28if (!defined(
'CSRFCHECK_WITH_TOKEN')) {
 
   29  define(
'CSRFCHECK_WITH_TOKEN', 
'1'); 
 
   33require 
'../../main.inc.php';
 
   34require_once DOL_DOCUMENT_ROOT.
'/user/class/usergroup.class.php';
 
   35require_once DOL_DOCUMENT_ROOT.
'/core/lib/usergroups.lib.php';
 
   36require_once DOL_DOCUMENT_ROOT.
'/core/lib/functions2.lib.php';
 
   37require_once DOL_DOCUMENT_ROOT.
'/core/lib/admin.lib.php';
 
   40$langs->loadLangs(array(
'users', 
'admin'));
 
   43$action = 
GETPOST(
'action', 
'aZ09');
 
   44$confirm = 
GETPOST(
'confirm', 
'alpha');
 
   45$module = 
GETPOST(
'module', 
'alpha');
 
   47$contextpage = 
GETPOST(
'contextpage', 
'aZ') ? 
GETPOST(
'contextpage', 
'aZ') : 
'groupperms'; 
 
   49if (!isset($id) || empty($id)) {
 
   54$canreadperms = ($user->admin || $user->hasRight(
"user", 
"user", 
"read"));
 
   56$caneditperms = ($user->admin || $user->hasRight(
"user", 
"user", 
"write"));
 
   58$advancedpermsactive = 
false;
 
   60  $advancedpermsactive = 
true;
 
   61  $canreadperms = ($user->admin || ($user->hasRight(
"user", 
"group_advance", 
"read") && $user->hasRight(
"user", 
"group_advance", 
"readperms")));
 
   62  $caneditperms = ($user->admin || $user->hasRight(
"user", 
"group_advance", 
"write"));
 
   67if (isset($user->socid) && $user->socid > 0) {
 
   68  $socid = $user->socid;
 
   79$entity = $conf->entity;
 
   82$hookmanager->initHooks(array(
'groupperms', 
'globalcard'));
 
   89$parameters = array(
'socid' => $socid);
 
   90$reshook = $hookmanager->executeHooks(
'doActions', $parameters, 
$object, $action); 
 
   96  if ($action == 
'addrights' && $caneditperms) {
 
   98    $result = $editgroup->fetch(
$object->id);
 
  100      $result = $editgroup->addrights($rights, $module, 
'', $entity);
 
  108    $user->clearrights();
 
  112  if ($action == 
'delrights' && $caneditperms) {
 
  114    $result = $editgroup->fetch($id);
 
  116      $result = $editgroup->delrights($rights, $module, 
'', $entity);
 
  124    $user->clearrights();
 
  134$form = 
new Form($db);
 
  136$title = 
$object->name.
" - ".$langs->trans(
'Permissions');
 
  138llxHeader(
'', $title, $help_url, 
'', 0, 0, 
'', 
'', 
'', 
'mod-user page-group_perms');
 
  142  $title = $langs->trans(
"Group");
 
  151  foreach ($modulesdir as $dir) {
 
  153    if (is_resource($handle)) {
 
  154      while (($file = readdir($handle)) !== 
false) {
 
  155        if (is_readable($dir.$file) && substr($file, 0, 3) == 
'mod' && substr($file, 
dol_strlen($file) - 10) == 
'.class.php') {
 
  156          $modName = substr($file, 0, 
dol_strlen($file) - 10);
 
  159            include_once $dir.$file;
 
  160            $objMod = 
new $modName($db);
 
  162            if (isset($objMod->langfiles) && is_array($objMod->langfiles)) {
 
  163              foreach ($objMod->langfiles as $domain) {
 
  164                $langs->load($domain);
 
  168            if ($objMod->rights_class) {
 
  169              $ret = $objMod->insert_permissions(0, $entity);
 
  170              $modules[$objMod->rights_class] = $objMod;
 
  181  $permsgroupbyentity = array();
 
  183  $sql = 
"SELECT DISTINCT r.id, r.libelle, r.module, gr.entity";
 
