29if (!defined(
'CSRFCHECK_WITH_TOKEN')) {
30 define(
'CSRFCHECK_WITH_TOKEN',
'1');
34require
'../../main.inc.php';
35require_once DOL_DOCUMENT_ROOT.
'/user/class/usergroup.class.php';
36require_once DOL_DOCUMENT_ROOT.
'/core/lib/usergroups.lib.php';
37require_once DOL_DOCUMENT_ROOT.
'/core/lib/functions2.lib.php';
38require_once DOL_DOCUMENT_ROOT.
'/core/lib/admin.lib.php';
41$langs->loadLangs(array(
'users',
'admin'));
44$action =
GETPOST(
'action',
'aZ09');
45$confirm =
GETPOST(
'confirm',
'alpha');
46$module =
GETPOST(
'module',
'alpha');
48$contextpage =
GETPOST(
'contextpage',
'aZ') ?
GETPOST(
'contextpage',
'aZ') :
'groupperms';
50if (!isset($id) || empty($id)) {
55$permissiontoread = ($user->admin || $user->hasRight(
"user",
"user",
"read"));
57$permissiontoedit = ($user->admin || $user->hasRight(
"user",
"user",
"write"));
59$advancedpermsactive =
false;
61 $advancedpermsactive =
true;
62 $permissiontoread = ($user->admin || ($user->hasRight(
"user",
"group_advance",
"read") && $user->hasRight(
"user",
"group_advance",
"readperms")));
63 $permissiontoedit = ($user->admin || $user->hasRight(
"user",
"group_advance",
"write"));
68if (isset($user->socid) && $user->socid > 0) {
69 $socid = $user->socid;
72if (!$permissiontoread) {
80$entity = $conf->entity;
83$hookmanager->initHooks(array(
'groupperms',
'globalcard'));
90$parameters = array(
'socid' => $socid);
91$reshook = $hookmanager->executeHooks(
'doActions', $parameters,
$object, $action);
97 if ($action ==
'addrights' && $permissiontoedit) {
99 $result = $editgroup->fetch(
$object->id);
101 $result = $editgroup->addrights($rights, $module,
'', $entity);
109 $user->clearrights();
113 if ($action ==
'delrights' && $permissiontoedit) {
115 $result = $editgroup->fetch($id);
117 $result = $editgroup->delrights($rights, $module,
'', $entity);
125 $user->clearrights();
135$form =
new Form($db);
137$title =
$object->name.
" - ".$langs->trans(
'Permissions');
139llxHeader(
'', $title, $help_url,
'', 0, 0,
'',
'',
'',
'mod-user page-group_perms');
143 $title = $langs->trans(
"Group");
152 foreach ($modulesdir as $dir) {
154 if (is_resource($handle)) {
155 while (($file = readdir($handle)) !==
false) {
156 if (is_readable($dir.$file) && substr($file, 0, 3) ==
'mod' && substr($file,
dol_strlen($file) - 10) ==
'.class.php') {
157 $modName = substr($file, 0,
dol_strlen($file) - 10);
160 include_once $dir.$file;
161 $objMod =
new $modName($db);
162 '@phan-var-force DolibarrModules $objMod';
164 if (isset($objMod->langfiles) && is_array($objMod->langfiles)) {
165 foreach ($objMod->langfiles as $domain) {
166 $langs->load($domain);
170 if ($objMod->rights_class) {
171 $ret = $objMod->insert_permissions(0, $entity);
172 $modules[$objMod->rights_class] = $objMod;
183 $permsgroupbyentity = array();
185 $sql =
"SELECT DISTINCT r.id, r.libelle, r.module, gr.entity";
186 $sql .=
" FROM ".MAIN_DB_PREFIX.
"rights_def as r,";
187 $sql .=
" ".MAIN_DB_PREFIX.
"usergroup_rights as gr";
188 $sql .=
" WHERE gr.fk_id = r.id";
189 $sql .=
" AND gr.entity = ".((int) $entity);
190 $sql .=
" AND gr.fk_usergroup = ".((int)
$object->id);
193 $result = $db->query($sql);
195 $num = $db->num_rows($result);
198 $obj = $db->fetch_object($result);
199 if (!isset($permsgroupbyentity[$obj->entity])) {
200 $permsgroupbyentity[$obj->entity] = array();
202 array_push($permsgroupbyentity[$obj->entity], $obj->id);
214 $linkback =
'<a href="'.DOL_URL_ROOT.
'/user/group/list.php?restore_lastsearch_values=1">'.$langs->trans(
"BackToList").
