xref: /dokuwiki/lib/plugins/acl/action.php (revision a4e3d55680f367e5fd37b50b16ebe23ebac3d20c) 
1<?php
2/**
3 * AJAX call handler for ACL plugin
4 *
5 * @license    GPL 2 (http://www.gnu.org/licenses/gpl.html)
6 * @author     Andreas Gohr <andi@splitbrain.org>
7 */
8
9/**
10 * Register handler
11 */
12class action_plugin_acl extends DokuWiki_Action_Plugin
13{
14
15    /**
16     * Registers a callback function for a given event
17     *
18     * @param Doku_Event_Handler $controller DokuWiki's event controller object
19     * @return void
20     */
21    public function register(Doku_Event_Handler $controller)
22    {
23
24        $controller->register_hook('AJAX_CALL_UNKNOWN', 'BEFORE', $this, 'handleAjaxCallAcl');
25    }
26
27    /**
28     * AJAX call handler for ACL plugin
29     *
30     * @param Doku_Event $event  event object by reference
31     * @param mixed $param  empty
32     * @return void
33     */
34
35    public function handleAjaxCallAcl(Doku_Event $event, $param)
36    {
37        if ($event->data !== 'plugin_acl') {
38            return;
39        }
40        $event->stopPropagation();
41        $event->preventDefault();
42
43        global $ID;
44        global $INPUT;
45
46        if (!auth_isadmin()) {
47            echo 'for admins only';
48            return;
49        }
50        if (!checkSecurityToken()) {
51            echo 'CRSF Attack';
52            return;
53        }
54
55        $ID = getID();
56
57        /** @var $acl admin_plugin_acl */
58        $acl = plugin_load('admin', 'acl');
59        $acl->handle();
60
61        $ajax = $INPUT->str('ajax');
62        header('Content-Type: text/html; charset=utf-8');
63
64        if ($ajax == 'info') {
65            $acl->printInfo();
66        } elseif ($ajax == 'tree') {
67            $ns = $INPUT->str('ns');
68            if ($ns == '*') {
69                $ns = '';
70            }
71            $ns = cleanID($ns);
72            $lvl = count(explode(':', $ns));
73            $ns = utf8_encodeFN(str_replace(':', '/', $ns));
74
75            $data = $acl->makeTree($ns, $ns);
76
77            foreach (array_keys($data) as $item) {
78                $data[$item]['level'] = $lvl + 1;
79            }
80            echo html_buildlist(
81                $data,
82                'acl',
83                array($acl, 'makeTreeItem'),
84                array($acl, 'makeListItem')
85            );
86        }
87    }
88}
89