478 lines
14 KiB
PHP
478 lines
14 KiB
PHP
<?php
|
|
/**
|
|
* Alert actions
|
|
*
|
|
* @category Alerts
|
|
* @package Pandora FMS
|
|
* @subpackage Community
|
|
* @version 1.0.0
|
|
* @license See below
|
|
*
|
|
* ______ ___ _______ _______ ________
|
|
* | __ \.-----.--.--.--| |.-----.----.-----. | ___| | | __|
|
|
* | __/| _ | | _ || _ | _| _ | | ___| |__ |
|
|
* |___| |___._|__|__|_____||_____|__| |___._| |___| |__|_|__|_______|
|
|
*
|
|
* ============================================================================
|
|
* Copyright (c) 2005-2021 Artica Soluciones Tecnologicas
|
|
* Please see http://pandorafms.org for full contribution list
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation for version 2.
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
* ============================================================================
|
|
*/
|
|
|
|
// Load global vars.
|
|
global $config;
|
|
|
|
require_once $config['homedir'].'/include/functions_alerts.php';
|
|
require_once $config['homedir'].'/include/functions_users.php';
|
|
require_once $config['homedir'].'/include/functions_groups.php';
|
|
enterprise_include_once('meta/include/functions_alerts_meta.php');
|
|
|
|
check_login();
|
|
|
|
|
|
|
|
enterprise_hook('open_meta_frame');
|
|
|
|
if (! check_acl($config['id_user'], 0, 'LM')) {
|
|
db_pandora_audit(
|
|
'ACL Violation',
|
|
'Trying to access Alert actions'
|
|
);
|
|
include 'general/noaccess.php';
|
|
exit;
|
|
}
|
|
|
|
$update_action = (bool) get_parameter('update_action');
|
|
$create_action = (bool) get_parameter('create_action');
|
|
$delete_action = (bool) get_parameter('delete_action');
|
|
$copy_action = (bool) get_parameter('copy_action');
|
|
$pure = get_parameter('pure', 0);
|
|
|
|
if (defined('METACONSOLE')) {
|
|
$sec = 'advanced';
|
|
} else {
|
|
$sec = 'galertas';
|
|
}
|
|
|
|
$can_edit_all = false;
|
|
if (check_acl_restricted_all($config['id_user'], 0, 'LM')) {
|
|
$can_edit_all = true;
|
|
}
|
|
|
|
// Header.
|
|
if (defined('METACONSOLE')) {
|
|
alerts_meta_print_header();
|
|
} else {
|
|
ui_print_page_header(
|
|
__('Alerts').' » '.__('Alert actions'),
|
|
'images/gm_alerts.png',
|
|
false,
|
|
'',
|
|
true
|
|
);
|
|
}
|
|
|
|
if ($copy_action) {
|
|
$id = get_parameter('id');
|
|
|
|
$al_action = alerts_get_alert_action($id);
|
|
|
|
if ($al_action !== false) {
|
|
// If user who doesn't have permission to modify group all tries to copy an action with group=ALL.
|
|
if ($can_edit_all == false && $al_action['id_group'] == 0) {
|
|
$al_action['id_group'] = users_get_first_group(false, 'LM', false);
|
|
} else {
|
|
$own_info = get_user_info($config['id_user']);
|
|
if ($can_edit_all == true || check_acl($config['id_user'], 0, 'PM')) {
|
|
$own_groups = array_keys(
|
|
users_get_groups($config['id_user'], 'LM')
|
|
);
|
|
} else {
|
|
$own_groups = array_keys(
|
|
users_get_groups($config['id_user'], 'LM', false)
|
|
);
|
|
}
|
|
|
|
$is_in_group = in_array($al_action['id_group'], $own_groups);
|
|
// Then action group have to be in his own groups.