  184  $sql .= 
" FROM ".MAIN_DB_PREFIX.
"rights_def as r,";
 
  185  $sql .= 
" ".MAIN_DB_PREFIX.
"usergroup_rights as gr";
 
  186  $sql .= 
" WHERE gr.fk_id = r.id";
 
  187  $sql .= 
" AND gr.entity = ".((int) $entity);
 
  188  $sql .= 
" AND gr.fk_usergroup = ".((int) 
$object->id);
 
  191  $result = $db->query($sql);
 
  193    $num = $db->num_rows($result);
 
  196      $obj = $db->fetch_object($result);
 
  197      if (!isset($permsgroupbyentity[$obj->entity])) {
 
  198        $permsgroupbyentity[$obj->entity] = array();
 
  200      array_push($permsgroupbyentity[$obj->entity], $obj->id);
 
  212  $linkback = 
'<a href="'.DOL_URL_ROOT.
'/user/group/list.php?restore_lastsearch_values=1">'.$langs->trans(
"BackToList").
'</a>';
 
  214  dol_banner_tab(
$object, 
'id', $linkback, $user->hasRight(
"user", 
"user", 
"read") || $user->admin);
 
  216  print 
'<div class="fichecenter">';
 
  218  print 
'<div class="underbanner clearboth"></div>';
 
  219  print 
'<table class="border centpercent tableforfield">';
 
  222  if (!empty($conf->mutlicompany->enabled)) {
 
  223    print 
'<tr><td class="titlefield">'.$langs->trans(
"Name").
'</td>';
 
  224    print 
'<td class="valeur">'.dol_escape_htmltag(
$object->name);
 
  226      print 
img_picto($langs->trans(
"GlobalGroup"), 
'redstar');
 
  228    print 
"</td></tr>\n";
 
  232  if (isModEnabled(
'multicompany') && is_object($mc) && !
getDolGlobalString(
'MULTICOMPANY_TRANSVERSE_MODE') && $conf->entity == 1 && $user->admin && !$user->entity) {
 
  234    print 
"<tr>".
'<td class="titlefield">'.$langs->trans(
"Entity").
'</td>';
 
  235    print 
'<td class="valeur">'.dol_escape_htmltag($mc->label);
 
  236    print 
"</td></tr>\n";
 
  243  include DOL_DOCUMENT_ROOT.
'/core/tpl/commonfields_view.tpl.php';
 
  246  include DOL_DOCUMENT_ROOT.
'/core/tpl/extrafields_view.tpl.php';
 
  252  print 
'<div class="clearboth"></div>';
 
  257    print 
info_admin($langs->trans(
"WarningOnlyPermissionOfActivatedModules"));
 
  260  $parameters = array();
 
  261  $reshook = $hookmanager->executeHooks(
'insertExtraHeader', $parameters, 
$object, $action); 
 
  267  print 
'<div class="div-table-responsive-no-min">';
 
  268  print 
'<table class="noborder centpercent">';
 
  269  print 
'<tr class="liste_titre">';
 
  270  print 
'<td>'.$langs->trans(
"Module").
'</td>';
 
  272    print 
'<td class="center nowrap">';
 
  273    print 
'<a class="reposition commonlink" title="'.dol_escape_htmltag($langs->trans(
"All")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"All")).
'" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=addrights&token='.
newToken().
'&entity='.$entity.
'&module=allmodules&confirm=yes">'.$langs->trans(
"All").
"</a>";
 
  275    print 
'<a class="reposition commonlink" title="'.dol_escape_htmltag($langs->trans(
"None")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"None")).
'" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=delrights&&token='.
newToken().
'&entity='.$entity.
'&module=allmodules&confirm=yes">'.$langs->trans(
"None").
"</a>";
 
  280  print 
'<td class="center" width="24"></td>';
 
  282  print 
'<td class="center"></td>';
 
  284  print 
'<td class="right nowrap">';
 
