tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Se añade la funcionalidad de sobreescribir perfiles existentes. Se cambia el campo id_grupo por id del perfil 

Former-commit-id: 0bdec9661a9673a7695754bb7b8ab293650cca66
This commit is contained in:
marcos.alconada 2019-04-17 12:45:38 +02:00
parent 985726d5a2
commit 5de38e204f
1 changed files with 35 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

48
pandora_console/include/functions_api.php
View File

@ -14741,7 +14741,9 @@ function api_set_reset_agent_counts($id, $thrash1, $thrash2, $thrash3)
function api_set_list_all_user($returnType) function api_set_list_all_user($returnType)
{ {
if (!check_acl($config['id_user'], 0, 'AW')) { global $config;
if (!check_acl($config['id_user'], 0, 'AR')) {
returnError('forbidden', 'string'); returnError('forbidden', 'string');
return; return;
} }
@ -14804,7 +14806,9 @@ function api_set_list_all_user($returnType)
function api_set_info_user_name($returnType, $user_db) function api_set_info_user_name($returnType, $user_db)
{ {
if (!check_acl($config['id_user'], 0, 'AW')) { global $config;
if (!check_acl($config['id_user'], 0, 'AR')) {
returnError('forbidden', 'string'); returnError('forbidden', 'string');
return; return;
} }
@ -14866,7 +14870,9 @@ function api_set_info_user_name($returnType, $user_db)
function api_set_filter_user_group($returnType, $user_db, $group_db, $disable) function api_set_filter_user_group($returnType, $user_db, $group_db, $disable)
{ {
if (!check_acl($config['id_user'], 0, 'AW')) { global $config;
if (!check_acl($config['id_user'], 0, 'AR')) {
returnError('forbidden', 'string'); returnError('forbidden', 'string');
return; return;
} }
@ -14919,11 +14925,12 @@ function api_set_filter_user_group($returnType, $user_db, $group_db, $disable)
$i += 1; $i += 1;
} }
$data = [ $data = [
'type' => 'array', 'type' => 'array',
'data' => $values, 'data' => $values,
]; ];
returnData($returnType, $data, ';');
returnData($returnType, $data, ';');
} }
@ -14933,13 +14940,15 @@ function api_set_filter_user_group($returnType, $user_db, $group_db, $disable)
* The return of this function its only a message * The return of this function its only a message
* *
* @param string $user_db * @param string $user_db
* @param integer $group_db * @param integer $id_up
* @return void * @return void
*/ */
function api_set_delete_user_profiles($user_db, $group_db) function api_set_delete_user_profiles($user_db, $id_up)
{ {
global $config;
if (!check_acl($config['id_user'], 0, 'AW')) { if (!check_acl($config['id_user'], 0, 'AW')) {
returnError('forbidden', 'string'); returnError('forbidden', 'string');
return; return;
@ -14947,7 +14956,7 @@ function api_set_delete_user_profiles($user_db, $group_db)
$values = [ $values = [
'id_usuario' => io_safe_output($user_db), 'id_usuario' => io_safe_output($user_db),
'id_grupo' => io_safe_output($group_db), 'id_up' => io_safe_output($id_up),
]; ];
$deleted_permission = db_process_sql_delete('tusuario_perfil', $values); $deleted_permission = db_process_sql_delete('tusuario_perfil', $values);
@ -14978,13 +14987,21 @@ function api_set_delete_user_profiles($user_db, $group_db)
*/ */
function api_set_add_permisson_user_to_group($returnType, $user_db, $group_db, $id_up) function api_set_add_permission_user_to_group($returnType, $user_db, $group_db, $id_up, $id_profile)
{ {
global $config;
if (!check_acl($config['id_user'], 0, 'AW')) { if (!check_acl($config['id_user'], 0, 'AW')) {
returnError('forbidden', 'string'); returnError('forbidden', 'string');
return; return;
} }
$sql = 'SELECT id_up
FROM tusuario_perfil
WHERE id_up = '.$id_profile.'';
$exist_profile = db_get_value_sql($sql);
$values = [ $values = [
'id_usuario' => $user_db, 'id_usuario' => $user_db,
'id_perfil' => $id_up, 'id_perfil' => $id_up,
@ -14996,7 +15013,12 @@ function api_set_add_permisson_user_to_group($returnType, $user_db, $group_db, $
]; ];
$sucessfull_insert = db_process_sql_insert('tusuario_perfil', $values); $where_id_up = ['id_up' => $id_profile];
if ($exist_profile == $id_profile) {
$sucessfull_insert = db_process_sql_update('tusuario_perfil', $values, $where_id_up);
} else {
$sucessfull_insert = db_process_sql_insert('tusuario_perfil', $values);
}
if ($sucessfull_insert == false) { if ($sucessfull_insert == false) {
returnError('Error_insert', __('User profile could not be available.')); returnError('Error_insert', __('User profile could not be available.'));