|
|
if (!$is_in_group) {
|
|
db_pandora_audit(
|
|
'ACL Violation',
|
|
'Trying to access Alert Management'
|
|
);
|
|
include 'general/noaccess.php';
|
|
exit;
|
|
}
|
|
}
|
|
}
|
|
|
|
$result = alerts_clone_alert_action($id, $al_action['id_group']);
|
|
|
|
if ($result) {
|
|
db_pandora_audit(
|
|
'Command management',
|
|
'Duplicate alert action '.$id.' clone to '.$result
|
|
);
|
|
} else {
|
|
db_pandora_audit(
|
|
'Command management',
|
|
'Fail try to duplicate alert action '.$id
|
|
);
|
|
}
|
|
|
|
ui_print_result_message(
|
|
$result,
|
|
__('Successfully copied'),
|
|
__('Could not be copied')
|
|
);
|
|
}
|
|
|
|
if ($update_action || $create_action) {
|
|
alerts_ui_update_or_create_actions($update_action);
|
|
}
|
|
|
|
if ($delete_action) {
|
|
$id = get_parameter('id');
|
|
|
|
$al_action = alerts_get_alert_action($id);
|
|
|
|
if (!check_acl_restricted_all($config['id_user'], $al_action['id_group'], 'LM')) {
|
|
db_pandora_audit(
|
|
'ACL Violation',
|
|
'Trying to access Alert Management'
|
|
);
|
|
include 'general/noaccess.php';
|
|
exit;
|
|
}
|
|
|
|
if ($al_action !== false) {
|
|
// If user tries to delete an action with group=ALL.
|
|
if ($al_action['id_group'] == 0) {
|
|
// Then must have "PM" access privileges.
|
|
if (! check_acl($config['id_user'], 0, 'PM')) {
|
|
db_pandora_audit(
|
|
'ACL Violation',
|
|
'Trying to access Alert Management'
|
|
);
|
|
include 'general/noaccess.php';
|
|
exit;
|
|
}
|
|
|
|
// If user tries to delete an action of others groups.
|
|
} else {
|
|
$own_info = get_user_info($config['id_user']);
|
|
if ($own_info['is_admin'] || check_acl($config['id_user'], 0, 'PM')) {
|
|
$own_groups = array_keys(
|
|
users_get_groups($config['id_user'], 'LM')
|
|
);
|
|
} else {
|
|
$own_groups = array_keys(
|
|
users_get_groups($config['id_user'], 'LM', false)
|
|
);
|
|
}
|
|
|
|
$is_in_group = in_array($al_action['id_group'], $own_groups);
|
|
// Then action group have to be in his own groups.
|
|
if (!$is_in_group) {
|
|
db_pandora_audit(
|
|
'ACL Violation',
|
|
'Trying to access Alert Management'
|
|
);
|
|
include 'general/noaccess.php';
|
|
exit;
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
$result = alerts_delete_alert_action($id);
|
|
|
|
if ($result) {
|
|
db_pandora_audit(
|
|
'Command management',
|
|
'Delete alert action #'.$id
|
|
);
|
|
} else {
|
|
db_pandora_audit(
|
|
'Command management',
|
|
'Fail try to delete alert action #'.$id
|
|
);
|
|
}
|
|
|
|
ui_print_result_message(
|
|
$result,
|
|
__('Successfully deleted'),
|
|
__('Could not be deleted')
|
|
);
|
|
}
|
|
|
|
$is_management_allowed = is_management_allowed();
|
|
if ($is_management_allowed === false) {
|
|
ui_print_warning_message(
|
|
__(
|
|
'This node is configured with centralized mode. All alert actions information is read only. Go to %s to manage it.',
|
|
'<a target="_blank" href="'.ui_get_meta_url(
|
|
'index.php?sec=advanced&sec2=godmode/alerts/alert_actions&tab=action&pure=0'
|
|
).'">'.__('metaconsole').'</a>'
|
|
)
|
|
);
|
|
}
|
|
|
|
$search_string = (string) get_parameter('search_string', '');
|
|
$group = (int) get_parameter('group', 0);
|
|
$group_search = (int) get_parameter('group_search', 0);
|
|
$id_command_search = (int) get_parameter('id_command_search', 0);
|
|
$url = 'index.php?sec='.$sec.'&sec2=godmode/alerts/alert_actions';
|
|
|
|
// Filter table.