  285  print 
'<a class="showallperms" title="'.dol_escape_htmltag($langs->trans(
"ShowAllPerms")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"ShowAllPerms")).
'" href="#">'.
img_picto(
'', 
'folder-open', 
'class="paddingright"').
'<span class="hideonsmartphone">'.$langs->trans(
"ExpandAll").
'</span></a>';
 
  287  print 
'<a class="hideallperms" title="'.dol_escape_htmltag($langs->trans(
"HideAllPerms")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"HideAllPerms")).
'" href="#">'.
img_picto(
'', 
'folder', 
'class="paddingright"').
'<span class="hideonsmartphone">'.$langs->trans(
"UndoExpandAll").
'</span></a>';
 
  291  $sql = 
"SELECT r.id, r.libelle as label, r.module, r.perms, r.subperms, r.module_position, r.bydefault";
 
  292  $sql .= 
" FROM ".MAIN_DB_PREFIX.
"rights_def as r";
 
  293  $sql .= 
" WHERE r.libelle NOT LIKE 'tou%'"; 
 
  294  $sql .= 
" AND r.entity = ".((int) $entity);
 
  296    $sql .= 
" AND r.perms NOT LIKE '%_advance'"; 
 
  298  $sql .= 
" ORDER BY r.family_position, r.module_position, r.module, r.id";
 
  300  $result = $db->query($sql);
 
  302    $num = $db->num_rows($result);
 
  307    $cookietohidegroup = (empty($_COOKIE[
"DOLUSER_PERMS_HIDE_GRP"]) ? 
'' : preg_replace(
'/^,/', 
'', $_COOKIE[
"DOLUSER_PERMS_HIDE_GRP"]));
 
  308    $cookietohidegrouparray = explode(
',', $cookietohidegroup);
 
  311      $obj = $db->fetch_object($result);
 
  314      if (empty($modules[$obj->module])) {
 
  319      $objMod = $modules[$obj->module];
 
  321      if (GETPOSTISSET(
'forbreakperms_'.$obj->module)) {
 
  322        $ishidden = 
GETPOSTINT(
'forbreakperms_'.$obj->module);
 
  323      } elseif (in_array($j, $cookietohidegrouparray)) {  
 
  328      $isexpanded = ! $ishidden;
 
  331      if (isset($obj->module) && ($oldmod != $obj->module)) {
 
  332        $oldmod = $obj->module;
 
  335        if (GETPOSTISSET(
'forbreakperms_'.$obj->module)) {
 
  336          $ishidden = 
GETPOSTINT(
'forbreakperms_'.$obj->module);
 
  337        } elseif (in_array($j, $cookietohidegrouparray)) {  
 
  342        $isexpanded = ! $ishidden;
 
  344        $objMod = $modules[$obj->module];
 
  345        $picto = ($objMod->picto ? $objMod->picto : 
'generic');
 
  348        print 
'<tr class="oddeven trforbreakperms" data-hide-perms="'.$obj->module.
'" data-j="'.$j.
'">';
 
  350        print 
'<td class="maxwidthonsmartphone tdoverflowmax200 tdforbreakperms" data-hide-perms="'.$obj->module.
'" title="'.
dol_escape_htmltag($objMod->getName()).
'">';
 
  351        print 
img_object(
'', $picto, 
'class="pictoobjectwidth paddingright"').
' '.$objMod->getName();
 
  352        print 
'<a name="'.$objMod->getName().
'"></a>';
 
  356          print 
'<td class="center wraponsmartphone">';
 
  357          print 
'<span class="permtohide_'.$obj->module.
'" '.(!$isexpanded ? 
' style="display:none"' : 
'').
'>';
 
  358          print 
'<a class="reposition alink addexpandedmodulesinparamlist" title="'.dol_escape_htmltag($langs->trans(
"All")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"All")).
'" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=addrights&token='.
newToken().
'&entity='.$entity.
'&module='.$obj->module.
'&confirm=yes&updatedmodulename='.$obj->module.
'">'.$langs->trans(
"All").
"</a>";
 
