1<?php 2/** 3 * AJAX call handler for ACL plugin 4 * 5 * @license GPL 2 (http://www.gnu.org/licenses/gpl.html) 6 * @author Andreas Gohr <andi@splitbrain.org> 7 */ 8 9/** 10 * Register handler 11 */ 12class action_plugin_acl extends DokuWiki_Action_Plugin 13{ 14 15 /** 16 * Registers a callback function for a given event 17 * 18 * @param Doku_Event_Handler $controller DokuWiki's event controller object 19 * @return void 20 */ 21 public function register(Doku_Event_Handler $controller) 22 { 23 24 $controller->register_hook('AJAX_CALL_UNKNOWN', 'BEFORE', $this, 'handleAjaxCallAcl'); 25 } 26 27 /** 28 * AJAX call handler for ACL plugin 29 * 30 * @param Doku_Event $event event object by reference 31 * @param mixed $param empty 32 * @return void 33 */ 34 35 public function handleAjaxCallAcl(Doku_Event $event, $param) 36 { 37 if ($event->data !== 'plugin_acl') { 38 return; 39 } 40 $event->stopPropagation(); 41 $event->preventDefault(); 42 43 global $ID; 44 global $INPUT; 45 46 if (!auth_isadmin()) { 47 echo 'for admins only'; 48 return; 49 } 50 if (!checkSecurityToken()) { 51 echo 'CRSF Attack'; 52 return; 53 } 54 55 $ID = getID(); 56 57 /** @var $acl admin_plugin_acl */ 58 $acl = plugin_load('admin', 'acl'); 59 $acl->handle(); 60 61 $ajax = $INPUT->str('ajax'); 62 header('Content-Type: text/html; charset=utf-8'); 63 64 if ($ajax == 'info') { 65 $acl->printInfo(); 66 } elseif ($ajax == 'tree') { 67 $ns = $INPUT->str('ns'); 68 if ($ns == '*') { 69 $ns = ''; 70 } 71 $ns = cleanID($ns); 72 $lvl = count(explode(':', $ns)); 73 $ns = utf8_encodeFN(str_replace(':', '/', $ns)); 74 75 $data = $acl->makeTree($ns, $ns); 76 77 foreach (array_keys($data) as $item) { 78 $data[$item]['level'] = $lvl + 1; 79 } 80 echo html_buildlist( 81 $data, 82 'acl', 83 array($acl, 'makeTreeItem'), 84 array($acl, 'makeListItem') 85 ); 86 } 87 } 88} 89