303 lines
10 KiB
PHP
303 lines
10 KiB
PHP
<?php
|
|
/* Icinga Web 2 | (c) 2013-2015 Icinga Development Team | GPLv2+ */
|
|
|
|
use \Exception;
|
|
use Icinga\Application\Logger;
|
|
use Icinga\Exception\ConfigurationError;
|
|
use Icinga\Forms\Config\User\CreateMembershipForm;
|
|
use Icinga\Forms\Config\User\UserForm;
|
|
use Icinga\Data\DataArray\ArrayDatasource;
|
|
use Icinga\User;
|
|
use Icinga\Web\Controller\AuthBackendController;
|
|
use Icinga\Web\Form;
|
|
use Icinga\Web\Notification;
|
|
use Icinga\Web\Url;
|
|
use Icinga\Web\Widget;
|
|
|
|
class UserController extends AuthBackendController
|
|
{
|
|
/**
|
|
* Redirect to this controller's list action
|
|
*/
|
|
public function indexAction()
|
|
{
|
|
$this->redirectNow('user/list');
|
|
}
|
|
|
|
/**
|
|
* List all users of a single backend
|
|
*/
|
|
public function listAction()
|
|
{
|
|
$this->assertPermission('config/application/users/show');
|
|
$backendNames = array_map(
|
|
function ($b) { return $b->getName(); },
|
|
$this->loadUserBackends('Icinga\Data\Selectable')
|
|
);
|
|
$this->view->backendSelection = new Form();
|
|
$this->view->backendSelection->setAttrib('class', 'backend-selection');
|
|
$this->view->backendSelection->setUidDisabled();
|
|
$this->view->backendSelection->setMethod('GET');
|
|
$this->view->backendSelection->setTokenDisabled();
|
|
$this->view->backendSelection->addElement(
|
|
'select',
|
|
'backend',
|
|
array(
|
|
'autosubmit' => true,
|
|
'label' => $this->translate('Authentication Backend'),
|
|
'multiOptions' => array_combine($backendNames, $backendNames),
|
|
'value' => $this->params->get('backend')
|
|
)
|
|
);
|
|
|
|
$backend = $this->getUserBackend($this->params->get('backend'));
|
|
if ($backend === null) {
|
|
$this->view->backend = null;
|
|
return;
|
|
}
|
|
|
|
$query = $backend->select(array('user_name'));
|
|
$filterEditor = Widget::create('filterEditor')
|
|
->setQuery($query)
|
|
->preserveParams('limit', 'sort', 'dir', 'view', 'backend')
|
|
->ignoreParams('page')
|
|
->handleRequest($this->getRequest());
|
|
$query->applyFilter($filterEditor->getFilter());
|
|
$this->setupFilterControl($filterEditor);
|
|
|
|
$this->view->users = $query;
|
|
$this->view->backend = $backend;
|
|
$this->createListTabs()->activate('user/list');
|
|
|
|
$this->setupPaginationControl($query);
|
|
$this->setupLimitControl();
|
|
$this->setupSortControl(
|
|
array(
|
|
'user_name' => $this->translate('Username'),
|
|
'is_active' => $this->translate('Active'),
|
|
'created_at' => $this->translate('Created at'),
|
|
'last_modified' => $this->translate('Last modified')
|
|
),
|
|
$query
|
|
);
|
|
}
|
|
|
|
/**
|
|
* Show a user
|
|
*/
|
|
public function showAction()
|
|
{
|
|
$this->assertPermission('config/application/users/show');
|
|
$userName = $this->params->getRequired('user');
|
|
$backend = $this->getUserBackend($this->params->getRequired('backend'));
|
|
|
|
$user = $backend->select(array(
|
|
'user_name',
|
|
'is_active',
|
|
'created_at',
|
|
'last_modified'
|
|
))->where('user_name', $userName)->fetchRow();
|
|
if ($user === false) {
|
|
$this->httpNotFound(sprintf($this->translate('User "%s" not found'), $userName));