  360          print 
'<a class="reposition alink addexpandedmodulesinparamlist" title="'.dol_escape_htmltag($langs->trans(
"None")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"None")).
'" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=delrights&token='.
newToken().
'&entity='.$entity.
'&module='.$obj->module.
'&confirm=yes&updatedmodulename='.$obj->module.
'">'.$langs->trans(
"None").
"</a>";
 
  363          print 
'<td class="tdforbreakperms" data-hide-perms="'.$obj->module.
'">';
 
  366          print 
'<td class="tdforbreakperms" data-hide-perms="'.$obj->module.
'"></td>';
 
  367          print 
'<td class="tdforbreakperms" data-hide-perms="'.$obj->module.
'"></td>';
 
  370        print 
'<td class="tdforbreakperms" data-hide-perms="'.$obj->module.
'"></td>';
 
  371        print 
'<td class="maxwidthonsmartphone right tdforbreakperms" data-hide-perms="'.$obj->module.
'">';
 
  372        print 
'<div class="switchfolderperms folderperms_'.$obj->module.
'"'.($isexpanded ? 
' style="display:none;"' : 
'').
'>';
 
  373        print 
img_picto(
'', 
'folder', 
'class="marginright"');
 
  375        print 
'<div class="switchfolderperms folderopenperms_'.$obj->module.
'"'.(!$isexpanded ? 
' style="display:none;"' : 
'').
'>';
 
  376        print 
img_picto(
'', 
'folder-open', 
'class="marginright"');
 
  382      print 
'<!-- '.$obj->module.
'->'.$obj->perms.($obj->subperms ? 
'->'.$obj->subperms : 
'').
' -->'.
"\n";
 
  383      print 
'<tr class="oddeven trtohide_'.$obj->module.
'"'.(!$isexpanded ? 
' style="display:none"' : 
'').
'>';
 
  387      print 
'<td class="maxwidthonsmartphone tdoverflowmax200">';
 
  388      print 
'<input type="hidden" name="forbreakperms_'.$obj->module.
'" id="idforbreakperms_'.$obj->module.
'" css="cssforfieldishiden" data-j="'.$j.
'" value="'.($isexpanded ? 
'0' : 
"1").
'">';
 
  393      if (!empty($permsgroupbyentity[$entity]) && is_array($permsgroupbyentity[$entity])) {
 
  394        if (in_array($obj->id, $permsgroupbyentity[$entity])) {
 
  397            print 
'<td class="center"><a class="reposition" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=delrights&token='.
newToken().
'&entity='.$entity.
'&rights='.$obj->id.
'&confirm=yes">';
 
  399            print 
img_picto($langs->trans(
"Remove"), 
'switch_on');
 
  402          print 
'<td class="center nowrap">';
 
  403          print 
img_picto($langs->trans(
"Active"), 
'tick');
 
  408            print 
'<td class="center"><a class="reposition" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=addrights&token='.
newToken().
'&entity='.$entity.
'&rights='.$obj->id.
'&confirm=yes">';
 
  410            print 
img_picto($langs->trans(
"Add"), 
'switch_off');
 
  413          print 
'<td> </td>';
 
  418          print 
'<td class="center"><a class="reposition" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=addrights&entity='.$entity.
'&rights='.$obj->id.
'&confirm=yes&token='.
newToken().
'">';
 
  420          print 
img_picto($langs->trans(
"Add"), 
'switch_off');
 
  423          print 
'<td> </td>';
 
  425        print 
'<td> </td>';
 
  429      $permlabel = (
getDolGlobalString(
'MAIN_USE_ADVANCED_PERMS') && ($langs->trans(
"PermissionAdvanced".$obj->id) != 
"PermissionAdvanced".$obj->id) ? $langs->trans(
"PermissionAdvanced".$obj->id) : (($langs->trans(
"Permission".$obj->id) != 
"Permission".$obj->id) ? $langs->trans(
"Permission".$obj->id) : $langs->trans($obj->label)));
 
