tyler.durden/loganalyzer
1
0
Fork 0
mirror of https://github.com/rsyslog/loganalyzer.git synced 2025-09-25 18:59:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

Secured Views and Sources Admin access of NON-Admin users

Browse Source
This commit is contained in:
Andre Lorbach 2010-02-22 17:51:07 +01:00
parent a014f5e7bb
commit 21c98c0331
8 changed files with 65 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
src/admin/sources.php
View File

@ -54,6 +54,13 @@ IncludeLanguageFile( $gl_root_path . '/lang/' . $LANG . '/admin.php' );
// --- BEGIN Custom Code
// --- Set Helpervariable for non-ADMIN users
if ( !isset($_SESSION['SESSION_ISADMIN']) || $_SESSION['SESSION_ISADMIN'] == 0 )
$content['READONLY_ISUSERONLY'] = "disabled";
else
$content['READONLY_ISUSERONLY'] = "";
// ---
if ( isset($_GET['op']) )
{
if ($_GET['op'] == "add")
@ -110,6 +117,14 @@ if ( isset($_GET['op']) )
$content['userid'] = null;
$content['CHECKED_ISUSERONLY'] = "";
$content['SOURCEID'] = "";
// --- Can only create a USER source!
if ( !isset($_SESSION['SESSION_ISADMIN']) || $_SESSION['SESSION_ISADMIN'] == 0 )
{
$content['userid'] = $content['SESSION_USERID'];
$content['CHECKED_ISUSERONLY'] = "checked";
}
// ---
// --- Check if groups are available
$content['SUBGROUPS'] = GetGroupsForSelectfield();
@ -195,11 +210,17 @@ if ( isset($_GET['op']) )
}
$content['SourceDBRecordsPerQuery'] = $mysource['DBRecordsPerQuery'];
if ( $mysource['userid'] != null )
// Set UserID if set!
$content['userid'] = $mysource['userid'];
if ( $content['userid'] != null )
$content['CHECKED_ISUSERONLY'] = "checked";
else
$content['CHECKED_ISUSERONLY'] = "";
// --- Can only EDIT own views!
if ( !isset($_SESSION['SESSION_ISADMIN']) || $_SESSION['SESSION_ISADMIN'] == 0 && $content['userid'] == NULL )
DieWithFriendlyErrorMsg( $content['LN_ADMIN_ERROR_NOTALLOWEDTOEDIT'] );
// ---
// --- Check if groups are available
$content['SUBGROUPS'] = GetGroupsForSelectfield();
@ -528,11 +549,20 @@ if ( isset($_POST['op']) )
}
else
{
$content['userid'] = "null";
if ( isset ($_POST['groupid']) && $_POST['groupid'] != -1 )
$content['groupid'] = intval($_POST['groupid']);
else
$content['groupid'] = "null";
// --- Can only create a USER source!
if ( !isset($_SESSION['SESSION_ISADMIN']) || $_SESSION['SESSION_ISADMIN'] == 0 )
{
$content['userid'] = $content['SESSION_USERID'];
$content['groupid'] = "null";
}
else
{
$content['userid'] = "null";
if ( isset ($_POST['groupid']) && $_POST['groupid'] != -1 )
$content['groupid'] = intval($_POST['groupid']);
else
$content['groupid'] = "null";
}
}
// --- Check mandotary values

24
src/admin/views.php
View File

@ -61,6 +61,13 @@ IncludeLanguageFile( $gl_root_path . '/lang/' . $LANG . '/admin.php' );
// Init helper variable to empty string
$content['FormUrlAddOP'] = "";
// --- Set Helpervariable for non-ADMIN users
if ( !isset($_SESSION['SESSION_ISADMIN']) || $_SESSION['SESSION_ISADMIN'] == 0 )
$content['READONLY_ISUSERONLY'] = "disabled";
else
$content['READONLY_ISUSERONLY'] = "";
// ---
if ( isset($_GET['op']) )
{
if ($_GET['op'] == "add")
@ -72,10 +79,18 @@ if ( isset($_GET['op']) )
//PreInit these values
$content['DisplayName'] = "";
$content['userid'] = null;
$content['CHECKED_ISUSERONLY'] = "";
$content['VIEWID'] = "";
$content['FormUrlAddOP'] = "?op=add";
$content['userid'] = null;
$content['CHECKED_ISUSERONLY'] = "";
// --- Can only create a USER source!
if ( !isset($_SESSION['SESSION_ISADMIN']) || $_SESSION['SESSION_ISADMIN'] == 0 )
{
$content['userid'] = $content['SESSION_USERID'];
$content['CHECKED_ISUSERONLY'] = "checked";
}
// ---
// --- Check if groups are available
$content['SUBGROUPS'] = GetGroupsForSelectfield();
@ -116,6 +131,11 @@ if ( isset($_GET['op']) )
else
$content['CHECKED_ISUSERONLY'] = "";
// --- Can only EDIT own views!
if ( !isset($_SESSION['SESSION_ISADMIN']) || $_SESSION['SESSION_ISADMIN'] == 0 && $content['userid'] == NULL )
DieWithFriendlyErrorMsg( $content['LN_ADMIN_ERROR_NOTALLOWEDTOEDIT'] );
// ---
// --- Check if groups are available
$content['SUBGROUPS'] = GetGroupsForSelectfield();
if ( is_array($content['SUBGROUPS']) )