|
|
}
|
|
|
|
$memberships = $this->loadMemberships(new User($userName))->select();
|
|
|
|
$filterEditor = Widget::create('filterEditor')
|
|
->setQuery($memberships)
|
|
->preserveParams('limit', 'sort', 'dir', 'view', 'backend', 'user')
|
|
->ignoreParams('page')
|
|
->handleRequest($this->getRequest());
|
|
$memberships->applyFilter($filterEditor->getFilter());
|
|
|
|
$this->setupFilterControl($filterEditor);
|
|
$this->setupPaginationControl($memberships);
|
|
$this->setupLimitControl();
|
|
$this->setupSortControl(
|
|
array(
|
|
'group_name' => $this->translate('Group')
|
|
),
|
|
$memberships
|
|
);
|
|
|
|
$extensibleBackends = $this->loadUserGroupBackends('Icinga\Data\Extensible');
|
|
$this->view->showCreateMembershipLink = ! empty($extensibleBackends);
|
|
|
|
$this->view->user = $user;
|
|
$this->view->backend = $backend;
|
|
$this->view->memberships = $memberships;
|
|
$this->createShowTabs($backend->getName(), $userName)->activate('user/show');
|
|
|
|
$removeForm = new Form();
|
|
$removeForm->setUidDisabled();
|
|
$removeForm->addElement('hidden', 'user_name', array(
|
|
'isArray' => true,
|
|
'value' => $userName,
|
|
'decorators' => array('ViewHelper')
|
|
));
|
|
$removeForm->addElement('hidden', 'redirect', array(
|
|
'value' => Url::fromPath('user/show', array(
|
|
'backend' => $backend->getName(),
|
|
'user' => $userName
|
|
)),
|
|
'decorators' => array('ViewHelper')
|
|
));
|
|
$removeForm->addElement('button', 'btn_submit', array(
|
|
'escape' => false,
|
|
'type' => 'submit',
|
|
'class' => 'link-like',
|
|
'value' => 'btn_submit',
|
|
'decorators' => array('ViewHelper'),
|
|
'label' => $this->view->icon('trash'),
|
|
'title' => $this->translate('Cancel this membership')
|
|
));
|
|
$this->view->removeForm = $removeForm;
|
|
}
|
|
|
|
/**
|
|
* Add a user
|
|
*/
|
|
public function addAction()
|
|
{
|
|
$this->assertPermission('config/application/users/add');
|
|
$backend = $this->getUserBackend($this->params->getRequired('backend'), 'Icinga\Data\Extensible');
|
|
$form = new UserForm();
|
|
$form->setRedirectUrl(Url::fromPath('user/list', array('backend' => $backend->getName())));
|
|
$form->setRepository($backend);
|
|
$form->add()->handleRequest();
|
|
|
|
$this->view->form = $form;
|
|
$this->render('form');
|
|
}
|
|
|
|
/**
|
|
* Edit a user
|
|
*/
|
|
public function editAction()
|
|
{
|
|
$this->assertPermission('config/application/users/edit');
|
|
$userName = $this->params->getRequired('user');
|
|
$backend = $this->getUserBackend($this->params->getRequired('backend'), 'Icinga\Data\Updatable');
|
|
|
|
$row = $backend->select(array('user_name', 'is_active'))->where('user_name', $userName)->fetchRow();
|
|
if ($row === false) {
|
|
$this->httpNotFound(sprintf($this->translate('User "%s" not found'), $userName));
|
|
}
|
|
|
|
$form = new UserForm();
|
|
$form->setRedirectUrl(Url::fromPath('user/show', array('backend' => $backend->getName(), 'user' => $userName)));
|
|
$form->setRepository($backend);
|
|
$form->edit($userName, get_object_vars($row))->handleRequest();
|
|
|
|
$this->view->form = $form;
|
|
$this->render('form');
|