  433      if (in_array($idtouse, array(121, 122, 125, 126))) {  
 
  436      if ($langs->trans(
"Permission".$idtouse.
'b') != 
"Permission".$idtouse.
'b') {
 
  437        print 
'<br><span class="opacitymedium">'.$langs->trans(
"Permission".$idtouse.
'b').
'</span>';
 
  439      if ($langs->trans(
"Permission".$obj->id.
'c') != 
"Permission".$obj->id.
'c') {
 
  440        print 
'<br><span class="opacitymedium">'.$langs->trans(
"Permission".$obj->id.
'c').
'</span>';
 
  443        if (preg_match(
'/_advance$/', $obj->perms)) {
 
  444          print 
' <span class="opacitymedium">('.$langs->trans(
"AdvancedModeOnly").
')</span>';
 
  451        print 
'<td class="right">';
 
  452        $htmltext = $langs->trans(
"ID").
': '.$obj->id;
 
  453        $htmltext .= 
'<br>'.$langs->trans(
"Permission").
': user->hasRight(\''.$obj->module.
'\', \
''.$obj->perms.
'\''.($obj->subperms ? 
', \''.$obj->subperms.
'\'' : 
'').
')';
 
  454        print $form->textwithpicto(
'', $htmltext);
 
  458        print 
'<td> </td>';
 
  470  print 
'$(".tdforbreakperms:not(.alink)").on("click", function(){ 
  471    console.log("Click on tdforbreakperms"); 
  472    moduletohide = $(this).data("hide-perms"); 
  473    j = $(this).data("j"); 
  474    if ($("#idforbreakperms_"+moduletohide).val() == 1) { 
  475      console.log("idforbreakperms_"+moduletohide+" has value hidden=1"); 
  476      $(".trtohide_"+moduletohide).show(); 
  477      $(".permtoshow_"+moduletohide).hide(); 
  478      $(".permtohide_"+moduletohide).show(); 
  479      $(".folderperms_"+moduletohide).hide(); 
  480      $(".folderopenperms_"+moduletohide).show(); 
  481      $("#idforbreakperms_"+moduletohide).val("0"); 
  483      console.log("idforbreakperms_"+moduletohide+" has value hidden=0"); 
  484      $(".trtohide_"+moduletohide).hide(); 
  485      $(".folderopenperms_"+moduletohide).hide(); 
  486      $(".folderperms_"+moduletohide).show(); 
  487      $(".permtoshow_"+moduletohide).show(); 
  488      $(".permtohide_"+moduletohide).hide(); 
  489      $("#idforbreakperms_"+moduletohide).val("1"); 
  492    // Now rebuild the value for cookie 
  494    $(".trforbreakperms").each(function(index) { 
  495      //console.log( index + ": " + $( this ).data("j") + " " + $( this ).data("hide-perms") + " " + $("input[data-j="+(index+1)+"]").val()); 
  496      if ($("input[data-j="+(index+1)+"]").val() == 1) { 
  497        hideuserperm=hideuserperm+","+(index+1); 
  501    date = new Date(); date.setTime(date.getTime()+(30*86400000)); 
  503      console.log("set cookie DOLUSER_PERMS_HIDE_GRP="+hideuserperm); 
  504      document.cookie = "DOLUSER_PERMS_HIDE_GRP=" + hideuserperm + "; expires=" + date.toGMTString() + "; path=/ "; 
  506      console.log("delete cookie DOLUSER_PERMS_HIDE_GRP"); 
  507      document.cookie = "DOLUSER_PERMS_HIDE_GRP=; expires=Thu, 01-Jan-70 00:00:01 GMT; path=/ "; 
  512  print 
'$(".showallperms").on("click", function(){ 
  513    console.log("Click on showallperms"); 
  515    console.log("delete cookie DOLUSER_PERMS_HIDE_GRP from showallperms click"); 
  516    document.cookie = "DOLUSER_PERMS_HIDE_GRP=; expires=Thu, 01-Jan-70 00:00:01 GMT; path=/ "; 
  517    $(".tdforbreakperms").each( function(){ 
  518      moduletohide = $(this).data("hide-perms"); 
  519      //console.log(moduletohide); 
  520      if ($("#idforbreakperms_"+moduletohide).val() != 0) { 
  521        $(this).trigger("click"); // emulate the click, so the cooki will be resaved 
  526  $(".hideallperms").on("click", function(){ 
  527    console.log("Click on hideallperms"); 
  529    $(".tdforbreakperms").each( function(){ 
  530      moduletohide = $(this).data("hide-perms"); 
  531      //console.log(moduletohide); 
  532      if ($("#idforbreakperms_"+moduletohide).val() != 1) { 
  533        $(this).trigger("click"); // emulate the click, so the cooki will be resaved 
  541  print 
'.switchfolderperms{ 
  547  $parameters = array();
 