1
src/lang/de/admin.php
View File

@ -102,6 +102,7 @@ $content['LN_GEN_INJECTHTMLHEADER'] = "Voranstellen von HTML Code in <head&gt
$content['LN_GEN_INJECTBODYHEADER'] = "Voranstellen von HTML Code am Anfang des <body> Bereichs.";
$content['LN_GEN_INJECTBODYFOOTER'] = "Voranstellen von HTML Code Am Ende des <body> Bereichs.";
$content['LN_ADMIN_PHPLOGCON_LOGOURL'] = "Optionale phpLogCon-Logo-URL. Bitte für das Standard-Logo leer lassen.";
$content['LN_ADMIN_ERROR_NOTALLOWEDTOEDIT'] = "You are not allowed to edit this configuration item.";
// User Center
$content['LN_USER_CENTER'] = "Benutzer Optionen";

1
src/lang/en/admin.php
View File

@ -104,6 +104,7 @@ $content['LN_GEN_INJECTHTMLHEADER'] = "Inject this html code into the <head&g
$content['LN_GEN_INJECTBODYHEADER'] = "Inject this html code at the beginning of the <body> area.";
$content['LN_GEN_INJECTBODYFOOTER'] = "Inject this html code at the end <body> area.";
$content['LN_ADMIN_PHPLOGCON_LOGOURL'] = "Optional phpLogCon Logo URL. Leave empty to use the default one.";
$content['LN_ADMIN_ERROR_NOTALLOWEDTOEDIT'] = "You are not allowed to edit this configuration item.";
// User Center
$content['LN_USER_CENTER'] = "User Options";

1
src/lang/it_IT/admin.php
View File

@ -104,6 +104,7 @@ $content['LN_GEN_INJECTHTMLHEADER'] = "Inject this html code into the <head&g
$content['LN_GEN_INJECTBODYHEADER'] = "Inject this html code at the beginning of the <body> area.";
$content['LN_GEN_INJECTBODYFOOTER'] = "Inject this html code at the end <body> area.";
$content['LN_ADMIN_PHPLOGCON_LOGOURL'] = "Optional phpLogCon Logo URL. Leave empty to use the default one.";
$content['LN_ADMIN_ERROR_NOTALLOWEDTOEDIT'] = "You are not allowed to edit this configuration item.";
// User Center
$content['LN_USER_CENTER'] = "User Options";

1
src/lang/pt_BR/admin.php
View File

@ -102,6 +102,7 @@ $content['LN_GEN_INJECTHTMLHEADER'] = "Inject this html code into the <head&g
$content['LN_GEN_INJECTBODYHEADER'] = "Inject this html code at the beginning of the <body> area.";
$content['LN_GEN_INJECTBODYFOOTER'] = "Inject this html code at the end <body> area.";
$content['LN_ADMIN_PHPLOGCON_LOGOURL'] = "Optional phpLogCon Logo URL. Leave empty to use the default one.";
$content['LN_ADMIN_ERROR_NOTALLOWEDTOEDIT'] = "You are not allowed to edit this configuration item.";
// User Center
$content['LN_USER_CENTER'] = "User Options";

2
src/templates/admin/admin_sources.html
View File

@ -290,7 +290,7 @@
<tr>
<td align="left" class="cellmenu2"><b>{LN_GEN_GROUPONLY}</b></td>
<td align="right" class="line2">
<select name="groupid" size="1" STYLE="width: 300px">
<select name="groupid" size="1" STYLE="width: 300px" {READONLY_ISUSERONLY}>
<!-- BEGIN SUBGROUPS -->
<option value="{mygroupid}" {group_selected}>{groupname}</option>
<!-- END SUBGROUPS -->

2
src/templates/admin/admin_views.html
View File

@ -81,7 +81,7 @@
<tr>
<td align="left" class="cellmenu2_naked"><b>{LN_GEN_GROUPONLY_LONG}</b></td>
<td align="right" class="line2">
<select name="groupid" size="1" STYLE="width: 300px">
<select name="groupid" size="1" STYLE="width: 300px" {READONLY_ISUSERONLY}>
<!-- BEGIN SUBGROUPS -->
<option value="{mygroupid}" {group_selected}>{groupname}</option>
<!-- END SUBGROUPS -->