xref: /dokuwiki/lib/plugins/acl/admin.php (revision 8371b182429166b34bb5c19e080ba219167441ae) 
1<?php
2/**
3 * ACL administration functions
4 *
5 * @license    GPL 2 (http://www.gnu.org/licenses/gpl.html)
6 * @author     Andreas Gohr <andi@splitbrain.org>
7 * @author     Anika Henke <anika@selfthinker.org> (concepts)
8 * @author     Frank Schubert <frank@schokilade.de> (old version)
9 */
10
11/**
12 * All DokuWiki plugins to extend the admin function
13 * need to inherit from this class
14 */
15class admin_plugin_acl extends DokuWiki_Admin_Plugin
16{
17    public $acl = null;
18    protected $ns  = null;
19    /**
20     * The currently selected item, associative array with id and type.
21     * Populated from (in this order):
22     * $_REQUEST['current_ns']
23     * $_REQUEST['current_id']
24     * $ns
25     * $ID
26     */
27    protected $current_item = null;
28    protected $who = '';
29    protected $usersgroups = array();
30    protected $specials = array();
31
32    /**
33     * return prompt for admin menu
34     */
35    public function getMenuText($language)
36    {
37        return $this->getLang('admin_acl');
38    }
39
40    /**
41     * return sort order for position in admin menu
42     */
43    public function getMenuSort()
44    {
45        return 1;
46    }
47
48    /**
49     * handle user request
50     *
51     * Initializes internal vars and handles modifications
52     *
53     * @author Andreas Gohr <andi@splitbrain.org>
54     */
55    public function handle()
56    {
57        global $AUTH_ACL;
58        global $ID;
59        global $auth;
60        global $config_cascade;
61        global $INPUT;
62
63        // fresh 1:1 copy without replacements
64        $AUTH_ACL = file($config_cascade['acl']['default']);
65
66        // namespace given?
67        if ($INPUT->str('ns') == '*') {
68            $this->ns = '*';
69        } else {
70            $this->ns = cleanID($INPUT->str('ns'));
71        }
72
73        if ($INPUT->str('current_ns')) {
74            $this->current_item = array('id' => cleanID($INPUT->str('current_ns')), 'type' => 'd');
75        } elseif ($INPUT->str('current_id')) {
76            $this->current_item = array('id' => cleanID($INPUT->str('current_id')), 'type' => 'f');
77        } elseif ($this->ns) {
78            $this->current_item = array('id' => $this->ns, 'type' => 'd');
79        } else {
80            $this->current_item = array('id' => $ID, 'type' => 'f');
81        }
82
83        // user or group choosen?
84        $who = trim($INPUT->str('acl_w'));
85        if ($INPUT->str('acl_t') == '__g__' && $who) {
86            $this->who = '@'.ltrim($auth->cleanGroup($who), '@');
87        } elseif ($INPUT->str('acl_t') == '__u__' && $who) {
88            $this->who = ltrim($who, '@');
89            if ($this->who != '%USER%' && $this->who != '%GROUP%') { #keep wildcard as is
90                $this->who = $auth->cleanUser($this->who);
91            }
92        } elseif ($INPUT->str('acl_t') &&
93                $INPUT->str('acl_t') != '__u__' &&
94                $INPUT->str('acl_t') != '__g__') {
95            $this->who = $INPUT->str('acl_t');
96        } elseif ($who) {
97            $this->who = $who;
98        }
99
100        // handle modifications
101        if ($INPUT->has('cmd') && checkSecurityToken()) {
102            $cmd = $INPUT->extract('cmd')->str('cmd');
103
104            // scope for modifications
105            if ($this->ns) {
106                if ($this->ns == '*') {
107                    $scope = '*';
108                } else {
109                    $scope = $this->ns.':*';
110                }
111            } else {
112                $scope = $ID;
113            }
114
115            if ($cmd == 'save' && $scope && $this->who && $INPUT->has('acl')) {
116                // handle additions or single modifications
117                $this->deleteACL($scope, $this->who);
118                $this->addOrUpdateACL($scope, $this->who, $INPUT->int('acl'));
119            } elseif ($cmd == 'del' && $scope && $this->who) {
120                // handle single deletions
121                $this->deleteACL($scope, $this->who);
122            } elseif ($cmd == 'update') {
123                $acl = $INPUT->arr('acl');
124
125                // handle update of the whole file
126                foreach ($INPUT->arr('del') as $where => $names) {
127                    // remove all rules marked for deletion
128                    foreach ($names as $who)
129                        unset($acl[$where][$who]);
130                }
131                // prepare lines
132                $lines = array();