|
|
$table_filter = new stdClass();
|
|
$table_filter->width = '100%';
|
|
$table_filter->class = 'databox filters';
|
|
$table_filter->style = [];
|
|
$table_filter->style[0] = 'font-weight: bold';
|
|
$table_filter->style[2] = 'font-weight: bold';
|
|
$table_filter->style[4] = 'font-weight: bold';
|
|
$table_filter->data = [];
|
|
|
|
$table_filter->data[0][0] = __('Search');
|
|
$table_filter->data[0][1] = html_print_input_text(
|
|
'search_string',
|
|
$search_string,
|
|
'',
|
|
25,
|
|
255,
|
|
true
|
|
);
|
|
|
|
$return_all_group = false;
|
|
|
|
if (users_can_manage_group_all('LM') === true) {
|
|
$return_all_group = true;
|
|
}
|
|
|
|
$table_filter->data[0][2] = __('Group');
|
|
$table_filter->data[0][3] = html_print_select_groups(
|
|
$config['id_user'],
|
|
'LM',
|
|
$return_all_group,
|
|
'group_search',
|
|
$group_search,
|
|
'',
|
|
'',
|
|
0,
|
|
true
|
|
);
|
|
$table_filter->data[0][4] = __('Command');
|
|
$commands_sql = db_get_all_rows_filter(
|
|
'talert_commands',
|
|
['id_group' => array_keys(users_get_groups(false, 'LW'))],
|
|
[
|
|
'id',
|
|
'name',
|
|
],
|
|
'AND',
|
|
false,
|
|
true
|
|
);
|
|
|
|
$commands = db_get_all_rows_sql($commands_sql);
|
|
$table_filter->data[0][5] = html_print_select(
|
|
index_array($commands, 'id', 'name'),
|
|
'id_command_search',
|
|
$id_command_search,
|
|
'',
|
|
__('None'),
|
|
0,
|
|
true,
|
|
false,
|
|
true,
|
|
'',
|
|
false,
|
|
'width:150px'
|
|
);
|
|
$table_filter->data[0][6] = '<div class="action-buttons">';
|
|
$table_filter->data[0][6] .= html_print_submit_button(
|
|
__('Search'),
|
|
'',
|
|
false,
|
|
'class="sub search"',
|
|
true
|
|
);
|
|
$table_filter->data[0][5] .= '</div>';
|
|
|
|
|
|
$show_table_filter = '<form method="post" action="'.$url.'">';
|
|
$show_table_filter .= html_print_table($table_filter, true);
|
|
$show_table_filter .= '</form>';
|
|
if (is_metaconsole()) {
|
|
ui_toggle($show_table_filter, __('Show Options'));
|
|
} else {
|
|
echo $show_table_filter;
|
|
}
|
|
|
|
|
|
$table = new stdClass();
|
|
$table->width = '100%';
|
|
$table->class = 'info_table';
|
|
$table->data = [];
|
|
$table->head = [];
|
|
$table->head[0] = __('Name');
|
|
$table->head[1] = __('Command');
|
|
$table->head[2] = __('Group');
|
|
if (is_management_allowed() === true) {
|
|
$table->head[3] = __('Copy');
|
|
$table->head[4] = __('Delete');
|
|
}
|
|
|
|
$table->style = [];
|
|
$table->style[0] = 'font-weight: bold';
|
|
$table->size = [];
|
|
$table->size[3] = '40px';
|
|
$table->size[4] = '40px';
|
|
$table->align = [];
|
|
$table->align[1] = 'left';
|
|
$table->align[2] = 'left';
|
|
$table->align[3] = 'left';
|
|
$table->align[4] = 'left';
|
|
|
|
$filter = [];
|
|
if (!is_user_admin($config['id_user'])) {
|
|
$filter['talert_actions.id_group'] = array_keys(
|
|
users_get_groups(false, 'LM')
|
|
);
|
|
}
|
|
|
|
if ($group_search !== 0) {
|
|
$filter['talert_actions.id_group'] = $group_search;
|
|
}
|
|
|
|
if ($search_string !== '') {
|
|
$filter['talert_actions.name'] = '%'.$search_string.'%';
|
|
}
|
|
|
|
if ($id_command_search !== 0) {
|
|
$filter['talert_commands.id'] = $id_command_search;
|
|
}
|
|
|
|
$actions = db_get_all_rows_filter(
|
|
'talert_actions INNER JOIN talert_commands ON talert_actions.id_alert_command = talert_commands.id',
|
|
$filter,
|
|
'talert_actions.* , talert_commands.id_group AS command_group, talert_commands.name AS command_name'
|
|
);
|
|
|
|
if ($actions === false) {
|
|
$actions = [];
|
|
}
|
|
|
|
// Pagination.
