1061 lines
48 KiB
PHP
1061 lines
48 KiB
PHP
<?php
|
|
/**
|
|
* Observium
|
|
*
|
|
* This file is part of Observium.
|
|
*
|
|
* @package observium
|
|
* @subpackage web
|
|
* @copyright (C) 2006-2013 Adam Armstrong, (C) 2013-2022 Observium Limited
|
|
*
|
|
*/
|
|
|
|
register_html_title("Edit user");
|
|
|
|
if ($_SESSION['userlevel'] < 10) {
|
|
print_error_permission();
|
|
return;
|
|
}
|
|
|
|
include($config['html_dir'].'/includes/user_menu.inc.php');
|
|
|
|
// Load JS entity picker
|
|
register_html_resource('js', 'tw-sack.js');
|
|
register_html_resource('js', 'observium-entities.js');
|
|
|
|
?>
|
|
|
|
<form method="post" action="" class="form form-inline">
|
|
<div class="navbar navbar-narrow">
|
|
<div class="navbar-inner">
|
|
<div class="container">
|
|
<a class="brand">Edit User</a>
|
|
<ul class="nav">
|
|
|
|
<?php
|
|
|
|
|
|
// FIXME -- this is used in two places, maybe function it.
|
|
$user_list = auth_user_list();
|
|
|
|
echo('<li>');
|
|
// FIXME, currently users list more than 1000 have troubles with memory use
|
|
// Do not generate this unusable dropdown form, need to switch ajax input
|
|
if (safe_count($user_list) <= 512) {
|
|
$item = [
|
|
'id' => 'page',
|
|
'value' => 'user_edit'
|
|
];
|
|
echo(generate_form_element($item, 'hidden'));
|
|
$item = [
|
|
'id' => 'user_id',
|
|
'title' => 'Select User',
|
|
'width' => '150px',
|
|
'onchange' => "location.href='user_edit/user_id=' + this.options[this.selectedIndex].value + '/';",
|
|
'values' => $user_list,
|
|
'value' => $vars['user_id']
|
|
];
|
|
echo(generate_form_element($item, 'select'));
|
|
}
|
|
echo('
|
|
</li>
|
|
</ul>');
|
|
|
|
if ($vars['user_id']) {
|
|
// Load the user's information
|
|
if (isset($user_list[$vars['user_id']])) {
|
|
$user_data = $user_list[$vars['user_id']];
|
|
} else {
|
|
$user_data = dbFetchRow("SELECT * FROM `users` WHERE `user_id` = ?", [ $vars['user_id'] ]);
|
|
}
|
|
if (!isset($user_data['username'])) {
|
|
$user_data['username'] = auth_username_by_id($vars['user_id']);
|
|
}
|
|
if (!isset($user_data['level']) && !is_numeric($user_data['level'])) {
|
|
$user_data['level'] = auth_user_level($user_data['username']);
|
|
}
|
|
|
|
humanize_user($user_data); // Get level_label, level_real, row_class, etc
|
|
|
|
// Delete the selected user.
|
|
if (auth_usermanagement() && $vars['user_id'] !== $_SESSION['user_id']) {
|
|
echo('<ul class="nav pull-right">');
|
|
echo('<li><a href="'.generate_url([ 'page' => 'user_edit',
|
|
'action' => 'deleteuser',
|
|
'user_id' => $vars['user_id'],
|
|
'confirm' => 'yes',
|
|
'requesttoken' => $_SESSION['requesttoken'] ]) . '"
|
|
data-toggle="confirmation"
|
|
data-confirm-content="You have requested deletion of the user <strong>'.escape_html($user_data['username']).'</strong>.<br />This action can not be reversed."
|
|
data-confirm-placement="bottom">
|
|
<i class="'.$config['icon']['cancel'].'"></i> Delete User</a></li>');
|
|
echo('</ul>');
|
|
register_html_resource('js', 'jquery.popconfirm.js');
|
|
register_html_resource('script', '$("[data-toggle=\'confirmation\']").popConfirm();');
|
|
}
|
|
}
|
|
|
|
?>
|
|
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</form>
|
|
|
|
<?php
|
|
if ($vars['user_id']) {
|
|
// Check if correct auth secret passed
|
|
$auth_secret_fail = empty($_SESSION['auth_secret']) || empty($vars['auth_secret']) || !hash_equals($_SESSION['auth_secret'], $vars['auth_secret']);
|
|
//print_vars($auth_secret_fail);
|
|
//$auth_secret_fail = TRUE;
|
|
|
|
if ($vars['action'] == "deleteuser" && request_token_valid($vars)) {
|
|
include($config['html_dir']."/pages/edituser/deleteuser.inc.php");
|
|
} else {
|
|
|
|
// Perform actions if requested
|
|
|
|
if (auth_usermanagement() && isset($vars['action']) && request_token_valid($vars)) { // Admins always can change user info & password
|
|
switch($vars['action']) {
|
|
case "changepass":
|
|
if ($vars['new_pass'] == "" || $vars['new_pass2'] == "") {
|
|
print_warning("Password cannot be blank.");
|
|
} elseif ($auth_secret_fail) {
|
|
// Incorrect auth secret, seems as someone try to hack system ;)
|
|
print_debug("Incorrect admin auth, get out from here nasty hacker.");
|
|
} elseif ($vars['new_pass'] === $vars['new_pass2'] &&
|
|
is_valid_param($vars['new_pass'], 'password')) {
|
|
$status = auth_change_password($user_data['username'], $vars['new_pass']);
|
|
if ($status) {
|
|
print_success("Password Changed.");
|
|
} else {
|
|
print_error("Password not changed.");
|
|
}
|
|
} else {
|
|
print_error("Passwords don't match or contain non printable chars.");
|
|
}
|
|
break;
|
|
|
|
case "change_user":
|
|
if ($auth_secret_fail) {
|
|
// Incorrect auth secret, seems as someone try to hack system ;)
|
|
print_debug("Incorrect admin auth, get out from here nasty hacker.");
|
|
} else {
|
|
$update_array = [];
|
|
$vars['new_can_modify_passwd'] = (isset($vars['new_can_modify_passwd']) && $vars['new_can_modify_passwd'] ? 1 : 0);
|
|
foreach ([ 'realname', 'level', 'email', 'descr', 'can_modify_passwd' ] as $param) {
|
|
if ($vars['new_' . $param] != $user_data[$param]) {
|
|
$update_array[$param] = $vars['new_' . $param];
|
|
}
|
|
}
|
|
$status = FALSE;
|
|
if (count($update_array)) {
|
|
$status = dbUpdate($update_array, 'users', '`user_id` = ?', [ $vars['user_id'] ]);
|
|
}
|
|
if ($status) {
|
|
print_success("User Info Changed.");
|
|
} else {
|
|
print_error("User Info not changed.");
|
|
}
|
|
}
|
|
break;
|
|
}
|
|
|
|
if ($status) {
|
|
// Reload user info
|
|
//$user_data = dbFetchRow("SELECT * FROM `users` WHERE `user_id` = ?", array($vars['user_id']));
|
|
$user_data['username'] = auth_username_by_id($vars['user_id']);
|
|
$user_data = auth_user_info($user_data['username']);
|
|
$user_data['level'] = auth_user_level($user_data['username']);
|
|
humanize_user($user_data); // Get level_label, level_real, label_class, row_class, etc
|
|
}
|
|
}
|
|
|
|
// FIXME -- output messages!