|
}
|
|
|
|
/**
|
|
* Remove a user
|
|
*/
|
|
public function removeAction()
|
|
{
|
|
$userName = $this->params->getRequired('user');
|
|
$backend = $this->getUserBackend($this->params->getRequired('backend'), 'Icinga\Data\Reducible');
|
|
|
|
if ($backend->select()->where('user_name', $userName)->count() === 0) {
|
|
$this->httpNotFound(sprintf($this->translate('User "%s" not found'), $userName));
|
|
}
|
|
|
|
$form = new UserForm();
|
|
$form->setRedirectUrl(Url::fromPath('user/list', array('backend' => $backend->getName())));
|
|
$form->setRepository($backend);
|
|
$form->remove($userName)->handleRequest();
|
|
|
|
$this->view->form = $form;
|
|
$this->render('form');
|
|
}
|
|
|
|
/**
|
|
* Create a membership for a user
|
|
*/
|
|
public function createmembershipAction()
|
|
{
|
|
$userName = $this->params->getRequired('user');
|
|
$backend = $this->getUserBackend($this->params->getRequired('backend'));
|
|
|
|
if ($backend->select()->where('user_name', $userName)->count() === 0) {
|
|
$this->httpNotFound(sprintf($this->translate('User "%s" not found'), $userName));
|
|
}
|
|
|
|
$backends = $this->loadUserGroupBackends('Icinga\Data\Extensible');
|
|
if (empty($backends)) {
|
|
throw new ConfigurationError($this->translate(
|
|
'You\'ll need to configure at least one user group backend first that allows to create new memberships'
|
|
));
|
|
}
|
|
|
|
$form = new CreateMembershipForm();
|
|
$form->setBackends($backends)
|
|
->setUsername($userName)
|
|
->setRedirectUrl(Url::fromPath('user/show', array('backend' => $backend->getName(), 'user' => $userName)))
|
|
->handleRequest();
|
|
|
|
$this->view->form = $form;
|
|
$this->render('form');
|
|
}
|
|
|
|
/**
|
|
* Fetch and return the given user's groups from all user group backends
|
|
*
|
|
* @param User $user
|
|
*
|
|
* @return ArrayDatasource
|
|
*/
|
|
protected function loadMemberships(User $user)
|
|
{
|
|
$groups = $alreadySeen = array();
|
|
foreach ($this->loadUserGroupBackends() as $backend) {
|
|
try {
|
|
foreach ($backend->getMemberships($user) as $groupName) {
|
|
if (array_key_exists($groupName, $alreadySeen)) {
|
|
continue; // Ignore duplicate memberships
|
|
}
|
|
|
|
$alreadySeen[$groupName] = null;
|
|
$groups[] = (object) array(
|
|
'group_name' => $groupName,
|
|
'backend' => $backend
|
|
);
|
|
}
|
|
} catch (Exception $e) {
|
|
Logger::error($e);
|
|
Notification::warning(sprintf(
|
|
$this->translate('Failed to fetch memberships from backend %s. Please check your log'),
|
|
$backend->getName()
|
|
));
|
|
}
|
|
}
|
|
|
|
return new ArrayDatasource($groups);
|
|
}
|
|
|
|
/**
|
|
* Create the tabs to display when showing a user
|
|
*
|
|
* @param string $backendName
|
|
* @param string $userName
|
|
*/
|
|
protected function createShowTabs($backendName, $userName)
|
|
{
|
|
$tabs = $this->getTabs();
|
|
$tabs->add(
|
|
'user/show',
|
|
array(
|
|
'title' => sprintf($this->translate('Show user %s'), $userName),
|
|
'label' => $this->translate('User'),
|
|
'icon' => 'user',
|
|
'url' => Url::fromPath('user/show', array('backend' => $backendName, 'user' => $userName))
|
|
)
|
|
);
|
|
|
|
return $tabs;
|
|
}
|
|
}
|