pandorafms/pandora_console/godmode/massive/massive_delete_profiles.php

<?php
/**
 * View for delete profiles in Massive Operations
 *
 * @category   Configuration
 * @package    Pandora FMS
 * @subpackage Massive Operations
 * @version    1.0.0
 * @license    See below
 *
 *    ______                 ___                    _______ _______ ________
 *   |   __ \.-----.--.--.--|  |.-----.----.-----. |    ___|   |   |     __|
 *  |    __/|  _  |     |  _  ||  _  |   _|  _  | |    ___|       |__     |
 * |___|   |___._|__|__|_____||_____|__| |___._| |___|   |__|_|__|_______|
 *
 * ============================================================================
 * Copyright (c) 2005-2021 Artica Soluciones Tecnologicas
 * Please see http://pandorafms.org for full contribution list
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * as published by the Free Software Foundation for version 2.
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 * ============================================================================
 */

// Begin.
check_login();

if (! check_acl($config['id_user'], 0, 'UM')) {
    db_pandora_audit(
        'ACL Violation',
        'Trying to access massive profile deletion'
    );
    include 'general/noaccess.php';
    return;
}

if (is_management_allowed() === false) {
    if (is_metaconsole() === false) {
        $url = '<a target="_blank" href="'.ui_get_meta_url(
            'index.php?sec=advanced&sec2=advanced/users_setup&tab=profile&pure='.(int) $config['pure']
        ).'">'.__('metaconsole').'</a>';
    } else {
        $url = __('any node');
    }

    ui_print_warning_message(
        __(
            'This node is configured with centralized mode. All profiles user information is read only. Go to %s to manage it.',
            $url
        )
    );

    return;
}

require_once 'include/functions_agents.php';
require_once 'include/functions_alerts.php';
require_once $config['homedir'].'/include/functions_profile.php';

if (is_ajax()) {
    $get_users = (bool) get_parameter('get_users');

    if ($get_users) {
        $id_group = get_parameter('id_group');
        $id_profile = get_parameter('id_profile');

        $profile_data = db_get_all_rows_filter('tusuario_perfil', ['id_perfil' => $id_profile[0], 'id_grupo' => $id_group[0]]);
        if (!users_is_admin()) {
            foreach ($profile_data as $user => $values) {
                if (users_is_admin($values['id_usuario'])) {
                    unset($profile_data[$user]);
                }
            }
        }

        echo json_encode(index_array($profile_data, 'id_up', 'id_usuario'));
        return;
    }

    return;
}

$delete_profiles = (int) get_parameter('delete_profiles');

if ($delete_profiles) {
    $profiles_id = get_parameter('profiles_id', -1);
    $groups_id = get_parameter('groups_id', -1);
    $users = get_parameter('users_id', -1);

    if ($profiles_id == -1 || $groups_id == -1 || $users == -1) {
        $result = false;
    } else {
        foreach ($users as $user) {
            db_pandora_audit(
                'User management',
                'Deleted profile for user '.io_safe_input($user)
            );

            $result = profile_delete_user_profile_group($user, $profiles_id[0], $groups_id[0]);
        }
    }

    $info = [
        'Profiles' => implode(',', $profiles_id),
        'Groups'   => implode(',', $groups_id),
        'Users'    => implode(',', $users),
    ];

    if ($result) {
        db_pandora_audit('Massive management', 'Delete profile ', false, false, json_encode($info));
    } else {
        db_pandora_audit('Massive management', 'Fail try to delete profile', false, false, json_encode($info));
    }

    ui_print_result_message(
        $result,
        __('Profiles deleted successfully'),
        __('Profiles cannot be deleted')
    );
}

if ($table !== null) {
    html_print_table($table);
}

unset($table);

$table->width = '100%';
$table->class = 'databox filters';
$table->data = [];
$table->head = [];
$table->align = [];
$table->style = [];

$table->head[0] = __('Profile name');
$table->head[1] = __('Group');
$table->head[2] = __('Users');
$table->align[2] = 'center';
$table->size[0] = '34%';
$table->size[1] = '33%';
$table->size[2] = '33%';

$data = [];
$data[0] = '<form method="post" id="form_profiles" action="index.php?sec=gmassive&sec2=godmode/massive/massive_operations&tab=massive_users&option=delete_profiles">';
$display_all_group = true;
if (check_acl($config['id_user'], 0, 'PM')) {
    $data[0] .= html_print_select(
        profile_get_profiles(),
        'profiles_id[]',
        '',
        '',
        '',
        '',
        true,
        false,
        false,
        '',
        false,
        'width: 100%'
    );
} else {
    $group_um = users_get_groups_UM($config['id_user']);
    if (!isset($group_um[0])) {
        $display_all_group = false;
    }

    $data[0] .= html_print_select(
        profile_get_profiles(
            [
                'pandora_management' => '<> 1',
                'db_management'      => '<> 1',
            ]
        ),
        'profiles_id[]',
        '',
        '',
        '',
        '',
        true,
        false,
        false,
        '',
        false,
        'width: 100%'
    );
}

$data[1] = html_print_select_groups(
    $config['id_user'],
    'UM',
    $display_all_group,
    'groups_id[]',
    '',
    '',
    '',
    '',
    true,
    false,
    false,
    '',
    false,
    'width: 100%'
);
$data[2] = '<span id="users_loading" class="invisible">';
$data[2] .= html_print_image('images/spinner.png', true);
$data[2] .= '</span>';
$users_profiles = '';
$users_order = [
    'field' => 'id_user',
    'order' => 'ASC',
];

$data[2] .= html_print_select(
    [],
    'users_id[]',
    '',
    '',
    '',
    '',
    true,
    true,
    true,
    '',
    false,
    'width: 100%'
);

array_push($table->data, $data);

html_print_table($table);

attachActionButton('delete_profiles', 'delete', $table->width);

echo '</form>';

unset($table);

// TODO: Change to iu_print_error system.
echo '<h3 class="error invisible" id="message"> </h3>';

ui_require_jquery_file('form');
ui_require_jquery_file('pandora.controls');
?>

<script type="text/javascript">
/* <![CDATA[ */
$(document).ready (function () {
    update_users();

    function update_users() {
        var $select = $("#users_id").disable ();
        $("#users_loading").show ();
        $("option", $select).remove ();

        jQuery.post ("ajax.php",
            {"page" : "godmode/massive/massive_delete_profiles",
            "get_users" : 1,
            "id_group[]" : $("#groups_id").val(),
            "id_profile[]" : $("#profiles_id").val()
            },
            function (data, status) {
                options = "";
                jQuery.each (data, function (id, value) {
                    options += "<option value=\""+value+"\">"+value+"</option>";
                });
                $("#users_id").append (options);
                $("#users_loading").hide ();
                $select.enable ();
            },
            "json"
        );
    }

    $("#groups_id").change (function () {
        update_users();
    });

    $("#profiles_id").change (function () {
        update_users();
    });
});
/* ]]> */
</script>