|
|
if (($vars['submit'] === "user_perm_del" || $vars['action'] === "user_perm_del") && request_token_valid($vars)) {
|
|
if ($auth_secret_fail) {
|
|
// Incorrect auth secret, seems as someone try to hack system ;)
|
|
print_debug("Incorrect admin auth, get out from here nasty hacker.");
|
|
} else {
|
|
if (isset($vars['entity_id'])) {} // use entity_id
|
|
elseif (isset($vars[$vars['entity_type'].'_entity_id'])) // use type_entity_id
|
|
{
|
|
$vars['entity_id'] = $vars[$vars['entity_type'].'_entity_id'];
|
|
}
|
|
|
|
$where = '`user_id` = ? AND `entity_type` = ? AND `auth_mechanism` = ?' . generate_query_values_and($vars['entity_id'], 'entity_id');
|
|
$params = [ $vars['user_id'], $vars['entity_type'], $config['auth_mechanism'] ];
|
|
//if (@dbFetchCell("SELECT COUNT(*) FROM `entity_permissions` WHERE " . $where, array($vars['user_id'], $vars['entity_type'])))
|
|
if (dbExist('entity_permissions', $where, $params))
|
|
{
|
|
dbDelete('entity_permissions', $where, $params);
|
|
}
|
|
}
|
|
} elseif (($vars['submit'] == "user_perm_add" || $vars['action'] == "user_perm_add") &&
|
|
request_token_valid($vars)) {
|
|
if ($auth_secret_fail) {
|
|
// Incorrect auth secret, seems as someone try to hack system ;)
|
|
print_debug("Incorrect admin auth, get out from here nasty hacker.");
|
|
} else {
|
|
if (isset($vars['entity_id'])) { // use entity_id
|
|
} elseif (isset($vars[$vars['entity_type'].'_entity_id'])) { // use type_entity_id
|
|
$vars['entity_id'] = $vars[$vars['entity_type'].'_entity_id'];
|
|
}
|
|
if (!is_array($vars['entity_id'])) {
|
|
$vars['entity_id'] = [ $vars['entity_id'] ];
|
|
}
|
|
|
|
foreach ($vars['entity_id'] as $entry) {
|
|
$where = '`user_id` = ? AND `entity_type` = ? AND `entity_id` = ? AND `auth_mechanism` = ?';
|
|
$params = [ $vars['user_id'], $vars['entity_type'], $entry, $config['auth_mechanism'] ];
|
|
if (get_entity_by_id_cache($vars['entity_type'], $entry) && // Skip not exist entities
|
|
!dbExist('entity_permissions', $where, $params)) {
|
|
dbInsert([ 'entity_id' => $entry, 'entity_type' => $vars['entity_type'], 'user_id' => $vars['user_id'], 'auth_mechanism' => $config['auth_mechanism'] ], 'entity_permissions');
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// Generate new auth secret
|
|
session_set_var('auth_secret', md5(strgen()));
|
|
|
|
?>
|
|
<div class="row"> <!-- main row begin -->
|
|
|
|
<div class="col-md-7"> <!-- left column begin -->
|
|
<div class="row"> <!-- left up row begin -->
|
|
|
|
<div class="col-md-<?php echo(auth_usermanagement() ? '6' : '12'); ?>"> <!-- userinfo begin -->
|
|
|
|
<div class="box box-solid">
|
|
<div class="box-header">
|
|
<h3 class="box-title">User Information</h3>
|
|
</div>
|
|
<div class="box-body no-padding">
|
|
|
|
<table class="table table-striped table-condensed">
|
|
<tr>
|
|
<th style="width: 100px;">User ID</th>
|
|
<td><?php echo(escape_html($user_data['user_id'])); ?></td>
|
|
</tr>
|
|
<tr>
|
|
<th style="width: 100px;">Username</th>
|
|
<td><?php echo(escape_html($user_data['username'])); ?></td>
|
|
</tr>
|
|
<tr>
|
|
<th>Real Name</th>
|
|
<td><?php echo(escape_html($user_data['realname'])); ?></td>
|
|
</tr>
|
|
<tr>
|
|
<th>User Level</th>
|
|
<td><?php echo('<span class="label label-'.$user_data['label_class'].'">'.$user_data['level_label'].'</span>'); ?></td>
|
|
</tr>
|
|
<tr>
|
|
<th>Email</th>
|
|
<td><?php echo(escape_html($user_data['email'])); ?></td>
|
|
</tr>
|
|
<tr>
|
|
<th>Description</th>
|
|
<td><?php echo(escape_html($user_data['descr'])); ?></td>
|
|
</tr>
|
|
<tr>
|
|
<th>User Source</th>
|
|
<td><?php echo(get_type_class_label($user_data['type'], 'user_type')); ?></td>
|
|
</tr>
|
|
</table>
|
|
|
|
<div class="form-actions" style="margin: 0;">
|
|
<?php
|
|
if (auth_usermanagement())
|
|
{
|
|
echo '<button class="btn btn-default pull-right" data-toggle="modal" data-target="#modal-user_edit"><i class="'.$config['icon']['user-edit'].'"></i> Edit User</button>';
|
|
}
|
|
?>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
</div> <!-- userinfo end -->
|
|
|
|
<?php
|
|
if (auth_usermanagement())
|
|
{ // begin user edit modal
|
|
|
|
$form = array('type' => 'horizontal',
|
|
//'userlevel' => 10, // Minimum user level for display form
|
|
'id' => 'user_edit',
|
|
'title' => 'Edit User: <strong>"' . escape_html($user_data['realname']) . '" ('. escape_html($user_data['username']) . '</strong>)',
|
|
//'modal_args' => $modal_args, // modal specific options
|
|
//'help' => 'This will delete the selected contact and any alert assocations.',
|
|
//'class' => '', // Clean default box class (default for modals)
|
|
//'url' => 'delhost/'
|
|
);
|
|
//$form['fieldset']['body'] = array('class' => 'modal-body'); // Required this class for modal body!