'</a>';
216 dol_banner_tab(
$object,
'id', $linkback, $user->hasRight(
"user",
"user",
"read") || $user->admin);
218 print
'<div class="fichecenter">';
220 print
'<div class="underbanner clearboth"></div>';
221 print
'<table class="border centpercent tableforfield">';
224 if (isModEnabled(
'multicompany')) {
225 print
'<tr><td class="titlefield">'.$langs->trans(
"Name").
'</td>';
226 print
'<td class="valeur">'.dol_escape_htmltag(
$object->name);
228 print
img_picto($langs->trans(
"GlobalGroup"),
'redstar');
230 print
"</td></tr>\n";
234 if (isModEnabled(
'multicompany') && is_object($mc) && !
getDolGlobalString(
'MULTICOMPANY_TRANSVERSE_MODE') && $conf->entity == 1 && $user->admin && !$user->entity) {
236 print
"<tr>".
'<td class="titlefield">'.$langs->trans(
"Entity").
'</td>';
237 print
'<td class="valeur">'.dol_escape_htmltag($mc->label);
238 print
"</td></tr>\n";
245 include DOL_DOCUMENT_ROOT.
'/core/tpl/commonfields_view.tpl.php';
248 include DOL_DOCUMENT_ROOT.
'/core/tpl/extrafields_view.tpl.php';
254 print
'<div class="clearboth"></div>';
259 print
info_admin($langs->trans(
"WarningOnlyPermissionOfActivatedModules"));
262 $parameters = array();
263 $reshook = $hookmanager->executeHooks(
'insertExtraHeader', $parameters,
$object, $action);
269 print
'<div class="div-table-responsive-no-min">';
270 print
'<table class="noborder centpercent">';
271 print
'<tr class="liste_titre">';
272 print
'<td>'.$langs->trans(
"Module").
'</td>';
273 if ($permissiontoedit) {
274 print
'<td class="center nowrap">';
275 print
'<a class="reposition commonlink" title="'.dol_escape_htmltag($langs->trans(
"All")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"All")).
'" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=addrights&token='.
newToken().
'&entity='.$entity.
'&module=allmodules&confirm=yes">'.$langs->trans(
"All").
"</a>";
277 print
'<a class="reposition commonlink" title="'.dol_escape_htmltag($langs->trans(
"None")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"None")).
'" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=delrights&&token='.
newToken().
'&entity='.$entity.
'&module=allmodules&confirm=yes">'.$langs->trans(
"None").
"</a>";
282 print
'<td class="center" width="24"></td>';
284 print
'<td class="center"></td>';
286 print
'<td class="right nowrap">';
287 print
'<a class="showallperms" title="'.dol_escape_htmltag($langs->trans(
"ShowAllPerms")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"ShowAllPerms")).
'" href="#">'.
img_picto(
'',
'folder-open',
'class="paddingright"').
'<span class="hideonsmartphone">'.$langs->trans(
"ExpandAll").
'</span></a>';
289 print
'<a class="hideallperms" title="'.dol_escape_htmltag($langs->trans(
"HideAllPerms")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"HideAllPerms")).
'" href="#">'.
img_picto(
'',
'folder',
'class="paddingright"').
'<span class="hideonsmartphone">'.$langs->trans(
"UndoExpandAll").
'</span></a>';
293 $sql =
"SELECT r.id, r.libelle as label, r.module, r.perms, r.subperms, r.module_position, r.bydefault";
294 $sql .=
" FROM ".MAIN_DB_PREFIX.
"rights_def as r";
295 $sql .=
" WHERE r.libelle NOT LIKE 'tou%'";
296 $sql .=
" AND r.entity = ".((int) $entity);
298 $sql .=
" AND r.perms NOT LIKE '%_advance'";
300 $sql .=
" ORDER BY r.family_position, r.module_position, r.module, r.id";
302 $result = $db->query($sql);
304 $num = $db->num_rows($result);
309 $cookietohidegroup = (empty($_COOKIE[
"DOLUSER_PERMS_HIDE_GRP"]) ?
