |
||
| 181 | |||
| 182 | return false; |
||
| 183 | } |
||
| 184 | |||
| 185 | public function getIcon($row=null) { |
||
| 186 | $namespace = self::parse($this->nodeId())::ns(); // TODO: warum muss ich das machen??? $this::ns() gibt abstrakten fehler |
||
| 187 | |||
| 188 | if (is_null($row)) { |
||
| 189 | $res = OIDplus::db()->query("select ra_email from ".OIDPLUS_TABLENAME_PREFIX."objects where id = '".OIDplus::db()->real_escape_string($this->nodeId())."'"); |
||
| 190 | $row = OIDplus::db()->fetch_array($res); |
||
| 191 | } |
||
| 192 | // TODO: have different icons for Leaf-Nodes |
||
| 193 | if (OIDplus::authUtils()::isRaLoggedIn($row['ra_email'])) { |
||
| 194 | $icon = 'plugins/objectTypes/'.$namespace.'/img/treeicon_own.png'; |
||
| 195 | } else { |
||
| 196 | $icon = 'plugins/objectTypes/'.$namespace.'/img/treeicon_general.png'; |
||
| 197 | } |
||
| 198 | if (!file_exists($icon)) $icon = null; // default icon (folder) |
||
| 199 | return $icon; |
||
| 200 | } |
||
| 201 | |||
| 12 | daniel-mar | 202 | public static function exists($id) { |
| 203 | $res = OIDplus::db()->query("select * from ".OIDPLUS_TABLENAME_PREFIX."objects where id = '".OIDplus::db()->real_escape_string($id)."'"); |
||
| 204 | return OIDplus::db()->num_rows($res) > 0; |
||
| 205 | } |
||
| 206 | |||
| 2 | daniel-mar | 207 | public function getParent() { |
| 208 | $res = OIDplus::db()->query("select parent from ".OIDPLUS_TABLENAME_PREFIX."objects where id = '".OIDplus::db()->real_escape_string($this->nodeId())."'"); |
||
| 209 | $row = OIDplus::db()->fetch_array($res); |
||
| 210 | $parent = $row['parent']; |
||
| 211 | return OIDplusObject::parse($parent); |
||
| 212 | } |
||
| 213 | |||
| 214 | public function getRaMail() { |
||
| 215 | $res = OIDplus::db()->query("select ra_email from ".OIDPLUS_TABLENAME_PREFIX."objects where id = '".OIDplus::db()->real_escape_string($this->nodeId())."'"); |
||
| 216 | $row = OIDplus::db()->fetch_array($res); |
||
| 217 | return $row['ra_email']; |
||
| 218 | } |
||
| 219 | |||
| 220 | public function userHasParentalWriteRights($ra_email=null) { |
||
| 221 | if (is_null($ra_email)) { |
||
| 222 | if (OIDplus::authUtils()::isAdminLoggedIn()) return true; |
||
| 223 | } |
||
| 224 | |||
| 225 | $objParent = $this->getParent(); |
||
| 226 | if (is_null($objParent)) return false; |
||
| 227 | return $objParent->userHasWriteRights($ra_email); |
||
| 228 | } |
||
| 229 | |||
| 230 | public function userHasWriteRights($ra_email=null) { |
||
| 231 | if (is_null($ra_email)) { |
||
| 232 | if (OIDplus::authUtils()::isAdminLoggedIn()) return true; |
||
| 233 | return OIDplus::authUtils()::isRaLoggedIn($this->getRaMail()); |
||
| 234 | } else { |
||
| 235 | return $this->getRaMail() == $ra_email; |
||
| 236 | } |
||
| 237 | } |
||
| 12 | daniel-mar | 238 | |
| 239 | public function distance($to) { |
||
| 240 | return null; // not implemented |
||
| 241 | } |
||
| 2 | daniel-mar | 242 | } |