28if (!defined(
'CSRFCHECK_WITH_TOKEN')) {
29 define(
'CSRFCHECK_WITH_TOKEN',
'1');
33require
'../../main.inc.php';
34require_once DOL_DOCUMENT_ROOT.
'/user/class/usergroup.class.php';
35require_once DOL_DOCUMENT_ROOT.
'/core/lib/usergroups.lib.php';
36require_once DOL_DOCUMENT_ROOT.
'/core/lib/functions2.lib.php';
37require_once DOL_DOCUMENT_ROOT.
'/core/lib/admin.lib.php';
40$langs->loadLangs(array(
'users',
'admin'));
43$action =
GETPOST(
'action',
'aZ09');
44$confirm =
GETPOST(
'confirm',
'alpha');
45$module =
GETPOST(
'module',
'alpha');
47$contextpage =
GETPOST(
'contextpage',
'aZ') ?
GETPOST(
'contextpage',
'aZ') :
'groupperms';
49if (!isset($id) || empty($id)) {
54$canreadperms = ($user->admin || $user->hasRight(
"user",
"user",
"read"));
56$caneditperms = ($user->admin || $user->hasRight(
"user",
"user",
"write"));
58$advancedpermsactive =
false;
60 $advancedpermsactive =
true;
61 $canreadperms = ($user->admin || ($user->hasRight(
"user",
"group_advance",
"read") && $user->hasRight(
"user",
"group_advance",
"readperms")));
62 $caneditperms = ($user->admin || $user->hasRight(
"user",
"group_advance",
"write"));
67if (isset($user->socid) && $user->socid > 0) {
68 $socid = $user->socid;
79$entity = $conf->entity;
82$hookmanager->initHooks(array(
'groupperms',
'globalcard'));
89$parameters = array(
'socid' => $socid);
90$reshook = $hookmanager->executeHooks(
'doActions', $parameters,
$object, $action);
96 if ($action ==
'addrights' && $caneditperms) {
98 $result = $editgroup->fetch(
$object->id);
100 $result = $editgroup->addrights($rights, $module,
'', $entity);
108 $user->clearrights();
112 if ($action ==
'delrights' && $caneditperms) {
114 $result = $editgroup->fetch($id);
116 $result = $editgroup->delrights($rights, $module,
'', $entity);
124 $user->clearrights();
134$form =
new Form($db);
136$title =
$object->name.
" - ".$langs->trans(
'Permissions');
138llxHeader(
'', $title, $help_url,
'', 0, 0,
'',
'',
'',
'mod-user page-group_perms');
142 $title = $langs->trans(
"Group");
151 foreach ($modulesdir as $dir) {
153 if (is_resource($handle)) {
154 while (($file = readdir($handle)) !==
false) {
155 if (is_readable($dir.$file) && substr($file, 0, 3) ==
'mod' && substr($file,
dol_strlen($file) - 10) ==
'.class.php') {
156 $modName = substr($file, 0,
dol_strlen($file) - 10);
159 include_once $dir.$file;
160 $objMod =
new $modName($db);
162 if (isset($objMod->langfiles) && is_array($objMod->langfiles)) {
163 foreach ($objMod->langfiles as $domain) {
164 $langs->load($domain);
168 if ($objMod->rights_class) {
169 $ret = $objMod->insert_permissions(0, $entity);
170 $modules[$objMod->rights_class] = $objMod;
181 $permsgroupbyentity = array();
183 $sql =
"SELECT DISTINCT r.id, r.libelle, r.module, gr.entity";
184 $sql .=
" FROM ".MAIN_DB_PREFIX.
"rights_def as r,";
185 $sql .=
" ".MAIN_DB_PREFIX.
"usergroup_rights as gr";
186 $sql .=
" WHERE gr.fk_id = r.id";
187 $sql .=
" AND gr.entity = ".((int) $entity);
188 $sql .=
" AND gr.fk_usergroup = ".((int)
$object->id);
191 $result = $db->query($sql);
193 $num = $db->num_rows($result);
196 $obj = $db->fetch_object($result);
197 if (!isset($permsgroupbyentity[$obj->entity])) {
198 $permsgroupbyentity[$obj->entity] = array();
200 array_push($permsgroupbyentity[$obj->entity], $obj->id);
212 $linkback =
'<a href="'.DOL_URL_ROOT.