'' : preg_replace(
'/^,/',
'', $_COOKIE[
"DOLUSER_PERMS_HIDE_GRP"]));
310 $cookietohidegrouparray = explode(
',', $cookietohidegroup);
313 $obj = $db->fetch_object($result);
316 if (empty($modules[$obj->module])) {
321 $objMod = $modules[$obj->module];
323 if (GETPOSTISSET(
'forbreakperms_'.$obj->module)) {
324 $ishidden =
GETPOSTINT(
'forbreakperms_'.$obj->module);
325 } elseif (in_array($j, $cookietohidegrouparray)) {
330 $isexpanded = ! $ishidden;
333 if (isset($obj->module) && ($oldmod != $obj->module)) {
334 $oldmod = $obj->module;
337 if (GETPOSTISSET(
'forbreakperms_'.$obj->module)) {
338 $ishidden =
GETPOSTINT(
'forbreakperms_'.$obj->module);
339 } elseif (in_array($j, $cookietohidegrouparray)) {
344 $isexpanded = ! $ishidden;
346 $objMod = $modules[$obj->module];
347 $picto = ($objMod->picto ? $objMod->picto :
'generic');
350 print
'<tr class="oddeven trforbreakperms" data-hide-perms="'.$obj->module.
'" data-j="'.$j.
'">';
352 print
'<td class="maxwidthonsmartphone tdoverflowmax200 tdforbreakperms" data-hide-perms="'.$obj->module.
'" title="'.
dol_escape_htmltag($objMod->getName()).
'">';
353 print
img_object(
'', $picto,
'class="pictoobjectwidth paddingright"').
' '.$objMod->getName();
354 print
'<a name="'.$objMod->getName().
'"></a>';
357 if ($permissiontoedit) {
358 print
'<td class="center wraponsmartphone">';
359 print
'<span class="permtohide_'.$obj->module.
'" '.(!$isexpanded ?
' style="display:none"' :
'').
'>';
360 print
'<a class="reposition alink addexpandedmodulesinparamlist" title="'.dol_escape_htmltag($langs->trans(
"All")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"All")).
'" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=addrights&token='.
newToken().
'&entity='.$entity.
'&module='.$obj->module.
'&confirm=yes&updatedmodulename='.$obj->module.
'">'.$langs->trans(
"All").
"</a>";
362 print
'<a class="reposition alink addexpandedmodulesinparamlist" title="'.dol_escape_htmltag($langs->trans(
"None")).
'" alt="'.
dol_escape_htmltag($langs->trans(
"None")).
'" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=delrights&token='.
newToken().
'&entity='.$entity.
'&module='.$obj->module.
'&confirm=yes&updatedmodulename='.$obj->module.
'">'.$langs->trans(
"None").
"</a>";
365 print
'<td class="tdforbreakperms" data-hide-perms="'.$obj->module.
'">';
368 print
'<td class="tdforbreakperms" data-hide-perms="'.$obj->module.
'"></td>';
369 print
'<td class="tdforbreakperms" data-hide-perms="'.$obj->module.
'"></td>';
372 print
'<td class="tdforbreakperms" data-hide-perms="'.$obj->module.
'"></td>';
373 print
'<td class="maxwidthonsmartphone right tdforbreakperms" data-hide-perms="'.$obj->module.
'">';
374 print
'<div class="switchfolderperms folderperms_'.$obj->module.
'"'.($isexpanded ?
' style="display:none;"' :
'').
'>';
375 print
img_picto(
'',
'folder',
'class="marginright"');
377 print
'<div class="switchfolderperms folderopenperms_'.$obj->module.
'"'.(!$isexpanded ?
' style="display:none;"' :
'').
'>';
378 print
img_picto(
'',
'folder-open',
'class="marginright"');
384 print
'<!-- '.$obj->module.
'->'.$obj->perms.($obj->subperms ?
'->'.$obj->subperms :
'').
' -->'.
"\n";
385 print
'<tr class="oddeven trtohide_'.$obj->module.
'"'.(!$isexpanded ?
' style="display:none"' :
'').
'>';
389 print
'<td class="maxwidthonsmartphone tdoverflowmax200">';
390 print
'<input type="hidden" name="forbreakperms_'.$obj->module.
'" id="idforbreakperms_'.$obj->module.
'" css="cssforfieldishiden" data-j="'.$j.
'" value="'.($isexpanded ?
'0' :
"1").
'">';
395 if (!empty($permsgroupbyentity[$entity]) && is_array($permsgroupbyentity[$entity])) {
396 if (in_array($obj->id, $permsgroupbyentity[$entity])) {
398 if ($permissiontoedit) {
399 print
'<td class="center"><a class="reposition" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=delrights&token='.
newToken().
'&entity='.$entity.
'&rights='.$obj->id.