|
|
//$form['fieldset']['footer'] = array('class' => 'modal-footer'); // Required this class for modal footer!
|
|
|
|
$form['row'][0]['user_id'] = array(
|
|
'type' => 'hidden',
|
|
'fieldset' => 'body',
|
|
'value' => $user_data['user_id']);
|
|
$form['row'][0]['auth_secret'] = array(
|
|
'type' => 'hidden',
|
|
'fieldset' => 'body',
|
|
'value' => $_SESSION['auth_secret']);
|
|
|
|
$form['row'][1]['new_realname'] = array(
|
|
'type' => 'text',
|
|
'fieldset' => 'body',
|
|
'name' => 'Real Name',
|
|
'width' => '80%',
|
|
'placeholder' => TRUE,
|
|
'value' => $user_data['realname']);
|
|
$form['row'][2]['new_level'] = array(
|
|
'type' => 'select',
|
|
'fieldset' => 'body',
|
|
'name' => 'User Level',
|
|
'width' => '80%',
|
|
'subtext' => TRUE,
|
|
'values' => $GLOBALS['config']['user_level'],
|
|
'value' => $user_data['level_real']);
|
|
$form['row'][3]['new_email'] = array(
|
|
'type' => 'text',
|
|
'fieldset' => 'body',
|
|
'name' => 'E-mail',
|
|
'width' => '80%',
|
|
'placeholder' => TRUE,
|
|
'value' => $user_data['email']);
|
|
$form['row'][4]['new_descr'] = array(
|
|
'type' => 'text',
|
|
'fieldset' => 'body',
|
|
'name' => 'Description',
|
|
'width' => '80%',
|
|
'placeholder' => TRUE,
|
|
'value' => $user_data['descr']);
|
|
$form['row'][5]['new_can_modify_passwd'] = array(
|
|
'type' => 'toggle',
|
|
'view' => 'toggle',
|
|
'fieldset' => 'body',
|
|
'placeholder' => 'Allow the user to change his password',
|
|
'value' => $user_data['can_modify_passwd']);
|
|
|
|
$form['row'][8]['close'] = array(
|
|
'type' => 'submit',
|
|
'fieldset' => 'footer',
|
|
'div_class' => '', // Clean default form-action class!
|
|
'name' => 'Close',
|
|
'icon' => '',
|
|
'attribs' => array('data-dismiss' => 'modal', // dismiss modal
|
|
'aria-hidden' => 'true')); // do not sent any value
|
|
$form['row'][9]['action'] = array(
|
|
'type' => 'submit',
|
|
'fieldset' => 'footer',
|
|
'div_class' => '', // Clean default form-action class!
|
|
'name' => 'Save Changes',
|
|
'icon' => 'icon-ok icon-white',
|
|
//'right' => TRUE,
|
|
'class' => 'btn-primary',
|
|
//'disabled' => TRUE,
|
|
'value' => 'change_user');
|
|
|
|
echo generate_form_modal($form);
|
|
unset($form);
|
|
|
|
} // end edit user modal
|
|
|
|
if (auth_usermanagement())
|
|
{ // begin change password
|
|
$form = array('type' => 'horizontal',
|
|
//'space' => '10px',
|
|
'title' => 'Change Password',
|
|
'icon' => $config['icon']['lock'],
|
|
//'class' => 'box box-solid',
|
|
'fieldset' => array('change_password' => ''));
|
|
//'fieldset' => array('change_password' => 'Change Password'));
|
|
$form['row'][0]['action'] = array(
|
|
'type' => 'hidden',
|
|
'value' => 'changepass');
|
|
$form['row'][1]['auth_secret'] = array(
|
|
'type' => 'hidden',
|
|
'value' => $_SESSION['auth_secret']);
|
|
$form['row'][2]['new_pass'] = array(
|
|
'type' => 'password',
|
|
'fieldset' => 'change_password', // Group by fieldset
|
|
'name' => 'New Password',
|
|
'width' => '95%',
|
|
'value' => '');
|
|
$form['row'][3]['new_pass2'] = array(
|
|
'type' => 'password',
|
|
'fieldset' => 'change_password', // Group by fieldset
|
|
'name' => 'Retype Password',
|
|
'width' => '95%',
|
|
'value' => '');
|
|
$form['row'][10]['submit'] = array(
|
|
'type' => 'submit',
|
|
'name' => 'Update Password',
|
|
'icon' => $config['icon']['lock'],
|
|
'right' => TRUE,
|
|
'value' => 'save');
|
|
echo(' <div class="col-md-6">' . PHP_EOL);
|
|
print_form($form);
|
|
unset($form, $i);
|
|
echo(' </div>' . PHP_EOL);
|
|
} // end change password
|
|
?>
|
|
</div> <!-- left up row end -->
|
|
<!--<div class="col-md-12">-->
|
|
|
|
<?php
|
|
|
|
echo generate_box_open(array('header-border' => TRUE, 'title' => 'Role Membership'));
|
|
|
|
$role_membership = dbFetchRows("SELECT * FROM `roles_users` LEFT JOIN `roles` USING (`role_id`) WHERE `user_id` = ? AND `auth_mechanism` = ? ORDER BY `role_name`", [ $user_data['user_id'], $config['auth_mechanism'] ]);
|
|
|
|
$users = dbFetchRows("SELECT * FROM `users`");
|
|
|
|
$role_list = [];
|
|
if (!safe_empty($role_membership)) {
|
|
echo '<div class="box-body no-padding">';
|
|
echo('<table class="table table-hover table-condensed">');
|
|
|
|
$cols = array(
|
|
array('', 'class="state-marker"'),
|
|
'username' => array('Name', 'style="width: 200px;"'),
|
|
'email' => array('Users', 'style="width: 80px;"'),