  548  $reshook = $hookmanager->executeHooks(
'insertExtraFooter', $parameters, 
$object, $action); 
 
if( $user->socid > 0) if(! $user->hasRight('accounting', 'chartofaccount')) $object
 
if(!defined('NOREQUIRESOC')) if(!defined( 'NOREQUIRETRAN')) if(!defined('NOTOKENRENEWAL')) if(!defined( 'NOREQUIREMENU')) if(!defined('NOREQUIREHTML')) if(!defined( 'NOREQUIREAJAX')) llxHeader()
Empty header.
 
Class to manage user groups.
 
dolGetModulesDirs($subdir='')
Return list of directories that contain modules.
 
img_object($titlealt, $picto, $moreatt='', $pictoisfullpath=0, $srconly=0, $notitle=0)
Show a picto called object_picto (generic function)
 
img_picto($titlealt, $picto, $moreatt='', $pictoisfullpath=0, $srconly=0, $notitle=0, $alt='', $morecss='', $marginleftonlyshort=2)
Show picto whatever it's its name (generic function)
 
GETPOSTINT($paramname, $method=0)
Return the value of a $_GET or $_POST supervariable, converted into integer.
 
dol_get_fiche_head($links=array(), $active='', $title='', $notab=0, $picto='', $pictoisfullpath=0, $morehtmlright='', $morecss='', $limittoshow=0, $moretabssuffix='', $dragdropfile=0)
Show tabs of a record.
 
dol_osencode($str)
Return a string encoded into OS filesystem encoding.
 
dol_get_fiche_end($notab=0)
Return tab footer of a card.
 
dol_strlen($string, $stringencoding='UTF-8')
Make a strlen call.
 
newToken()
Return the value of token currently saved into session with name 'newtoken'.
 
GETPOST($paramname, $check='alphanohtml', $method=0, $filter=null, $options=null, $noreplace=0)
Return value of a param into GET or POST supervariable.
 
setEventMessages($mesg, $mesgs, $style='mesgs', $messagekey='', $noduplicate=0)
Set event messages in dol_events session object.
 
dol_print_error($db=null, $error='', $errors=null)
Displays error message system with all the information to facilitate the diagnosis and the escalation...
 
getDolGlobalString($key, $default='')
Return dolibarr global constant string value.
 
info_admin($text, $infoonimgalt=0, $nodiv=0, $admin='1', $morecss='hideonsmartphone', $textfordropdown='', $picto='')
Show information in HTML for admin users or standard users.
 
dol_syslog($message, $level=LOG_INFO, $ident=0, $suffixinfilename='', $restricttologhandler='', $logcontext=null)
Write log message into outputs.
 
dol_escape_htmltag($stringtoescape, $keepb=0, $keepn=0, $noescapetags='', $escapeonlyhtmltags=0, $cleanalsojavascript=0)
Returns text escaped for inclusion in HTML alt or title or value tags, or into values of HTML input f...
 
accessforbidden($message='', $printheader=1, $printfooter=1, $showonlymessage=0, $params=null)
Show a message to say access is forbidden and stop program.
 
group_prepare_head($object)
Prepare array with list of tabs.