'&confirm=yes">';
401 print
img_picto($langs->trans(
"Remove"),
'switch_on');
404 print
'<td class="center nowrap">';
405 print
img_picto($langs->trans(
"Active"),
'tick');
409 if ($permissiontoedit) {
410 print
'<td class="center"><a class="reposition" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=addrights&token='.
newToken().
'&entity='.$entity.
'&rights='.$obj->id.
'&confirm=yes">';
412 print
img_picto($langs->trans(
"Add"),
'switch_off');
415 print
'<td> </td>';
419 if ($permissiontoedit) {
420 print
'<td class="center"><a class="reposition" href="'.$_SERVER[
"PHP_SELF"].
'?id='.
$object->id.
'&action=addrights&entity='.$entity.
'&rights='.$obj->id.
'&confirm=yes&token='.
newToken().
'">';
422 print
img_picto($langs->trans(
"Add"),
'switch_off');
425 print
'<td> </td>';
427 print
'<td> </td>';
431 $permlabel = (
getDolGlobalString(
'MAIN_USE_ADVANCED_PERMS') && ($langs->trans(
"PermissionAdvanced".$obj->id) !=
"PermissionAdvanced".$obj->id) ? $langs->trans(
"PermissionAdvanced".$obj->id) : (($langs->trans(
"Permission".$obj->id) !=
"Permission".$obj->id) ? $langs->trans(
"Permission".$obj->id) : $langs->trans($obj->label)));
435 if (in_array($idtouse, array(121, 122, 125, 126))) {
438 if ($langs->trans(
"Permission".$idtouse.
'b') !=
"Permission".$idtouse.
'b') {
439 print
'<br><span class="opacitymedium">'.$langs->trans(
"Permission".$idtouse.
'b').
'</span>';
441 if ($langs->trans(
"Permission".$obj->id.
'c') !=
"Permission".$obj->id.
'c') {
442 print
'<br><span class="opacitymedium">'.$langs->trans(
"Permission".$obj->id.
'c').
'</span>';
445 if (preg_match(
'/_advance$/', $obj->perms)) {
446 print
' <span class="opacitymedium">('.$langs->trans(
"AdvancedModeOnly").
')</span>';
453 print
'<td class="right">';
454 $htmltext = $langs->trans(
"ID").
': '.$obj->id;
455 $htmltext .=
'<br>'.$langs->trans(
"Permission").
': user->hasRight(\''.$obj->module.
'\', \
''.$obj->perms.
'\''.($obj->subperms ?
', \''.$obj->subperms.
'\'' :
'').
')';
456 print $form->textwithpicto(
'', $htmltext);
460 print
'<td> </td>';
472 print
'$(".tdforbreakperms:not(.alink)").on("click", function(){
473 console.log("Click on tdforbreakperms");
474 moduletohide = $(this).data("hide-perms");
475 j = $(this).data("j");
476 if ($("#idforbreakperms_"+moduletohide).val() == 1) {
477 console.log("idforbreakperms_"+moduletohide+" has value hidden=1");
478 $(".trtohide_"+moduletohide).show();
479 $(".permtoshow_"+moduletohide).hide();
480 $(".permtohide_"+moduletohide).show();
481 $(".folderperms_"+moduletohide).hide();
482 $(".folderopenperms_"+moduletohide).show();
483 $("#idforbreakperms_"+moduletohide).val("0");
485 console.log("idforbreakperms_"+moduletohide+" has value hidden=0");
486 $(".trtohide_"+moduletohide).hide();
487 $(".folderopenperms_"+moduletohide).hide();
488 $(".folderperms_"+moduletohide).show();
489 $(".permtoshow_"+moduletohide).show();
490 $(".permtohide_"+moduletohide).hide();
491 $("#idforbreakperms_"+moduletohide).val("1");
494 // Now rebuild the value for cookie
496 $(".trforbreakperms").each(function(index) {
497 //console.log( index + ": " + $( this ).data("j") + " " + $( this ).data("hide-perms") + " " + $("input[data-j="+(index+1)+"]").val());
498 if ($("input[data-j="+(index+1)+"]").val() == 1) {
499 hideuserperm=hideuserperm+","+(index+1);
503 date = new Date(); date.setTime(date.getTime()+(30*86400000));
505 console.log("set cookie DOLUSER_PERMS_HIDE_GRP="+hideuserperm);
506 document.cookie = "DOLUSER_PERMS_HIDE_GRP=" + hideuserperm + "; expires=" + date.toGMTString() + "; path=/ ";
508 console.log("delete cookie DOLUSER_PERMS_HIDE_GRP");
509 document.cookie = "DOLUSER_PERMS_HIDE_GRP=; expires=Thu, 01-Jan-70 00:00:01 GMT; path=/ ";
514 print
'$(".showallperms").on("click", function(){
515 console.log("Click on showallperms");