|
|
'level' => 'Description',
|
|
);
|
|
//echo(get_table_header($cols));
|
|
|
|
foreach ($role_membership as $role) {
|
|
|
|
echo '<tr>';
|
|
echo '<td width="5"></td>';
|
|
echo '<td width="200" class="entity">' . escape_html($role['role_name']) . '</td>';
|
|
echo '<td>' . escape_html($role['role_descr']) . '</td>';
|
|
echo '<td width="40">';
|
|
$form = array('type' => 'simple');
|
|
|
|
// Elements
|
|
$form['row'][0]['auth_secret'] = array(
|
|
'type' => 'hidden',
|
|
'value' => $_SESSION['auth_secret']);
|
|
|
|
$form['row'][0]['role_id'] = array('type' => 'hidden',
|
|
'value' => $role['role_id']);
|
|
$form['row'][0]['action'] = array('type' => 'hidden',
|
|
'value' => 'role_user_del');
|
|
$form['row'][0]['submit'] = array('type' => 'submit',
|
|
'name' => ' ',
|
|
'class' => 'btn-danger btn-mini',
|
|
'icon' => 'icon-trash',
|
|
'value' => 'role_user_del');
|
|
print_form($form); unset($form);
|
|
|
|
echo '</td>';
|
|
|
|
echo '</tr>';
|
|
$role_list[] = $role['role_id'];
|
|
}
|
|
echo('</table></div>');
|
|
} else {
|
|
echo('<p class="text-center text-warning bg-warning" style="padding: 10px; margin: 0px;"><strong>This user currently has no role memberships</strong></p>');
|
|
}
|
|
|
|
|
|
$form = array('type' => 'simple',
|
|
'style' => 'padding: 7px; margin: 0px;',
|
|
//'submit_by_key' => TRUE,
|
|
//'url' => generate_url($vars)
|
|
);
|
|
// Elements
|
|
$form['row'][0]['auth_secret'] = array('type' => 'hidden', 'value' => $_SESSION['auth_secret']);
|
|
$form['row'][0]['user_id'] = array('type' => 'hidden', 'value' => $user_data['user_id']);
|
|
$form['row'][0]['action'] = array('type' => 'hidden', 'value' => 'role_user_add');
|
|
|
|
$form_items['users'] = array();
|
|
|
|
$roles = dbFetchRows("SELECT * FROM `roles`");
|
|
|
|
|
|
foreach ($roles as $role) {
|
|
if (!in_array($role['role_id'], $role_list)) {
|
|
$form_items['roles'][$role['role_id']] = array('name' => escape_html($role['role_name']),
|
|
'descr' => escape_html($role['role_descr']));
|
|
}
|
|
}
|
|
|
|
$form['row'][0]['role_id'] = array('type' => 'multiselect',
|
|
'name' => 'Add Role',
|
|
'width' => '250px',
|
|
'values' => $form_items['roles']);
|
|
// add button
|
|
$form['row'][0]['Submit'] = array('type' => 'submit',
|
|
'name' => 'Add',
|
|
'icon' => $config['icon']['plus'],
|
|
'right' => TRUE,
|
|
'value' => 'Add');
|
|
|
|
print_form($form); unset($form);
|
|
|
|
echo generate_box_close();
|
|
|
|
?>
|
|
|
|
<?php print_authlog(array_merge($vars, array('short' => TRUE, 'pagination' => FALSE))); ?>
|
|
|
|
</div> <!-- left column end -->
|
|
|
|
<div class="col-md-5"> <!-- right column begin -->
|
|
|
|
<?php
|
|
|
|
// Begin main permissions block
|
|
//if ($user_data['permission_access'] === FALSE || $user_data['permission_read'] === FALSE || $user_data['permission_admin'])
|
|
//{
|
|
echo generate_box_open(array('header-border' => TRUE, 'title' => 'Global Permissions'));
|
|
echo('<p class="text-center text-uppercase text-'.$user_data['row_class'].' bg-'.$user_data['row_class'].'" style="padding: 10px; margin: 0px;"><strong>'.$user_data['subtext'].'</strong></p>');
|
|
echo generate_box_close();
|
|
//print_error($user_data['subtext']);
|
|
//} else {
|
|
// if user has access and not has read/secure read/edit use individual permissions
|
|
//echo generate_box_open();
|
|
//}
|
|
|
|
// Always display (and edit permissions) also if user disabled or has global read or admin permissions
|
|
|
|
// Cache user permissions
|
|
foreach (dbFetchRows("SELECT * FROM `entity_permissions` WHERE `user_id` = ? AND `auth_mechanism` = ?", [ $vars['user_id'], $config['auth_mechanism'] ]) as $entity)
|
|
{
|
|
$user_permissions[$entity['entity_type']][$entity['entity_id']] = TRUE;
|
|
}
|
|
|
|
// Start bill Permissions
|
|
if (isset($config['enable_billing']) && $config['enable_billing']) {
|
|
echo generate_box_open(array('header-border' => TRUE, 'title' => 'Bill Permissions'));
|
|
if (!safe_empty($user_permissions['bill'])) {
|
|
echo('<table class="'.OBS_CLASS_TABLE.'">' . PHP_EOL);
|
|
|
|
foreach ($user_permissions['bill'] as $bill_id => $status) {
|
|
$bill = get_bill_by_id($bill_id);
|
|
|
|
echo('<tr><td style="width: 1px;"></td>
|
|
<td style="overflow: hidden;"><i class="'.$config['entities']['bill']['icon'].'"></i> '.$bill['bill_name'].'