133                // keep header
134                foreach ($AUTH_ACL as $line) {
135                    if ($line[0] == '#') {
136                        $lines[] = $line;
137                    } else {
138                        break;
139                    }
140                }
141                // re-add all rules
142                foreach ($acl as $where => $opt) {
143                    foreach ($opt as $who => $perm) {
144                        if ($who[0]=='@') {
145                            if ($who!='@ALL') {
146                                $who = '@'.ltrim($auth->cleanGroup($who), '@');
147                            }
148                        } elseif ($who != '%USER%' && $who != '%GROUP%') { #keep wildcard as is
149                            $who = $auth->cleanUser($who);
150                        }
151                        $who = auth_nameencode($who, true);
152                        $lines[] = "$where\t$who\t$perm\n";
153                    }
154                }
155                // save it
156                io_saveFile($config_cascade['acl']['default'], join('', $lines));
157            }
158
159            // reload ACL config
160            $AUTH_ACL = file($config_cascade['acl']['default']);
161        }
162
163        // initialize ACL array
164        $this->initAclConfig();
165    }
166
167    /**
168     * ACL Output function
169     *
170     * print a table with all significant permissions for the
171     * current id
172     *
173     * @author  Frank Schubert <frank@schokilade.de>
174     * @author  Andreas Gohr <andi@splitbrain.org>
175     */
176    public function html()
177    {
178        echo '<div id="acl_manager">'.NL;
179        echo '<h1>'.$this->getLang('admin_acl').'</h1>'.NL;
180        echo '<div class="level1">'.NL;
181
182        echo '<div id="acl__tree">'.NL;
183        $this->makeExplorer();
184        echo '</div>'.NL;
185
186        echo '<div id="acl__detail">'.NL;
187        $this->printDetail();
188        echo '</div>'.NL;
189        echo '</div>'.NL;
190
191        echo '<div class="clearer"></div>';
192        echo '<h2>'.$this->getLang('current').'</h2>'.NL;
193        echo '<div class="level2">'.NL;
194        $this->printAclTable();
195        echo '</div>'.NL;
196
197        echo '<div class="footnotes"><div class="fn">'.NL;
198        echo '<sup><a id="fn__1" class="fn_bot" href="#fnt__1">1)</a></sup>'.NL;
199        echo '<div class="content">'.$this->getLang('p_include').'</div>';
200        echo '</div></div>';
201
202        echo '</div>'.NL;
203    }
204
205    /**
206     * returns array with set options for building links
207     *
208     * @author Andreas Gohr <andi@splitbrain.org>
209     */
210    protected function getLinkOptions($addopts = null)
211    {
212        $opts = array(
213                    'do'=>'admin',
214                    'page'=>'acl',
215                );
216        if ($this->ns) $opts['ns'] = $this->ns;
217        if ($this->who) $opts['acl_w'] = $this->who;
218
219        if (is_null($addopts)) return $opts;
220        return array_merge($opts, $addopts);
221    }
222
223    /**
224     * Display a tree menu to select a page or namespace
225     *
226     * @author Andreas Gohr <andi@splitbrain.org>
227     */
228    protected function makeExplorer()
229    {
230        global $conf;
231        global $ID;
232        global $lang;
233
234        $ns  = $this->ns;
235        if (empty($ns)) {
236            $ns = dirname(str_replace(':', '/', $ID));
237            if ($ns == '.') $ns ='';
238        } elseif ($ns == '*') {
239            $ns ='';
240        }
241        $ns  = utf8_encodeFN(str_replace(':', '/', $ns));
242
243        $data = $this->makeTree($ns);
244
245        // wrap a list with the root level around the other namespaces
246        array_unshift($data, array( 'level' => 0, 'id' => '*', 'type' => 'd',
247                   'open' =>'true', 'label' => '['.$lang['mediaroot'].']'));
248
249        echo html_buildlist(
250            $data,
251            'acl',
252            array($this, 'makeTreeItem'),
253            array($this, 'makeListItem')
254        );
255    }
256
257    /**
258     * get a combined list of media and page files
259     *
260     * also called via AJAX
261     *
262     * @param string $folder an already converted filesystem folder of the current namespace
263     * @param string $limit limit the search to this folder
264     * @return array
265     */
266    public function makeTree($folder, $limit = '')
267    {
268        global $conf;
269
270        // read tree structure from pages and media