'/user/group/list.php?restore_lastsearch_values=1">'.$langs->trans(
"BackToList").
'</a>';
214 dol_banner_tab(
$object,
'id', $linkback, $user->hasRight(
"user",
"user",
"read") || $user->admin);
216 print
'<div class="fichecenter">';
218 print
'<div class="underbanner clearboth"></div>';
219 print
'<table class="border centpercent tableforfield">';
222 if (!empty($conf->mutlicompany->enabled)) {
223 print
'<tr><td class="titlefield">'.$langs->trans(
"Name").
'</td>';
224 print
'<td class="valeur">'.dol_escape_htmltag(
$object->name);
226 print
img_picto($langs->trans(
"GlobalGroup"),
'redstar');
228 print
"</td></tr>\n";
232 if (isModEnabled(
'multicompany') && is_object($mc) && !
getDolGlobalString(
'MULTICOMPANY_TRANSVERSE_MODE') && $conf->entity == 1 && $user->admin && !$user->entity) {
234 print
"<tr>".
'<td class="titlefield">'.$langs->trans(
"Entity").
'</td>';
235 print
'<td class="valeur">'.dol_escape_htmltag($mc->label);
236 print
"</td></tr>\n";
243 include DOL_DOCUMENT_ROOT.
'/core/tpl/commonfields_view.tpl.php';
246 include DOL_DOCUMENT_ROOT.
'/core/tpl/extrafields_view.tpl.php';
252 print
'<div class="clearboth"></div>';
257 print
info_admin($langs->trans(
"WarningOnlyPermissionOfActivatedModules"));
260 $parameters = array();
261 $reshook = $hookmanager->executeHooks(
'insertExtraHeader', $parameters,
$object, $action);
267 print
'<div class="div-table-responsive-no-min">';
268 print
'<table class="noborder centpercent">';
269 print
'<tr class="liste_titre">';
270 print
'<td>'.$langs->trans(
"Module").
'</td>';
272 print
'<td class="center nowrap">';
273 print
'<a class="reposition commonlink" title="'.dol_escape_htmltag($langs->trans(
"All")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"All")).
'" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=addrights&token='.
newToken().
'&entity='.$entity.
'&module=allmodules&confirm=yes">'.$langs->trans(
"All").
"</a>";
275 print
'<a class="reposition commonlink" title="'.dol_escape_htmltag($langs->trans(
"None")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"None")).
'" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=delrights&&token='.
newToken().
'&entity='.$entity.
'&module=allmodules&confirm=yes">'.$langs->trans(
"None").
"</a>";
280 print
'<td class="center" width="24"></td>';
282 print
'<td class="center"></td>';
284 print
'<td class="right nowrap">';
285 print
'<a class="showallperms" title="'.dol_escape_htmltag($langs->trans(
"ShowAllPerms")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"ShowAllPerms")).
'" href="#">'.
img_picto(
'',
'folder-open',
'class="paddingright"').
'<span class="hideonsmartphone">'.$langs->trans(
"ExpandAll").
'</span></a>';
287 print
'<a class="hideallperms" title="'.dol_escape_htmltag($langs->trans(
"HideAllPerms")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"HideAllPerms")).
'" href="#">'.
img_picto(
'',
'folder',
'class="paddingright"').
'<span class="hideonsmartphone">'.$langs->trans(
"UndoExpandAll").
'</span></a>';
291 $sql =
"SELECT r.id, r.libelle as label, r.module, r.perms, r.subperms, r.module_position, r.bydefault";
292 $sql .=
" FROM ".MAIN_DB_PREFIX.
"rights_def as r";
293 $sql .=
" WHERE r.libelle NOT LIKE 'tou%'";
294 $sql .=
" AND r.entity = ".((int) $entity);
296 $sql .=
" AND r.perms NOT LIKE '%_advance'";
298 $sql .=
" ORDER BY r.family_position, r.module_position, r.module, r.id";
300 $result = $db->query($sql);
302 $num = $db->num_rows($result);
307 $cookietohidegroup = (empty($_COOKIE[
"DOLUSER_PERMS_HIDE_GRP"]) ?