|
|
<small>' . $bill['bill_type'] . '</small></td>
|
|
<td width="25">');
|
|
|
|
$form = array('type' => 'simple',
|
|
//'submit_by_key' => TRUE,
|
|
//'url' => generate_url($vars)
|
|
);
|
|
// Elements
|
|
$form['row'][0]['auth_secret'] = array(
|
|
'type' => 'hidden',
|
|
'value' => $_SESSION['auth_secret']);
|
|
$form['row'][0]['entity_id'] = array('type' => 'hidden',
|
|
'value' => $bill['bill_id']);
|
|
$form['row'][0]['entity_type'] = array('type' => 'hidden',
|
|
'value' => 'bill');
|
|
$form['row'][0]['submit'] = array('type' => 'submit',
|
|
'name' => ' ',
|
|
'class' => 'btn-danger btn-mini',
|
|
'icon' => 'icon-trash',
|
|
'value' => 'user_perm_del');
|
|
print_form($form); unset($form);
|
|
|
|
echo('</td>
|
|
</tr>');
|
|
}
|
|
echo('</table>' . PHP_EOL);
|
|
|
|
} else {
|
|
echo('<p class="text-center text-warning bg-warning" style="padding: 10px; margin: 0px;"><strong>This user currently has no permitted bills</strong></p>');
|
|
//print_warning("This user currently has no permitted bills");
|
|
}
|
|
|
|
// Bills
|
|
$permissions_list = array_keys((array)$user_permissions['bill']);
|
|
|
|
$form = array('type' => 'simple',
|
|
'style' => 'padding: 7px; margin: 0px;',
|
|
//'submit_by_key' => TRUE,
|
|
//'url' => generate_url($vars)
|
|
);
|
|
// Elements
|
|
$form['row'][0]['auth_secret'] = array(
|
|
'type' => 'hidden',
|
|
'value' => $_SESSION['auth_secret']);
|
|
$form['row'][0]['user_id'] = array('type' => 'hidden',
|
|
'value' => $vars['user_id']);
|
|
$form['row'][0]['entity_type'] = array('type' => 'hidden',
|
|
'value' => 'bill');
|
|
$form['row'][0]['action'] = array('type' => 'hidden',
|
|
'value' => 'user_perm_add');
|
|
|
|
$form_items['bills'] = array();
|
|
foreach (dbFetchRows("SELECT * FROM `bills`") as $bill) {
|
|
if (!in_array($bill['bill_id'], $permissions_list)) {
|
|
$form_items['bills'][$bill['bill_id']] = [
|
|
'name' => $bill['bill_name'],
|
|
'subtext' => $bill['bill_descr'],
|
|
'icon' => $config['entities']['bill']['icon']
|
|
];
|
|
}
|
|
}
|
|
$form['row'][0]['entity_id'] = array('type' => 'multiselect',
|
|
'name' => 'Permit Bill',
|
|
'width' => '250px',
|
|
//'value' => $vars['entity_id'],
|
|
'values' => $form_items['bills']);
|
|
// add button
|
|
$form['row'][0]['Submit'] = array('type' => 'submit',
|
|
'name' => 'Add',
|
|
'icon' => $config['icon']['plus'],
|
|
'right' => TRUE,
|
|
'value' => 'Add');
|
|
print_form($form); unset($form);
|
|
|
|
echo generate_box_close();
|
|
}
|
|
// End bill permissions
|
|
|
|
// Start group permissions
|
|
if (OBSERVIUM_EDITION !== 'community') {
|
|
echo generate_box_open(array('header-border' => TRUE, 'title' => 'Group Permissions'));
|
|
|
|
if (!safe_empty($user_permissions['group'])) {
|
|
echo('<table class="'.OBS_CLASS_TABLE.'">' . PHP_EOL);
|
|
|
|
foreach ($user_permissions['group'] as $group_id => $status) {
|
|
$group = get_group_by_id($group_id);
|
|
|
|
echo('<tr><td style="width: 1px;"></td>
|
|
<td style="overflow: hidden;"><i class="'.$config['entities'][$group['entity_type']]['icon'].'"></i> '.generate_entity_link('group', $group).'