271        $data = array();
272        search($data, $conf['datadir'], 'search_index', array('ns' => $folder), $limit);
273        $media = array();
274        search($media, $conf['mediadir'], 'search_index', array('ns' => $folder, 'nofiles' => true), $limit);
275        $data = array_merge($data, $media);
276        unset($media);
277
278        // combine by sorting and removing duplicates
279        usort($data, array($this, 'treeSort'));
280        $count = count($data);
281        if ($count>0) for ($i=1; $i<$count; $i++) {
282            if ($data[$i-1]['id'] == $data[$i]['id'] && $data[$i-1]['type'] == $data[$i]['type']) {
283                unset($data[$i]);
284                $i++;  // duplicate found, next $i can't be a duplicate, so skip forward one
285            }
286        }
287        return $data;
288    }
289
290    /**
291     * usort callback
292     *
293     * Sorts the combined trees of media and page files
294     */
295    public function treeSort($a, $b)
296    {
297        // handle the trivial cases first
298        if ($a['id'] == '') return -1;
299        if ($b['id'] == '') return 1;
300        // split up the id into parts
301        $a_ids = explode(':', $a['id']);
302        $b_ids = explode(':', $b['id']);
303        // now loop through the parts
304        while (count($a_ids) && count($b_ids)) {
305            // compare each level from upper to lower
306            // until a non-equal component is found
307            $cur_result = intl_strcmp(array_shift($a_ids), array_shift($b_ids));
308            if ($cur_result) {
309                // if one of the components is the last component and is a file
310                // and the other one is either of a deeper level or a directory,
311                // the file has to come after the deeper level or directory
312                if (empty($a_ids) && $a['type'] == 'f' && (count($b_ids) || $b['type'] == 'd')) return 1;
313                if (empty($b_ids) && $b['type'] == 'f' && (count($a_ids) || $a['type'] == 'd')) return -1;
314                return $cur_result;
315            }
316        }
317        // The two ids seem to be equal. One of them might however refer
318        // to a page, one to a namespace, the namespace needs to be first.
319        if (empty($a_ids) && empty($b_ids)) {
320            if ($a['type'] == $b['type']) return 0;
321            if ($a['type'] == 'f') return 1;
322            return -1;
323        }
324        // Now the empty part is either a page in the parent namespace
325        // that obviously needs to be after the namespace
326        // Or it is the namespace that contains the other part and should be
327        // before that other part.
328        if (empty($a_ids)) return ($a['type'] == 'd') ? -1 : 1;
329        if (empty($b_ids)) return ($b['type'] == 'd') ? 1 : -1;
330        return 0; //shouldn't happen
331    }
332
333    /**
334     * Display the current ACL for selected where/who combination with
335     * selectors and modification form
336     *
337     * @author Andreas Gohr <andi@splitbrain.org>
338     */
339    protected function printDetail()
340    {
341        global $ID;
342
343        echo '<form action="'.wl().'" method="post" accept-charset="utf-8"><div class="no">'.NL;
344
345        echo '<div id="acl__user">';
346        echo $this->getLang('acl_perms').' ';
347        $inl =  $this->makeSelect();
348        echo '<input type="text" name="acl_w" class="edit" value="'.(($inl)?'':hsc(ltrim($this->who, '@'))).'" />'.NL;
349        echo '<button type="submit">'.$this->getLang('btn_select').'</button>'.NL;
350        echo '</div>'.NL;
351
352        echo '<div id="acl__info">';
353        $this->printInfo();
354        echo '</div>';
355
356        echo '<input type="hidden" name="ns" value="'.hsc($this->ns).'" />'.NL;
357        echo '<input type="hidden" name="id" value="'.hsc($ID).'" />'.NL;
358        echo '<input type="hidden" name="do" value="admin" />'.NL;
359        echo '<input type="hidden" name="page" value="acl" />'.NL;
360        echo '<input type="hidden" name="sectok" value="'.getSecurityToken().'" />'.NL;
361        echo '</div></form>'.NL;
362    }
363
364    /**
365     * Print info and editor
366     *
367     * also loaded via Ajax
368     */
369    public function printInfo()
370    {
371        global $ID;
372
373        if ($this->who) {
374            $current = $this->getExactPermisson();
375
376            // explain current permissions
377            $this->printExplanation($current);
378            // load editor
379            $this->printAclEditor($current);