'' : preg_replace(
'/^,/',
'', $_COOKIE[
"DOLUSER_PERMS_HIDE_GRP"]));
308 $cookietohidegrouparray = explode(
',', $cookietohidegroup);
311 $obj = $db->fetch_object($result);
314 if (empty($modules[$obj->module])) {
319 $objMod = $modules[$obj->module];
321 if (GETPOSTISSET(
'forbreakperms_'.$obj->module)) {
322 $ishidden =
GETPOSTINT(
'forbreakperms_'.$obj->module);
323 } elseif (in_array($j, $cookietohidegrouparray)) {
328 $isexpanded = ! $ishidden;
331 if (isset($obj->module) && ($oldmod != $obj->module)) {
332 $oldmod = $obj->module;
335 if (GETPOSTISSET(
'forbreakperms_'.$obj->module)) {
336 $ishidden =
GETPOSTINT(
'forbreakperms_'.$obj->module);
337 } elseif (in_array($j, $cookietohidegrouparray)) {
342 $isexpanded = ! $ishidden;
344 $objMod = $modules[$obj->module];
345 $picto = ($objMod->picto ? $objMod->picto :
'generic');
348 print
'<tr class="oddeven trforbreakperms" data-hide-perms="'.$obj->module.
'" data-j="'.$j.
'">';
350 print
'<td class="maxwidthonsmartphone tdoverflowmax200 tdforbreakperms" data-hide-perms="'.$obj->module.
'" title="'.
dol_escape_htmltag($objMod->getName()).
'">';
351 print
img_object(
'', $picto,
'class="pictoobjectwidth paddingright"').
' '.$objMod->getName();
352 print
'<a name="'.$objMod->getName().
'"></a>';
356 print
'<td class="center wraponsmartphone">';
357 print
'<span class="permtohide_'.$obj->module.
'" '.(!$isexpanded ?
' style="display:none"' :
'').
'>';
358 print
'<a class="reposition alink addexpandedmodulesinparamlist" title="'.dol_escape_htmltag($langs->trans(
"All")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"All")).
'" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=addrights&token='.
newToken().
'&entity='.$entity.
'&module='.$obj->module.
'&confirm=yes&updatedmodulename='.$obj->module.
'">'.$langs->trans(
"All").
"</a>";
360 print
'<a class="reposition alink addexpandedmodulesinparamlist" title="'.dol_escape_htmltag($langs->trans(
"None")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"None")).
'" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=delrights&token='.
newToken().
'&entity='.$entity.
'&module='.$obj->module.
'&confirm=yes&updatedmodulename='.$obj->module.
'">'.$langs->trans(
"None").
"</a>";
363 print
'<td class="tdforbreakperms" data-hide-perms="'.$obj->module.
'">';
366 print
'<td class="tdforbreakperms" data-hide-perms="'.$obj->module.
'"></td>';
367 print
'<td class="tdforbreakperms" data-hide-perms="'.$obj->module.
'"></td>';
370 print
'<td class="tdforbreakperms" data-hide-perms="'.$obj->module.
'"></td>';
371 print
'<td class="maxwidthonsmartphone right tdforbreakperms" data-hide-perms="'.$obj->module.
'">';
372 print
'<div class="switchfolderperms folderperms_'.$obj->module.
'"'.($isexpanded ?
' style="display:none;"' :
'').
'>';
373 print
img_picto(
'',
'folder',
'class="marginright"');
375 print
'<div class="switchfolderperms folderopenperms_'.$obj->module.
'"'.(!$isexpanded ?
' style="display:none;"' :
'').
'>';
376 print
img_picto(
'',
'folder-open',
'class="marginright"');
382 print
'<!-- '.$obj->module.
'->'.$obj->perms.($obj->subperms ?
'->'.$obj->subperms :
'').
' -->'.
"\n";
383 print
'<tr class="oddeven trtohide_'.$obj->module.
'"'.(!$isexpanded ?
' style="display:none"' :
'').
'>';
387 print
'<td class="maxwidthonsmartphone tdoverflowmax200">';
388 print
'<input type="hidden" name="forbreakperms_'.$obj->module.
'" id="idforbreakperms_'.$obj->module.
'" css="cssforfieldishiden" data-j="'.$j.
'" value="'.($isexpanded ?
'0' :
"1").
'">';
393 if (!empty($permsgroupbyentity[$entity]) && is_array($permsgroupbyentity[$entity])) {
394 if (in_array($obj->id, $permsgroupbyentity[$entity])) {
397 print
'<td class="center"><a class="reposition" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=delrights&token='.
newToken().
'&entity='.$entity.
'&rights='.$obj->id.