|
|
<small>' . $group['group_descr'] . '</small></td>
|
|
<td width="25">');
|
|
|
|
$form = array('type' => 'simple',
|
|
//'submit_by_key' => TRUE,
|
|
//'url' => generate_url($vars)
|
|
);
|
|
// Elements
|
|
$form['row'][0]['auth_secret'] = array(
|
|
'type' => 'hidden',
|
|
'value' => $_SESSION['auth_secret']);
|
|
$form['row'][0]['entity_id'] = array('type' => 'hidden',
|
|
'value' => $group['group_id']);
|
|
$form['row'][0]['entity_type'] = array('type' => 'hidden',
|
|
'value' => 'group');
|
|
$form['row'][0]['submit'] = array('type' => 'submit',
|
|
'name' => ' ',
|
|
'class' => 'btn-danger btn-mini',
|
|
'icon' => 'icon-trash',
|
|
'value' => 'user_perm_del');
|
|
print_form($form); unset($form);
|
|
|
|
echo('</td>
|
|
</tr>');
|
|
}
|
|
echo('</table>' . PHP_EOL);
|
|
|
|
} else {
|
|
echo('<p class="text-center text-warning bg-warning" style="padding: 10px; margin: 0px;"><strong>This user currently has no permitted groups</strong></p>');
|
|
//print_warning("This user currently has no permitted groups");
|
|
}
|
|
|
|
// Groups
|
|
$permissions_list = array_keys((array)$user_permissions['group']);
|
|
|
|
$form = array('type' => 'simple',
|
|
'style' => 'padding: 7px; margin: 0px;',
|
|
//'submit_by_key' => TRUE,
|
|
//'url' => generate_url($vars)
|
|
);
|
|
// Elements
|
|
$form['row'][0]['auth_secret'] = array(
|
|
'type' => 'hidden',
|
|
'value' => $_SESSION['auth_secret']);
|
|
$form['row'][0]['user_id'] = array('type' => 'hidden',
|
|
'value' => $vars['user_id']);
|
|
$form['row'][0]['entity_type'] = array('type' => 'hidden',
|
|
'value' => 'group');
|
|
$form['row'][0]['action'] = array('type' => 'hidden',
|
|
'value' => 'user_perm_add');
|
|
|
|
$form_items['groups'] = array();
|
|
foreach (dbFetchRows("SELECT * FROM `groups`") as $group) {
|
|
if (!in_array($group['group_id'], $permissions_list)) {
|
|
$form_items['groups'][$group['group_id']] = [
|
|
'name' => $group['group_name'],
|
|
'subtext' => $group['group_descr'],
|
|
'icon' => $config['entities'][$group['entity_type']]['icon']
|
|
];
|
|
}
|
|
}
|
|
$form['row'][0]['entity_id'] = array('type' => 'multiselect',
|
|
'name' => 'Permit Group',
|
|
'width' => '250px',
|
|
//'value' => $vars['entity_id'],
|
|
'values' => $form_items['groups']);
|
|
// add button
|
|
$form['row'][0]['Submit'] = array('type' => 'submit',
|
|
'name' => 'Add',
|
|
'icon' => $config['icon']['plus'],
|
|
'right' => TRUE,
|
|
'value' => 'Add');
|
|
print_form($form); unset($form);
|
|
|
|
echo generate_box_close();
|
|
}
|
|
// End group permissions
|
|
|
|
// Start device permissions
|
|
echo generate_box_open(array('header-border' => TRUE, 'title' => 'Device Permissions'));
|
|
|
|
$user_permissions_devices = !safe_empty($user_permissions['device']);
|
|
if ($user_permissions_devices) {
|
|
echo('<table class="'.OBS_CLASS_TABLE.'">' . PHP_EOL);
|
|
|
|
foreach ($user_permissions['device'] as $device_id => $status) {
|
|
$device = device_by_id_cache($device_id);
|
|
|
|
echo('<tr><td style="width: 1px;"></td>
|
|
<td style="overflow: hidden;"><i class="'.$config['entities']['device']['icon'].'"></i> '.generate_device_link($device).'
|
|
<small>' . $device['location'] . '</small></td>
|
|
<td width="25">');
|
|
|
|
$form = array('type' => 'simple',
|
|
//'submit_by_key' => TRUE,
|
|
//'url' => generate_url($vars)
|
|
);
|
|
// Elements
|
|
$form['row'][0]['auth_secret'] = array(
|
|
'type' => 'hidden',
|
|
'value' => $_SESSION['auth_secret']);
|
|
$form['row'][0]['entity_id'] = array('type' => 'hidden',
|
|
'value' => $device['device_id']);
|
|
$form['row'][0]['entity_type'] = array('type' => 'hidden',
|
|
'value' => 'device');
|
|
$form['row'][0]['submit'] = array('type' => 'submit',
|
|
'name' => ' ',
|
|
'class' => 'btn-danger btn-mini',
|
|
'icon' => 'icon-trash',
|
|
'value' => 'user_perm_del');
|
|
print_form($form); unset($form);
|
|
|
|
echo('</td>
|
|
</tr>');
|
|
}
|
|
echo('</table>' . PHP_EOL);
|
|
|
|
} else {
|
|
echo('<p class="text-center text-warning bg-warning" style="padding: 10px; margin: 0px;"><strong>This user currently has no permitted devices</strong></p>');
|
|
//print_warning("This user currently has no permitted devices");
|
|
}
|
|
|
|
// Devices
|
|
$permissions_list = array_keys((array)$user_permissions['device']);
|
|
|
|
// Display devices this user doesn't have Permissions to
|
|
$form = array('type' => 'simple',
|
|
'style' => 'padding: 7px; margin: 0px;',
|
|
//'submit_by_key' => TRUE,
|
|
//'url' => generate_url($vars)
|
|
);
|
|
// Elements
|
|
$form['row'][0]['auth_secret'] = array(
|
|
'type' => 'hidden',
|
|
'value' => $_SESSION['auth_secret']);
|
|
$form['row'][0]['user_id'] = array('type' => 'hidden',
|
|
'value' => $vars['user_id']);
|
|
$form['row'][0]['entity_type'] = array('type' => 'hidden',
|
|
'value' => 'device');
|
|
$form['row'][0]['action'] = array('type' => 'hidden',
|
|
'value' => 'user_perm_add');
|
|
|
|
$form_items['devices'] = array();
|
|
foreach (dbFetchRows("SELECT * FROM `devices` ORDER BY `hostname`") as $device) {
|
|
if (!in_array($device['device_id'], $permissions_list)) {
|
|
//humanize_device($device);
|
|
$form_items['devices'][$device['device_id']] = [
|
|
'name' => $device['hostname'],
|
|
'subtext' => $device['location'],
|
|
//'class' => $device['html_row_class'],
|
|
'icon' => $config['entities']['device']['icon']
|
|
];
|
|
}
|
|
}
|
|
$form['row'][0]['entity_id'] = array('type' => 'multiselect',
|
|
'name' => 'Permit Device',
|
|
'width' => '250px',
|
|
//'value' => $vars['entity_id'],
|
|
'values' => $form_items['devices']);
|
|
// add button
|
|
$form['row'][0]['Submit'] = array('type' => 'submit',
|
|
'name' => 'Add',
|
|
'icon' => $config['icon']['plus'],
|
|
'right' => TRUE,
|
|
'value' => 'Add');
|
|
print_form($form); unset($form);
|
|
|
|
echo generate_box_close();
|
|
// End device permissions
|
|
|
|
// Start port permissions
|
|
echo generate_box_open(array('header-border' => TRUE, 'title' => 'Port Permissions'));
|
|
if (!safe_empty($user_permissions['port'])) {
|
|
echo('<table class="'.OBS_CLASS_TABLE.'">' . PHP_EOL);
|
|
|
|
foreach (array_keys($user_permissions['port']) as $entity_id) {
|
|
$port = get_port_by_id($entity_id);
|
|
$device = device_by_id_cache($port['device_id']);
|
|
|
|
echo('<tr><td style="width: 1px;"></td>
|
|
<td style="width: 200px; overflow: hidden;"><i class="'.$config['entities']['device']['icon'].'"></i> '.generate_entity_link('device', $device).'</td>
|
|
<td style="overflow: hidden;"><i class="'.$config['entities']['port']['icon'].'"></i> '.generate_entity_link('port', $port).'