380        } else {
381            echo '<p>';
382            if ($this->ns) {
383                printf($this->getLang('p_choose_ns'), hsc($this->ns));
384            } else {
385                printf($this->getLang('p_choose_id'), hsc($ID));
386            }
387            echo '</p>';
388
389            echo $this->locale_xhtml('help');
390        }
391    }
392
393    /**
394     * Display the ACL editor
395     *
396     * @author Andreas Gohr <andi@splitbrain.org>
397     */
398    protected function printAclEditor($current)
399    {
400        global $lang;
401
402        echo '<fieldset>';
403        if (is_null($current)) {
404            echo '<legend>'.$this->getLang('acl_new').'</legend>';
405        } else {
406            echo '<legend>'.$this->getLang('acl_mod').'</legend>';
407        }
408
409        echo $this->makeCheckboxes($current, empty($this->ns), 'acl');
410
411        if (is_null($current)) {
412            echo '<button type="submit" name="cmd[save]">'.$lang['btn_save'].'</button>'.NL;
413        } else {
414            echo '<button type="submit" name="cmd[save]">'.$lang['btn_update'].'</button>'.NL;
415            echo '<button type="submit" name="cmd[del]">'.$lang['btn_delete'].'</button>'.NL;
416        }
417
418        echo '</fieldset>';
419    }
420
421    /**
422     * Explain the currently set permissions in plain english/$lang
423     *
424     * @author Andreas Gohr <andi@splitbrain.org>
425     */
426    protected function printExplanation($current)
427    {
428        global $ID;
429        global $auth;
430
431        $who = $this->who;
432        $ns  = $this->ns;
433
434        // prepare where to check
435        if ($ns) {
436            if ($ns == '*') {
437                $check='*';
438            } else {
439                $check=$ns.':*';
440            }
441        } else {
442            $check = $ID;
443        }
444
445        // prepare who to check
446        if ($who[0] == '@') {
447            $user   = '';
448            $groups = array(ltrim($who, '@'));
449        } else {
450            $user = $who;
451            $info = $auth->getUserData($user);
452            if ($info === false) {
453                $groups = array();
454            } else {
455                $groups = $info['grps'];
456            }
457        }
458
459        // check the permissions
460        $perm = auth_aclcheck($check, $user, $groups);
461
462        // build array of named permissions
463        $names = array();
464        if ($perm) {
465            if ($ns) {
466                if ($perm >= AUTH_DELETE) $names[] = $this->getLang('acl_perm16');
467                if ($perm >= AUTH_UPLOAD) $names[] = $this->getLang('acl_perm8');
468                if ($perm >= AUTH_CREATE) $names[] = $this->getLang('acl_perm4');
469            }
470            if ($perm >= AUTH_EDIT) $names[] = $this->getLang('acl_perm2');
471            if ($perm >= AUTH_READ) $names[] = $this->getLang('acl_perm1');
472            $names = array_reverse($names);
473        } else {
474            $names[] = $this->getLang('acl_perm0');
475        }
476
477        // print permission explanation
478        echo '<p>';
479        if ($user) {
480            if ($ns) {
481                printf($this->getLang('p_user_ns'), hsc($who), hsc($ns), join(', ', $names));
482            } else {
483                printf($this->getLang('p_user_id'), hsc($who), hsc($ID), join(', ', $names));
484            }
485        } else {
486            if ($ns) {
487                printf($this->getLang('p_group_ns'), hsc(ltrim($who, '@')), hsc($ns), join(', ', $names));
488            } else {
489                printf($this->getLang('p_group_id'), hsc(ltrim($who, '@')), hsc($ID), join(', ', $names));
490            }
491        }
492        echo '</p>';
493
494        // add note if admin
495        if ($perm == AUTH_ADMIN) {
496            echo '<p>'.$this->getLang('p_isadmin').'</p>';
497        } elseif (is_null($current)) {
498            echo '<p>'.$this->getLang('p_inherited').'</p>';
499        }
500    }
501
502
503    /**
504     * Item formatter for the tree view
505     *
506     * User function for html_buildlist()
507     *
508     * @author Andreas Gohr <andi@splitbrain.org>
509     */
510    public function makeTreeItem($item)
511    {
512        $ret = '';
513        // what to display
514        if (!empty($item['label'])) {
515            $base = $item['label'];
516        } else {
517            $base = ':'.$item['id'];
518            $base = substr($base, strrpos($base, ':')+1);
519        }
520
521        // highlight?
