Initial commit: Backup der Webseiten
- zoesch.de - blitzkiste.net - gruene-hassberge (norbert.zoesch.de) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
Felix Zösch
245
zoesch.de/galerie/include/ws_functions/pwg.permissions.php
Normal file
245
zoesch.de/galerie/include/ws_functions/pwg.permissions.php
Normal file
@@ -0,0 +1,245 @@
|
||||
<?php
|
||||
// +-----------------------------------------------------------------------+
|
||||
// | Piwigo - a PHP based photo gallery |
|
||||
// +-----------------------------------------------------------------------+
|
||||
// | Copyright(C) 2008-2016 Piwigo Team http://piwigo.org |
|
||||
// | Copyright(C) 2003-2008 PhpWebGallery Team http://phpwebgallery.net |
|
||||
// | Copyright(C) 2002-2003 Pierrick LE GALL http://le-gall.net/pierrick |
|
||||
// +-----------------------------------------------------------------------+
|
||||
// | This program is free software; you can redistribute it and/or modify |
|
||||
// | it under the terms of the GNU General Public License as published by |
|
||||
// | the Free Software Foundation |
|
||||
// | |
|
||||
// | This program is distributed in the hope that it will be useful, but |
|
||||
// | WITHOUT ANY WARRANTY; without even the implied warranty of |
|
||||
// | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
|
||||
// | General Public License for more details. |
|
||||
// | |
|
||||
// | You should have received a copy of the GNU General Public License |
|
||||
// | along with this program; if not, write to the Free Software |
|
||||
// | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, |
|
||||
// | USA. |
|
||||
// +-----------------------------------------------------------------------+
|
||||
|
||||
/**
|
||||
* API method
|
||||
* Returns permissions
|
||||
* @param mixed[] $params
|
||||
* @option int[] cat_id (optional)
|
||||
* @option int[] group_id (optional)
|
||||
* @option int[] user_id (optional)
|
||||
*/
|
||||
function ws_permissions_getList($params, &$service)
|
||||
{
|
||||
$my_params = array_intersect(array_keys($params), array('cat_id','group_id','user_id'));
|
||||
if (count($my_params) > 1)
|
||||
{
|
||||
return new PwgError(WS_ERR_INVALID_PARAM, 'Too many parameters, provide cat_id OR user_id OR group_id');
|
||||
}
|
||||
|
||||
$cat_filter = '';
|
||||
if (!empty($params['cat_id']))
|
||||
{
|
||||
$cat_filter = 'WHERE cat_id IN('. implode(',', $params['cat_id']) .')';
|
||||
}
|
||||
|
||||
$perms = array();
|
||||
|
||||
// direct users
|
||||
$query = '
|
||||
SELECT user_id, cat_id
|
||||
FROM '. USER_ACCESS_TABLE .'
|
||||
'. $cat_filter .'
|
||||
;';
|
||||
$result = pwg_query($query);
|
||||
|
||||
while ($row = pwg_db_fetch_assoc($result))
|
||||
{
|
||||
if (!isset($perms[ $row['cat_id'] ]))
|
||||
{
|
||||
$perms[ $row['cat_id'] ]['id'] = intval($row['cat_id']);
|
||||
}
|
||||
$perms[ $row['cat_id'] ]['users'][] = intval($row['user_id']);
|
||||
}
|
||||
|
||||
// indirect users
|
||||
$query = '
|
||||
SELECT ug.user_id, ga.cat_id
|
||||
FROM '. USER_GROUP_TABLE .' AS ug
|
||||
INNER JOIN '. GROUP_ACCESS_TABLE .' AS ga
|
||||
ON ug.group_id = ga.group_id
|
||||
'. $cat_filter .'
|
||||
;';
|
||||
$result = pwg_query($query);
|
||||
|
||||
while ($row = pwg_db_fetch_assoc($result))
|
||||
{
|
||||
if (!isset($perms[ $row['cat_id'] ]))
|
||||
{
|
||||
$perms[ $row['cat_id'] ]['id'] = intval($row['cat_id']);
|
||||
}
|
||||
$perms[ $row['cat_id'] ]['users_indirect'][] = intval($row['user_id']);
|
||||
}
|
||||
|
||||
// groups
|
||||
$query = '
|
||||
SELECT group_id, cat_id
|
||||
FROM '. GROUP_ACCESS_TABLE .'
|
||||
'. $cat_filter .'