|
|
<small>' . $port['ifDescr'] . '</small></td>
|
|
<td width="25">');
|
|
|
|
$form = array('type' => 'simple',
|
|
//'submit_by_key' => TRUE,
|
|
//'url' => generate_url($vars)
|
|
);
|
|
// Elements
|
|
$form['row'][0]['auth_secret'] = array(
|
|
'type' => 'hidden',
|
|
'value' => $_SESSION['auth_secret']);
|
|
$form['row'][0]['entity_id'] = array('type' => 'hidden',
|
|
'value' => $port['port_id']);
|
|
$form['row'][0]['entity_type'] = array('type' => 'hidden',
|
|
'value' => 'port');
|
|
$form['row'][0]['submit'] = array('type' => 'submit',
|
|
'name' => '',
|
|
'class' => 'btn-danger btn-mini',
|
|
'icon' => 'icon-trash',
|
|
'value' => 'user_perm_del');
|
|
print_form($form); unset($form);
|
|
|
|
echo('</td>
|
|
</tr>');
|
|
}
|
|
echo('</table>' . PHP_EOL);
|
|
|
|
} else {
|
|
echo('<p class="text-center text-warning bg-warning" style="padding: 10px; margin: 0px;"><strong>This user currently has no permitted ports</strong></p>');
|
|
//print_warning('This user currently has no permitted ports');
|
|
}
|
|
|
|
// Ports
|
|
$permissions_list = array_keys((array)$user_permissions['port']);
|
|
|
|
// Display devices this user doesn't have Permissions to
|
|
$form = array('type' => 'simple',
|
|
'style' => 'padding: 7px; margin: 0px;',
|
|
//'submit_by_key' => TRUE,
|
|
//'url' => generate_url($vars)
|
|
);
|
|
// Elements
|
|
$form['row'][0]['auth_secret'] = array(
|
|
'type' => 'hidden',
|
|
'value' => $_SESSION['auth_secret']);
|
|
$form['row'][0]['user_id'] = array('type' => 'hidden',
|
|
'value' => $vars['user_id']);
|
|
$form['row'][0]['entity_type'] = array('type' => 'hidden',
|
|
'value' => 'port');
|
|
$form['row'][0]['action'] = array('type' => 'hidden',
|
|
'value' => 'user_perm_add');
|
|
|
|
$form_items['devices'] = [];
|
|
foreach ($cache['devices']['hostname'] as $hostname => $device_id) {
|
|
if (!$user_permissions_devices || !array_key_exists($device_id, $user_permissions['device'])) {
|
|
$form_items['devices'][$device_id] = $hostname;
|
|
}
|
|
}
|
|
$form['row'][0]['device_id'] = array('type' => 'select',
|
|
'name' => 'Select a device',
|
|
'width' => '150px',
|
|
'onchange' => "getInterfaceList(this, 'port_entity_id')",
|
|
//'value' => $vars['device_id'],
|
|
'values' => $form_items['devices']);
|
|
$form['row'][0]['port_entity_id'] = array('type' => 'multiselect',
|
|
'name' => 'Permit Port',
|
|
'width' => '150px',
|
|
//'value' => $vars['port_entity_id'],
|
|
'values' => array());
|
|
// add button
|
|
$form['row'][0]['Submit'] = array('type' => 'submit',
|
|
'name' => 'Add',
|
|
'icon' => $config['icon']['plus'],
|
|
'right' => TRUE,
|
|
'value' => 'Add');
|
|
print_form($form); unset($form);
|
|
|
|
echo generate_box_close();
|
|
// End port permissions
|
|
|
|
// Start sensor permissions
|
|
echo generate_box_open(array('header-border' => TRUE, 'title' => 'Sensor Permissions'));
|
|
|
|
if (!safe_empty($user_permissions['sensor'])) {
|
|
echo('<table class="'.OBS_CLASS_TABLE.'">' . PHP_EOL);
|
|
|
|
foreach (array_keys($user_permissions['sensor']) as $entity_id) {
|
|
$sensor = get_entity_by_id_cache('sensor', $entity_id);
|
|
$device = device_by_id_cache($sensor['device_id']);
|
|
|
|
echo('<tr><td style="width: 1px;"></td>
|
|
<td style="width: 200px; overflow: hidden;"><i class="'.$config['entities']['device']['icon'].'"></i> '.generate_entity_link('device', $device).'</td>
|
|
<td style="overflow: hidden;"><i class="'.$config['entities']['sensor']['icon'].'"></i> '.generate_entity_link('sensor', $sensor).'