522        if (($item['type']== $this->current_item['type'] && $item['id'] == $this->current_item['id'])) {
523            $cl = ' cur';
524        } else {
525            $cl = '';
526        }
527
528        // namespace or page?
529        if ($item['type']=='d') {
530            if ($item['open']) {
531                $img   = DOKU_BASE.'lib/images/minus.gif';
532                $alt   = '−';
533            } else {
534                $img   = DOKU_BASE.'lib/images/plus.gif';
535                $alt   = '+';
536            }
537            $ret .= '<img src="'.$img.'" alt="'.$alt.'" />';
538            $ret .= '<a href="'.
539                wl('', $this->getLinkOptions(array('ns'=> $item['id'], 'sectok'=>getSecurityToken()))).
540                '" class="idx_dir'.$cl.'">';
541            $ret .= $base;
542            $ret .= '</a>';
543        } else {
544            $ret .= '<a href="'.
545                wl('', $this->getLinkOptions(array('id'=> $item['id'], 'ns'=>'', 'sectok'=>getSecurityToken()))).
546                '" class="wikilink1'.$cl.'">';
547            $ret .= noNS($item['id']);
548            $ret .= '</a>';
549        }
550        return $ret;
551    }
552
553    /**
554     * List Item formatter
555     *
556     * @param array $item
557     * @return string
558     */
559    public function makeListItem($item)
560    {
561        return '<li class="level' . $item['level'] . ' ' .
562               ($item['open'] ? 'open' : 'closed') . '">';
563    }
564
565
566    /**
567     * Get current ACL settings as multidim array
568     *
569     * @author Andreas Gohr <andi@splitbrain.org>
570     */
571    public function initAclConfig()
572    {
573        global $AUTH_ACL;
574        global $conf;
575        $acl_config=array();
576        $usersgroups = array();
577
578        // get special users and groups
579        $this->specials[] = '@ALL';
580        $this->specials[] = '@'.$conf['defaultgroup'];
581        if ($conf['manager'] != '!!not set!!') {
582            $this->specials = array_merge(
583                $this->specials,
584                array_map(
585                    'trim',
586                    explode(',', $conf['manager'])
587                )
588            );
589        }
590        $this->specials = array_filter($this->specials);
591        $this->specials = array_unique($this->specials);
592        intl_sort($this->specials);
593
594        foreach ($AUTH_ACL as $line) {
595            $line = trim(preg_replace('/#.*$/', '', $line)); //ignore comments
596            if (!$line) continue;
597
598            $acl = preg_split('/[ \t]+/', $line);
599            //0 is pagename, 1 is user, 2 is acl
600
601            $acl[1] = rawurldecode($acl[1]);
602            $acl_config[$acl[0]][$acl[1]] = $acl[2];
603
604            // store non-special users and groups for later selection dialog
605            $ug = $acl[1];
606            if (in_array($ug, $this->specials)) continue;
607            $usersgroups[] = $ug;
608        }
609
610        $usersgroups = array_unique($usersgroups);
611        intl_sort($usersgroups);
612        intl_ksort($acl_config);
613        foreach (array_keys($acl_config) as $pagename) intl_ksort($acl_config[$pagename]);
614
615        $this->acl = $acl_config;
616        $this->usersgroups = $usersgroups;
617    }
618
619    /**
620     * Display all currently set permissions in a table
621     *
622     * @author Andreas Gohr <andi@splitbrain.org>
623     */
624    protected function printAclTable()
625    {
626        global $lang;
627        global $ID;
628
629        echo '<form action="'.wl().'" method="post" accept-charset="utf-8"><div class="no">'.NL;
630        if ($this->ns) {
631            echo '<input type="hidden" name="ns" value="'.hsc($this->ns).'" />'.NL;
632        } else {
633            echo '<input type="hidden" name="id" value="'.hsc($ID).'" />'.NL;
634        }
635        echo '<input type="hidden" name="acl_w" value="'.hsc($this->who).'" />'.NL;
636        echo '<input type="hidden" name="do" value="admin" />'.NL;
637        echo '<input type="hidden" name="page" value="acl" />'.NL;