'&confirm=yes">';
399 print
img_picto($langs->trans(
"Remove"),
'switch_on');
402 print
'<td class="center nowrap">';
403 print
img_picto($langs->trans(
"Active"),
'tick');
408 print
'<td class="center"><a class="reposition" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=addrights&token='.
newToken().
'&entity='.$entity.
'&rights='.$obj->id.
'&confirm=yes">';
410 print
img_picto($langs->trans(
"Add"),
'switch_off');
413 print
'<td> </td>';
418 print
'<td class="center"><a class="reposition" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=addrights&entity='.$entity.
'&rights='.$obj->id.
'&confirm=yes&token='.
newToken().
'">';
420 print
img_picto($langs->trans(
"Add"),
'switch_off');
423 print
'<td> </td>';
425 print
'<td> </td>';
429 $permlabel = (
getDolGlobalString(
'MAIN_USE_ADVANCED_PERMS') && ($langs->trans(
"PermissionAdvanced".$obj->id) !=
"PermissionAdvanced".$obj->id) ? $langs->trans(
"PermissionAdvanced".$obj->id) : (($langs->trans(
"Permission".$obj->id) !=
"Permission".$obj->id) ? $langs->trans(
"Permission".$obj->id) : $langs->trans($obj->label)));
433 if (in_array($idtouse, array(121, 122, 125, 126))) {
436 if ($langs->trans(
"Permission".$idtouse.
'b') !=
"Permission".$idtouse.
'b') {
437 print
'<br><span class="opacitymedium">'.$langs->trans(
"Permission".$idtouse.
'b').
'</span>';
439 if ($langs->trans(
"Permission".$obj->id.
'c') !=
"Permission".$obj->id.
'c') {
440 print
'<br><span class="opacitymedium">'.$langs->trans(
"Permission".$obj->id.
'c').
'</span>';
443 if (preg_match(
'/_advance$/', $obj->perms)) {
444 print
' <span class="opacitymedium">('.$langs->trans(
"AdvancedModeOnly").
')</span>';
451 print
'<td class="right">';
452 $htmltext = $langs->trans(
"ID").
': '.$obj->id;
453 $htmltext .=
'<br>'.$langs->trans(
"Permission").
': user->hasRight(\''.$obj->module.
'\', \
''.$obj->perms.
'\''.($obj->subperms ?
', \''.$obj->subperms.
'\'' :
'').
')';
454 print $form->textwithpicto(
'', $htmltext);
458 print
'<td> </td>';
470 print
'$(".tdforbreakperms:not(.alink)").on("click", function(){
471 console.log("Click on tdforbreakperms");
472 moduletohide = $(this).data("hide-perms");
473 j = $(this).data("j");
474 if ($("#idforbreakperms_"+moduletohide).val() == 1) {
475 console.log("idforbreakperms_"+moduletohide+" has value hidden=1");
476 $(".trtohide_"+moduletohide).show();
477 $(".permtoshow_"+moduletohide).hide();
478 $(".permtohide_"+moduletohide).show();
479 $(".folderperms_"+moduletohide).hide();
480 $(".folderopenperms_"+moduletohide).show();
481 $("#idforbreakperms_"+moduletohide).val("0");
483 console.log("idforbreakperms_"+moduletohide+" has value hidden=0");
484 $(".trtohide_"+moduletohide).hide();
485 $(".folderopenperms_"+moduletohide).hide();
486 $(".folderperms_"+moduletohide).show();
487 $(".permtoshow_"+moduletohide).show();
488 $(".permtohide_"+moduletohide).hide();
489 $("#idforbreakperms_"+moduletohide).val("1");
492 // Now rebuild the value for cookie
494 $(".trforbreakperms").each(function(index) {
495 //console.log( index + ": " + $( this ).data("j") + " " + $( this ).data("hide-perms") + " " + $("input[data-j="+(index+1)+"]").val());
496 if ($("input[data-j="+(index+1)+"]").val() == 1) {
497 hideuserperm=hideuserperm+","+(index+1);
501 date = new Date(); date.setTime(date.getTime()+(30*86400000));
503 console.log("set cookie DOLUSER_PERMS_HIDE_GRP="+hideuserperm);
504 document.cookie = "DOLUSER_PERMS_HIDE_GRP=" + hideuserperm + "; expires=" + date.toGMTString() + "; path=/ ";
506 console.log("delete cookie DOLUSER_PERMS_HIDE_GRP");
507 document.cookie = "DOLUSER_PERMS_HIDE_GRP=; expires=Thu, 01-Jan-70 00:00:01 GMT; path=/ ";