|
|
<td width="25">');
|
|
|
|
$form = array('type' => 'simple',
|
|
//'submit_by_key' => TRUE,
|
|
//'url' => generate_url($vars)
|
|
);
|
|
// Elements
|
|
$form['row'][0]['auth_secret'] = array(
|
|
'type' => 'hidden',
|
|
'value' => $_SESSION['auth_secret']);
|
|
$form['row'][0]['entity_id'] = array('type' => 'hidden',
|
|
'value' => $sensor['sensor_id']);
|
|
$form['row'][0]['entity_type'] = array('type' => 'hidden',
|
|
'value' => 'sensor');
|
|
$form['row'][0]['submit'] = array('type' => 'submit',
|
|
'name' => ' ',
|
|
'class' => 'btn-danger btn-mini',
|
|
'icon' => 'icon-trash',
|
|
'value' => 'user_perm_del');
|
|
print_form($form); unset($form);
|
|
|
|
echo('</td>
|
|
</tr>');
|
|
}
|
|
echo('</table>' . PHP_EOL);
|
|
|
|
} else {
|
|
echo('<p class="text-center text-warning bg-warning" style="padding: 10px; margin: 0px;"><strong>This user currently has no permitted sensors</strong></p>');
|
|
//print_warning('This user currently has no permitted sensors');
|
|
}
|
|
|
|
// Sensors
|
|
$permissions_list = array_keys((array)$user_permissions['sensor']);
|
|
|
|
// Display devices this user doesn't have Permissions to
|
|
$form = array('type' => 'simple',
|
|
'style' => 'padding: 7px; margin: 0px;',
|
|
//'submit_by_key' => TRUE,
|
|
//'url' => generate_url($vars)
|
|
);
|
|
// Elements
|
|
$form['row'][0]['auth_secret'] = array(
|
|
'type' => 'hidden',
|
|
'value' => $_SESSION['auth_secret']);
|
|
$form['row'][0]['user_id'] = array('type' => 'hidden',
|
|
'value' => $vars['user_id']);
|
|
$form['row'][0]['entity_type'] = array('type' => 'hidden',
|
|
'value' => 'sensor');
|
|
$form['row'][0]['action'] = array('type' => 'hidden',
|
|
'value' => 'user_perm_add');
|
|
|
|
// FIXME, limit devices list only with sensors?
|
|
$form_items['devices'] = array();
|
|
foreach ($cache['devices']['hostname'] as $hostname => $device_id) {
|
|
if (!in_array($device_id, $permissions_list)) {
|
|
$form_items['devices'][$device_id] = $hostname;
|
|
}
|
|
}
|
|
$form['row'][0]['device_id'] = array('type' => 'select',
|
|
'name' => 'Select a device',
|
|
'width' => '150px',
|
|
'onchange' => "getEntityList(this, 'sensor_entity_id', 'sensor')",
|
|
//'value' => $vars['device_id'],
|
|
'values' => $form_items['devices']);
|
|
$form['row'][0]['sensor_entity_id'] = array('type' => 'multiselect',
|
|
'name' => 'Permit Sensor',
|
|
'width' => '150px',
|
|
//'value' => $vars['sensor_entity_id'],
|
|
'values' => array());
|
|
// add button
|
|
$form['row'][0]['Submit'] = array('type' => 'submit',
|
|
'name' => 'Add',
|
|
'icon' => $config['icon']['plus'],
|
|
'right' => TRUE,
|
|
'value' => 'Add');
|
|
print_form($form); unset($form);
|
|
|
|
echo generate_box_close();
|
|
// End sensor permissions
|
|
|
|
// End main permissions block
|
|
//echo generate_box_close();
|
|
|
|
?>
|
|
|
|
</div> <!-- right column end -->
|
|
|
|
</div> <!-- main row end -->
|
|
|
|
<?php
|
|
|
|
}
|
|
|
|
} else {
|
|
|
|
//$users = dbFetchRows("SELECT * FROM `users` ORDER BY `username`");
|
|
|
|
if ($count = safe_count($user_list)) {
|
|
pagination($vars, 0, TRUE); // Get default pagesize/pageno
|
|
$pageno = $vars['pageno'];
|
|
$pagesize = $vars['pagesize'];
|
|
$start = $pagesize * $pageno - $pagesize;
|
|
$pagination = $count >= $pagesize;
|
|
if ($pagination) {
|
|
$users = array_slice($user_list, $start, $pagesize);
|
|
echo(pagination($vars, $count));
|
|
} else {
|
|
$users = $user_list;
|
|
}
|
|
|
|
echo(generate_box_open());
|
|
echo('<table class="table table-hover table-condensed">');
|
|
|
|
$cols = array(
|
|
array('', 'class="state-marker"'),
|
|
'user_id' => array('User ID', 'style="width: 80px;"'),
|
|
'user' => 'Username',
|
|
'access' => 'Access',
|
|
'realname' => 'Real Name',
|
|
'email' => 'Email',
|
|
);
|
|
echo(get_table_header($cols));
|
|
|
|
foreach ($users as $user) {
|
|
humanize_user($user);
|
|
|
|
$user['edit_url'] = generate_url(array('page' => 'user_edit', 'user_id' => $user['user_id']));
|
|
|
|
echo('<tr class="'.$user['row_class'].'">');
|
|
echo('<td class="state-marker"></td>');
|
|
echo('<td>'.$user['user_id'].'</td>');
|
|
echo('<td><strong><a href="'.$user['edit_url'].'">'.escape_html($user['username']).'</a></strong></td>');
|
|
//echo('<td><strong>'.$user['level'].'</strong></td>');
|
|
echo('<td><i class="'.$user['icon'].'"></i> <span class="label label-'.$user['label_class'].'">'.$user['level_label'].'</span></td>');
|
|
echo('<td><strong>'.escape_html($user['realname']).'</strong></td>');
|
|
echo('<td><strong>'.escape_html($user['email']).'</strong></td>');
|
|
echo '<td>'.get_type_class_label($user['type'], 'user_type').'</td>';
|
|
|
|
echo('</tr>');
|
|
}
|
|
|
|
echo('</table>');
|
|
echo(generate_box_close());
|
|
|
|
if ($pagination) {
|
|
echo(pagination($vars, $count));
|
|
}
|
|
} else {
|
|
print_warning('There are no users in the database.');
|
|
}
|
|
|
|
}
|
|
|
|
// EOF
|