638        echo '<input type="hidden" name="sectok" value="'.getSecurityToken().'" />'.NL;
639        echo '<div class="table">';
640        echo '<table class="inline">';
641        echo '<tr>';
642        echo '<th>'.$this->getLang('where').'</th>';
643        echo '<th>'.$this->getLang('who').'</th>';
644        echo '<th>'.$this->getLang('perm').'<sup><a id="fnt__1" class="fn_top" href="#fn__1">1)</a></sup></th>';
645        echo '<th>'.$lang['btn_delete'].'</th>';
646        echo '</tr>';
647        foreach ($this->acl as $where => $set) {
648            foreach ($set as $who => $perm) {
649                echo '<tr>';
650                echo '<td>';
651                if (substr($where, -1) == '*') {
652                    echo '<span class="aclns">'.hsc($where).'</span>';
653                    $ispage = false;
654                } else {
655                    echo '<span class="aclpage">'.hsc($where).'</span>';
656                    $ispage = true;
657                }
658                echo '</td>';
659
660                echo '<td>';
661                if ($who[0] == '@') {
662                    echo '<span class="aclgroup">'.hsc($who).'</span>';
663                } else {
664                    echo '<span class="acluser">'.hsc($who).'</span>';
665                }
666                echo '</td>';
667
668                echo '<td>';
669                echo $this->makeCheckboxes($perm, $ispage, 'acl['.$where.']['.$who.']');
670                echo '</td>';
671
672                echo '<td class="check">';
673                echo '<input type="checkbox" name="del['.hsc($where).'][]" value="'.hsc($who).'" />';
674                echo '</td>';
675                echo '</tr>';
676            }
677        }
678
679        echo '<tr>';
680        echo '<th class="action" colspan="4">';
681        echo '<button type="submit" name="cmd[update]">'.$lang['btn_update'].'</button>';
682        echo '</th>';
683        echo '</tr>';
684        echo '</table>';
685        echo '</div>';
686        echo '</div></form>'.NL;
687    }
688
689    /**
690     * Returns the permission which were set for exactly the given user/group
691     * and page/namespace. Returns null if no exact match is available
692     *
693     * @author Andreas Gohr <andi@splitbrain.org>
694     */
695    protected function getExactPermisson()
696    {
697        global $ID;
698        if ($this->ns) {
699            if ($this->ns == '*') {
700                $check = '*';
701            } else {
702                $check = $this->ns.':*';
703            }
704        } else {
705            $check = $ID;
706        }
707
708        if (isset($this->acl[$check][$this->who])) {
709            return $this->acl[$check][$this->who];
710        } else {
711            return null;
712        }
713    }
714
715    /**
716     * adds new acl-entry to conf/acl.auth.php
717     *
718     * @author  Frank Schubert <frank@schokilade.de>
719     */
720    public function addOrUpdateACL($acl_scope, $acl_user, $acl_level)
721    {
722        global $config_cascade;
723
724        // first make sure we won't end up with 2 lines matching this user and scope. See issue #1115
725        $this->deleteACL($acl_scope, $acl_user);
726        $acl_user = auth_nameencode($acl_user, true);
727
728        // max level for pagenames is edit
729        if (strpos($acl_scope, '*') === false) {
730            if ($acl_level > AUTH_EDIT) $acl_level = AUTH_EDIT;
731        }
732
733        $new_acl = "$acl_scope\t$acl_user\t$acl_level\n";
734
735        return io_saveFile($config_cascade['acl']['default'], $new_acl, true);
736    }
737
738    /**
739     * remove acl-entry from conf/acl.auth.php
740     *
741     * @author  Frank Schubert <frank@schokilade.de>
742     */
743    public function deleteACL($acl_scope, $acl_user)
744    {
745        global $config_cascade;
746        $acl_user = auth_nameencode($acl_user, true);
747
748        $acl_pattern = '^'.preg_quote($acl_scope, '/').'[ \t]+'.$acl_user.'[ \t]+[0-8].*$';
749
750        return io_deleteFromFile($config_cascade['acl']['default'], "/$acl_pattern/", true);