512 print
'$(".showallperms").on("click", function(){
513 console.log("Click on showallperms");
515 console.log("delete cookie DOLUSER_PERMS_HIDE_GRP from showallperms click");
516 document.cookie = "DOLUSER_PERMS_HIDE_GRP=; expires=Thu, 01-Jan-70 00:00:01 GMT; path=/ ";
517 $(".tdforbreakperms").each( function(){
518 moduletohide = $(this).data("hide-perms");
519 //console.log(moduletohide);
520 if ($("#idforbreakperms_"+moduletohide).val() != 0) {
521 $(this).trigger("click"); // emulate the click, so the cooki will be resaved
526 $(".hideallperms").on("click", function(){
527 console.log("Click on hideallperms");
529 $(".tdforbreakperms").each( function(){
530 moduletohide = $(this).data("hide-perms");
531 //console.log(moduletohide);
532 if ($("#idforbreakperms_"+moduletohide).val() != 1) {
533 $(this).trigger("click"); // emulate the click, so the cooki will be resaved
541 print
'.switchfolderperms{
547 $parameters = array();
548 $reshook = $hookmanager->executeHooks(
'insertExtraFooter', $parameters,
$object, $action);
if( $user->socid > 0) if(! $user->hasRight('accounting', 'chartofaccount')) $object
if(!defined('NOREQUIRESOC')) if(!defined( 'NOREQUIRETRAN')) if(!defined('NOTOKENRENEWAL')) if(!defined( 'NOREQUIREMENU')) if(!defined('NOREQUIREHTML')) if(!defined( 'NOREQUIREAJAX')) llxHeader()
Empty header.
Class to manage user groups.
dolGetModulesDirs($subdir='')
Return list of directories that contain modules.
img_object($titlealt, $picto, $moreatt='', $pictoisfullpath=0, $srconly=0, $notitle=0)
Show a picto called object_picto (generic function)
img_picto($titlealt, $picto, $moreatt='', $pictoisfullpath=0, $srconly=0, $notitle=0, $alt='', $morecss='', $marginleftonlyshort=2)
Show picto whatever it's its name (generic function)
GETPOSTINT($paramname, $method=0)
Return the value of a $_GET or $_POST supervariable, converted into integer.
dol_get_fiche_head($links=array(), $active='', $title='', $notab=0, $picto='', $pictoisfullpath=0, $morehtmlright='', $morecss='', $limittoshow=0, $moretabssuffix='', $dragdropfile=0)
Show tabs of a record.
dol_osencode($str)
Return a string encoded into OS filesystem encoding.
dol_get_fiche_end($notab=0)
Return tab footer of a card.
dol_strlen($string, $stringencoding='UTF-8')
Make a strlen call.
newToken()
Return the value of token currently saved into session with name 'newtoken'.
GETPOST($paramname, $check='alphanohtml', $method=0, $filter=null, $options=null, $noreplace=0)
Return value of a param into GET or POST supervariable.
setEventMessages($mesg, $mesgs, $style='mesgs', $messagekey='', $noduplicate=0)
Set event messages in dol_events session object.
dol_print_error($db=null, $error='', $errors=null)
Displays error message system with all the information to facilitate the diagnosis and the escalation...
getDolGlobalString($key, $default='')
Return dolibarr global constant string value.
info_admin($text, $infoonimgalt=0, $nodiv=0, $admin='1', $morecss='hideonsmartphone', $textfordropdown='', $picto='')
Show information in HTML for admin users or standard users.
dol_syslog($message, $level=LOG_INFO, $ident=0, $suffixinfilename='', $restricttologhandler='', $logcontext=null)
Write log message into outputs.
dol_escape_htmltag($stringtoescape, $keepb=0, $keepn=0, $noescapetags='', $escapeonlyhtmltags=0, $cleanalsojavascript=0)
Returns text escaped for inclusion in HTML alt or title or value tags, or into values of HTML input f...
accessforbidden($message='', $printheader=1, $printfooter=1, $showonlymessage=0, $params=null)
Show a message to say access is forbidden and stop program.
group_prepare_head($object)
Prepare array with list of tabs.