517 console.log("delete cookie DOLUSER_PERMS_HIDE_GRP from showallperms click");
518 document.cookie = "DOLUSER_PERMS_HIDE_GRP=; expires=Thu, 01-Jan-70 00:00:01 GMT; path=/ ";
519 $(".tdforbreakperms").each( function(){
520 moduletohide = $(this).data("hide-perms");
521 //console.log(moduletohide);
522 if ($("#idforbreakperms_"+moduletohide).val() != 0) {
523 $(this).trigger("click"); // emulate the click, so the cooki will be resaved
528 $(".hideallperms").on("click", function(){
529 console.log("Click on hideallperms");
531 $(".tdforbreakperms").each( function(){
532 moduletohide = $(this).data("hide-perms");
533 //console.log(moduletohide);
534 if ($("#idforbreakperms_"+moduletohide).val() != 1) {
535 $(this).trigger("click"); // emulate the click, so the cooki will be resaved
543 print
'.switchfolderperms{
549 $parameters = array();
550 $reshook = $hookmanager->executeHooks(
'insertExtraFooter', $parameters,
$object, $action);
if( $user->socid > 0) if(! $user->hasRight('accounting', 'chartofaccount')) $object
if(!defined('NOREQUIRESOC')) if(!defined( 'NOREQUIRETRAN')) if(!defined('NOTOKENRENEWAL')) if(!defined( 'NOREQUIREMENU')) if(!defined('NOREQUIREHTML')) if(!defined( 'NOREQUIREAJAX')) llxHeader($head='', $title='', $help_url='', $target='', $disablejs=0, $disablehead=0, $arrayofjs='', $arrayofcss='', $morequerystring='', $morecssonbody='', $replacemainareaby='', $disablenofollow=0, $disablenoindex=0)
Empty header.
Class to manage user groups.
dolGetModulesDirs($subdir='')
Return list of directories that contain modules.
img_object($titlealt, $picto, $moreatt='', $pictoisfullpath=0, $srconly=0, $notitle=0)
Show a picto called object_picto (generic function)
setEventMessages($mesg, $mesgs, $style='mesgs', $messagekey='', $noduplicate=0, $attop=0)
Set event messages in dol_events session object.
img_picto($titlealt, $picto, $moreatt='', $pictoisfullpath=0, $srconly=0, $notitle=0, $alt='', $morecss='', $marginleftonlyshort=2)
Show picto whatever it's its name (generic function)
GETPOSTINT($paramname, $method=0)
Return the value of a $_GET or $_POST supervariable, converted into integer.
dol_get_fiche_head($links=array(), $active='', $title='', $notab=0, $picto='', $pictoisfullpath=0, $morehtmlright='', $morecss='', $limittoshow=0, $moretabssuffix='', $dragdropfile=0)
Show tabs of a record.
dol_osencode($str)
Return a string encoded into OS filesystem encoding.
dol_get_fiche_end($notab=0)
Return tab footer of a card.
dol_strlen($string, $stringencoding='UTF-8')
Make a strlen call.
newToken()
Return the value of token currently saved into session with name 'newtoken'.
GETPOST($paramname, $check='alphanohtml', $method=0, $filter=null, $options=null, $noreplace=0)
Return value of a param into GET or POST supervariable.
dol_print_error($db=null, $error='', $errors=null)
Displays error message system with all the information to facilitate the diagnosis and the escalation...
getDolGlobalString($key, $default='')
Return a Dolibarr global constant string value.
info_admin($text, $infoonimgalt=0, $nodiv=0, $admin='1', $morecss='hideonsmartphone', $textfordropdown='', $picto='')
Show information in HTML for admin users or standard users.
dol_syslog($message, $level=LOG_INFO, $ident=0, $suffixinfilename='', $restricttologhandler='', $logcontext=null)
Write log message into outputs.
dol_escape_htmltag($stringtoescape, $keepb=0, $keepn=0, $noescapetags='', $escapeonlyhtmltags=0, $cleanalsojavascript=0)
Returns text escaped for inclusion in HTML alt or title or value tags, or into values of HTML input f...
accessforbidden($message='', $printheader=1, $printfooter=1, $showonlymessage=0, $params=null)
Show a message to say access is forbidden and stop program.
group_prepare_head($object)
Prepare array with list of tabs.