|
|
$total_actions = count($actions);
|
|
$offset = (int) get_parameter('offset');
|
|
$limit = (int) $config['block_size'];
|
|
$actions = array_slice($actions, $offset, $limit);
|
|
|
|
$rowPair = true;
|
|
$iterator = 0;
|
|
foreach ($actions as $action) {
|
|
if ($rowPair) {
|
|
$table->rowclass[$iterator] = 'rowPair';
|
|
} else {
|
|
$table->rowclass[$iterator] = 'rowOdd';
|
|
}
|
|
|
|
$rowPair = !$rowPair;
|
|
$iterator++;
|
|
|
|
$data = [];
|
|
|
|
$data[0] = '<a href="index.php?sec='.$sec.'&sec2=godmode/alerts/configure_alert_action&id='.$action['id'].'&pure='.$pure.'">'.$action['name'].'</a>';
|
|
if ($action['id_group'] == 0 && $can_edit_all == false) {
|
|
$data[0] .= ui_print_help_tip(__('You cannot edit this action, You don\'t have the permission to edit All group.'), true);
|
|
}
|
|
|
|
$data[1] = $action['command_name'];
|
|
$data[2] = ui_print_group_icon($action['id_group'], true).' ';
|
|
if (!alerts_validate_command_to_action($action['id_group'], $action['command_group'])) {
|
|
$data[2] .= html_print_image(
|
|
'images/error.png',
|
|
true,
|
|
// FIXME: Translation.
|
|
[
|
|
'title' => __('The action and the command associated with it do not have the same group. Please contact an administrator to fix it.'),
|
|
]
|
|
);
|
|
}
|
|
|
|
$data[3] = '';
|
|
$data[4] = '';
|
|
|
|
if (is_management_allowed() === true
|
|
&& check_acl($config['id_user'], $action['id_group'], 'LM')
|
|
) {
|
|
$table->cellclass[] = [
|
|
3 => 'action_buttons',
|
|
4 => 'action_buttons',
|
|
];
|
|
|
|
$id_action = $action['id'];
|
|
$text_confirm = __('Are you sure?');
|
|
|
|
$data[3] = '<form method="post" style="display: inline; float: right" onsubmit="if (!confirm(\''.$text_confirm.'\')) return false;">';
|
|
$data[3] .= html_print_input_hidden('copy_action', 1, true);
|
|
$data[3] .= html_print_input_hidden('id', $id_action, true);
|
|
$data[3] .= html_print_input_image(
|
|
'dup',
|
|
'images/copy.png',
|
|
1,
|
|
'',
|
|
true,
|
|
['title' => __('Duplicate')]
|
|
);
|
|
$data[3] .= '</form> ';
|
|
|
|
if ($action['id_group'] != 0 || $can_edit_all == true) {
|
|
$data[4] = '<form method="post" style="display: inline; float: right" onsubmit="if (!confirm(\''.$text_confirm.'\')) return false;">';
|
|
$data[4] .= html_print_input_hidden('delete_action', 1, true);
|
|
$data[4] .= html_print_input_hidden('id', $id_action, true);
|
|
$data[4] .= html_print_input_image(
|
|
'del',
|
|
'images/cross.png',
|
|
1,
|
|
'',
|
|
true,
|
|
['title' => __('Delete')]
|
|
);
|
|
$data[4] .= '</form> ';
|
|
} else {
|
|
$data[4] = '';
|
|
}
|
|
}
|
|
|
|
array_push($table->data, $data);
|
|
}
|
|
|
|
ui_pagination($total_actions, $url);
|
|
if (isset($data)) {
|
|
html_print_table($table);
|
|
ui_pagination($total_actions, $url, 0, 0, false, 'offset', true, 'pagination-bottom');
|
|
} else {
|
|
ui_print_info_message(['no_close' => true, 'message' => __('No alert actions configured') ]);
|
|
}
|
|
|
|
if (is_management_allowed() === true) {
|
|
echo '<div class="action-buttons" style="width: '.$table->width.'">';
|
|
echo '<form method="post" action="index.php?sec='.$sec.'&sec2=godmode/alerts/configure_alert_action&pure='.$pure.'">';
|
|
html_print_submit_button(__('Create'), 'create', false, 'class="sub next"');
|
|
html_print_input_hidden('create_alert', 1);
|
|
echo '</form>';
|
|
echo '</div>';
|
|
}
|
|
|
|
enterprise_hook('close_meta_frame');
|