|
||||
;';
|
||||
$result = pwg_query($query);
|
||||
|
||||
while ($row = pwg_db_fetch_assoc($result))
|
||||
{
|
||||
if (!isset($perms[ $row['cat_id'] ]))
|
||||
{
|
||||
$perms[ $row['cat_id'] ]['id'] = intval($row['cat_id']);
|
||||
}
|
||||
$perms[ $row['cat_id'] ]['groups'][] = intval($row['group_id']);
|
||||
}
|
||||
|
||||
// filter by group and user
|
||||
foreach ($perms as $cat_id => &$cat)
|
||||
{
|
||||
if (isset($filters['group_id']))
|
||||
{
|
||||
if (empty($cat['groups']) or count(array_intersect($cat['groups'], $params['group_id'])) == 0)
|
||||
{
|
||||
unset($perms[$cat_id]);
|
||||
continue;
|
||||
}
|
||||
}
|
||||
if (isset($filters['user_id']))
|
||||
{
|
||||
if (
|
||||
(empty($cat['users_indirect']) or count(array_intersect($cat['users_indirect'], $params['user_id'])) == 0)
|
||||
and (empty($cat['users']) or count(array_intersect($cat['users'], $params['user_id'])) == 0)
|
||||
) {
|
||||
unset($perms[$cat_id]);
|
||||
continue;
|
||||
}
|
||||
}
|
||||
|
||||
$cat['groups'] = !empty($cat['groups']) ? array_values(array_unique($cat['groups'])) : array();
|
||||
$cat['users'] = !empty($cat['users']) ? array_values(array_unique($cat['users'])) : array();
|
||||
$cat['users_indirect'] = !empty($cat['users_indirect']) ? array_values(array_unique($cat['users_indirect'])) : array();
|
||||
}
|
||||
unset($cat);
|
||||
|
||||
return array(
|
||||
'categories' => new PwgNamedArray(
|
||||
array_values($perms),
|
||||
'category',
|
||||
array('id')
|
||||
)
|
||||
);
|
||||
}
|
||||
|
||||
/**
|
||||
* API method
|
||||
* Add permissions
|
||||
* @param mixed[] $params
|
||||
* @option int[] cat_id
|
||||
* @option int[] group_id (optional)
|
||||
* @option int[] user_id (optional)
|
||||
* @option bool recursive
|
||||
*/
|
||||
function ws_permissions_add($params, &$service)
|
||||
{
|
||||
if (get_pwg_token() != $params['pwg_token'])
|
||||
{
|
||||
return new PwgError(403, 'Invalid security token');
|
||||
}
|
||||
|
||||
include_once(PHPWG_ROOT_PATH.'admin/include/functions.php');
|
||||
|
||||
if (!empty($params['group_id']))
|
||||
{
|
||||
$cat_ids = get_uppercat_ids($params['cat_id']);
|
||||
if ($params['recursive'])
|
||||
{
|
||||
$cat_ids = array_merge($cat_ids, get_subcat_ids($params['cat_id']));
|
||||
}
|
||||
|
||||
$query = '
|
||||
SELECT id
|
||||
FROM '. CATEGORIES_TABLE .'
|
||||
WHERE id IN ('. implode(',', $cat_ids) .')
|
||||
AND status = \'private\'
|
||||
;';
|
||||
$private_cats = array_from_query($query, 'id');
|
||||
|
||||
$inserts = array();
|
||||
foreach ($private_cats as $cat_id)
|
||||
{
|
||||
foreach ($params['group_id'] as $group_id)
|
||||
{
|
||||
$inserts[] = array(
|
||||
'group_id' => $group_id,
|
||||
'cat_id' => $cat_id
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
mass_inserts(
|
||||
GROUP_ACCESS_TABLE,
|
||||
array('group_id','cat_id'),
|
||||
$inserts,
|
||||
array('ignore'=>true)
|
||||
);
|
||||
}
|
||||
|
||||
if (!empty($params['user_id']))
|
||||
{
|
||||
if ($params['recursive']) $_POST['apply_on_sub'] = true;
|
||||
add_permission_on_category($params['cat_id'], $params['user_id']);
|
||||
}
|
||||
|
||||
return $service->invoke('pwg.permissions.getList', array('cat_id'=>$params['cat_id']));
|
||||
}
|
||||
|
||||
/**
|
||||
* API method
|
||||
* Removes permissions
|
||||
* @param mixed[] $params
|
||||
* @option int[] cat_id
|
||||
* @option int[] group_id (optional)
|
||||
* @option int[] user_id (optional)
|
||||
*/
|
||||
function ws_permissions_remove($params, &$service)
|
||||
{
|
||||
if (get_pwg_token() != $params['pwg_token'])
|
||||
{
|
||||
return new PwgError(403, 'Invalid security token');
|
||||
}
|
||||
|
||||
include_once(PHPWG_ROOT_PATH.'admin/include/functions.php');
|
||||
|
||||
$cat_ids = get_subcat_ids($params['cat_id']);
|
||||
|
||||
if (!empty($params['group_id']))
|
||||
{
|
||||
$query = '
|
||||
DELETE
|
||||
FROM '. GROUP_ACCESS_TABLE .'
|
||||
WHERE group_id IN ('. implode(',', $params['group_id']).')
|
||||
AND cat_id IN ('. implode(',', $cat_ids).')
|
||||
;';
|
||||
pwg_query($query);
|
||||
}
|
||||
|
||||
if (!empty($params['user_id']))
|
||||
{
|
||||
$query = '
|
||||
DELETE
|
||||
FROM '. USER_ACCESS_TABLE .'
|
||||
WHERE user_id IN ('. implode(',', $params['user_id']) .')
|
||||
AND cat_id IN ('. implode(',', $cat_ids) .')
|
||||
;';
|
||||
pwg_query($query);
|
||||
}
|
||||
|
||||
return $service->invoke('pwg.permissions.getList', array('cat_id'=>$params['cat_id']));
|
||||
}
|
||||
|
||||
?>
|
||||
Reference in New Issue
Block a user