751    }
752
753    /**
754     * print the permission radio boxes
755     *
756     * @author  Frank Schubert <frank@schokilade.de>
757     * @author  Andreas Gohr <andi@splitbrain.org>
758     */
759    protected function makeCheckboxes($setperm, $ispage, $name)
760    {
761        global $lang;
762
763        static $label = 0; //number labels
764        $ret = '';
765
766        if ($ispage && $setperm > AUTH_EDIT) $setperm = AUTH_EDIT;
767
768        foreach (array(AUTH_NONE,AUTH_READ,AUTH_EDIT,AUTH_CREATE,AUTH_UPLOAD,AUTH_DELETE) as $perm) {
769            $label += 1;
770
771            //general checkbox attributes
772            $atts = array( 'type'  => 'radio',
773                           'id'    => 'pbox'.$label,
774                           'name'  => $name,
775                           'value' => $perm );
776            //dynamic attributes
777            if (!is_null($setperm) && $setperm == $perm) $atts['checked']  = 'checked';
778            if ($ispage && $perm > AUTH_EDIT) {
779                $atts['disabled'] = 'disabled';
780                $class = ' class="disabled"';
781            } else {
782                $class = '';
783            }
784
785            //build code
786            $ret .= '<label for="pbox'.$label.'"'.$class.'>';
787            $ret .= '<input '.buildAttributes($atts).' />&#160;';
788            $ret .= $this->getLang('acl_perm'.$perm);
789            $ret .= '</label>'.NL;
790        }
791        return $ret;
792    }
793
794    /**
795     * Print a user/group selector (reusing already used users and groups)
796     *
797     * @author  Andreas Gohr <andi@splitbrain.org>
798     */
799    protected function makeSelect()
800    {
801        $inlist = false;
802        $usel = '';
803        $gsel = '';
804
805        if ($this->who &&
806           !in_array($this->who, $this->usersgroups) &&
807           !in_array($this->who, $this->specials)) {
808            if ($this->who[0] == '@') {
809                $gsel = ' selected="selected"';
810            } else {
811                $usel = ' selected="selected"';
812            }
813        } else {
814            $inlist = true;
815        }
816
817        echo '<select name="acl_t" class="edit">'.NL;
818        echo '  <option value="__g__" class="aclgroup"'.$gsel.'>'.$this->getLang('acl_group').'</option>'.NL;
819        echo '  <option value="__u__"  class="acluser"'.$usel.'>'.$this->getLang('acl_user').'</option>'.NL;
820        if (!empty($this->specials)) {
821            echo '  <optgroup label="&#160;">'.NL;
822            foreach ($this->specials as $ug) {
823                if ($ug == $this->who) {
824                    $sel    = ' selected="selected"';
825                    $inlist = true;
826                } else {
827                    $sel = '';
828                }
829
830                if ($ug[0] == '@') {
831                        echo '  <option value="'.hsc($ug).'" class="aclgroup"'.$sel.'>'.hsc($ug).'</option>'.NL;
832                } else {
833                        echo '  <option value="'.hsc($ug).'" class="acluser"'.$sel.'>'.hsc($ug).'</option>'.NL;
834                }
835            }
836            echo '  </optgroup>'.NL;
837        }
838        if (!empty($this->usersgroups)) {
839            echo '  <optgroup label="&#160;">'.NL;
840            foreach ($this->usersgroups as $ug) {
841                if ($ug == $this->who) {
842                    $sel    = ' selected="selected"';
843                    $inlist = true;
844                } else {
845                    $sel = '';
846                }
847
848                if ($ug[0] == '@') {
849                        echo '  <option value="'.hsc($ug).'" class="aclgroup"'.$sel.'>'.hsc($ug).'</option>'.NL;
850                } else {
851                        echo '  <option value="'.hsc($ug).'" class="acluser"'.$sel.'>'.hsc($ug).'</option>'.NL;
852                }
853            }
854            echo '  </optgroup>'.NL;
855        }
856        echo '</select>'.NL;
857        return $inlist;
858    }
859}
860