initial commit; version 22.5.12042

html/includes/actions/role_entity_add.inc.php

@@ -0,0 +1,47 @@
+<?php
+/**
+ * Observium
+ *
+ *   This file is part of Observium.
+ *
+ * @package    observium
+ * @subpackage web
+ * @copyright  (C) 2006-2013 Adam Armstrong, (C) 2013-2020 Observium Limited
+ *
+ */
+
+if ($_SESSION['userlevel'] == 10 && request_token_valid($vars)) // Only valid forms from level 10 users
+{
+
+  if (isset($vars['entity_id']))
+  {
+  } // use entity_id
+  elseif (isset($vars[$vars['entity_type'] . '_entity_id'])) // use type_entity_id
+  {
+    $vars['entity_id'] = $vars[$vars['entity_type'] . '_entity_id'];
+  }
+  if (!is_array($vars['entity_id']))
+  {
+    $vars['entity_id'] = array($vars['entity_id']);
+  }
+
+  foreach ($vars['entity_id'] as $entity_id)
+  {
+    if (get_entity_by_id_cache($vars['entity_type'], $entity_id)) // Skip not exist entities
+    {
+      if (!dbExist('roles_entity_permissions', '`role_id` = ? AND `entity_type` = ? AND `entity_id` = ?',
+                   array($vars['role_id'], $vars['entity_type'], $entity_id)
+      ))
+      {
+
+        if(!in_array($vars['access'], array('ro', 'rw'))) { $vars['access'] = 'ro'; }
+
+        dbInsert(array('entity_id' => $entity_id, 'entity_type' => $vars['entity_type'], 'role_id' => $vars['role_id'], 'access' => $vars['access']),
+                 'roles_entity_permissions'
+        );
+      }
+    } else { print_error('Error: Invalid Entity.'); }
+  }
+}
+
+// EOF