191 lines
5.4 KiB
PHP
191 lines
5.4 KiB
PHP
<?php
|
|
|
|
// Pandora FMS - http://pandorafms.com
|
|
// ==================================================
|
|
// Copyright (c) 2005-2009 Artica Soluciones Tecnologicas
|
|
// Please see http://pandorafms.org for full contribution list
|
|
|
|
// This program is free software; you can redistribute it and/or
|
|
// modify it under the terms of the GNU Lesser General Public License
|
|
// as published by the Free Software Foundation; version 2
|
|
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
|
|
/**
|
|
* @package Include
|
|
* @subpackage Users
|
|
*/
|
|
|
|
require_once($config['homedir'] . "/include/functions_groups.php");
|
|
|
|
/**
|
|
* Get a list of all users in an array [username] => (info)
|
|
*
|
|
* @param string Field to order by (id_usuario, nombre_real or fecha_registro)
|
|
* @param string Which info to get (defaults to nombre_real)
|
|
*
|
|
* @return array An array of users
|
|
*/
|
|
function users_get_info ($order = "fullname", $info = "fullname") {
|
|
$users = get_users ($order);
|
|
$ret = array ();
|
|
foreach ($users as $user_id => $user_info) {
|
|
$ret[$user_id] = $user_info[$info];
|
|
}
|
|
return $ret;
|
|
}
|
|
|
|
/**
|
|
* Get all the Model groups a user has reading privileges.
|
|
*
|
|
* @param string User id
|
|
* @param string The privilege to evaluate
|
|
*
|
|
* @return array A list of the groups the user has certain privileges.
|
|
*/
|
|
function users_get_all_model_groups () {
|
|
$groups = db_get_all_rows_in_table ('tmodule_group');
|
|
if($groups === false) {
|
|
$groups = array();
|
|
}
|
|
$returnGroups = array();
|
|
foreach ($groups as $group)
|
|
$returnGroups[$group['id_mg']] = $group['name'];
|
|
|
|
$returnGroups[0] = "Not assigned"; //Module group external to DB but it exist
|
|
|
|
|
|
return $returnGroups;
|
|
}
|
|
|
|
/**
|
|
* Get all the groups a user has reading privileges.
|
|
*
|
|
* @param string User id
|
|
* @param string The privilege to evaluate, and it is false then no check ACL.
|
|
* @param boolean $returnAllGroup Flag the return group, by default true.
|
|
* @param boolean $returnAllColumns Flag to return all columns of groups.
|
|
* @param array $id_groups The list of group to scan to bottom child. By default null.
|
|
*
|
|
* @return array A list of the groups the user has certain privileges.
|
|
*/
|
|
function users_get_groups ($id_user = false, $privilege = "AR", $returnAllGroup = true, $returnAllColumns = false, $id_groups = null) {
|
|
if (empty ($id_user)) {
|
|
global $config;
|
|
$id_user = $config['id_user'];
|
|
}
|
|
|
|
if (isset($id_groups)) {
|
|
//Get recursive id groups
|
|
$list_id_groups = array();
|
|
foreach ((array)$id_groups as $id_group) {
|
|
$list_id_groups = array_merge($list_id_groups, groups_get_id_recursive($id_group));
|
|
}
|
|
|
|
$list_id_groups = array_unique($list_id_groups);
|
|
|
|
$groups = db_get_all_rows_filter('tgrupo', array('id_grupo' => $list_id_groups));
|
|
}
|
|
else {
|
|
$groups = db_get_all_rows_in_table ('tgrupo', 'nombre');
|
|
}
|
|
|
|
$user_groups = array ();
|
|
|
|
if (!$groups)
|
|
return $user_groups;
|
|
|
|
if ($returnAllGroup) { //All group
|
|
if ($returnAllColumns) {
|
|
$groups[] = array('id_grupo' => 0, 'nombre' => __('All'),
|
|
'icon' => 'world', 'parent' => 0, 'disabled' => 0,
|
|
'custom_id' => null, 'propagate' => 0);
|
|
}
|
|
else {
|
|
$groups[] = array('id_grupo' => 0, 'nombre' => __("All"));
|
|
}
|
|
}
|
|
|
|
foreach ($groups as $group) {
|
|
if ($privilege === false) {
|
|
if ($returnAllColumns) {
|
|
$user_groups[$group['id_grupo']] = $group;
|
|
}
|
|
else {
|
|
$user_groups[$group['id_grupo']] = $group['nombre'];
|
|
}
|
|
}
|
|
else if (check_acl($id_user, $group["id_grupo"], $privilege)) {
|
|
if ($returnAllColumns) {
|
|
$user_groups[$group['id_grupo']] = $group;
|
|
}
|
|
else {
|
|
$user_groups[$group['id_grupo']] = $group['nombre'];
|
|
}
|
|
}
|
|
}
|
|
|
|
ksort($user_groups);
|
|
|
|
return $user_groups;
|
|
}
|
|
|
|
/**
|
|
* Get all the groups a user has reading privileges. Version for tree groups.
|
|
*
|
|
* @param string User id
|
|
* @param string The privilege to evaluate
|
|
* @param boolean $returnAllGroup Flag the return group, by default true.
|
|
* @param boolean $returnAllColumns Flag to return all columns of groups.
|
|
*
|
|
* @return array A treefield list of the groups the user has certain privileges.
|
|
*/
|
|
function users_get_groups_tree($id_user = false, $privilege = "AR", $returnAllGroup = true) {
|
|
$user_groups = users_get_groups ($id_user, $privilege, $returnAllGroup, true);
|
|
|
|
$user_groups_tree = groups_get_groups_tree_recursive($user_groups);
|
|
|
|
return $user_groups_tree;
|
|
}
|
|
|
|
/**
|
|
* Get the first group of an user.
|
|
*
|
|
* Useful function when you need a default group for a user.
|
|
*
|
|
* @param string User id
|
|
* @param string The privilege to evaluate
|
|
*
|
|
* @return array The first group where the user has certain privileges.
|
|
*/
|
|
function users_get_first_group ($id_user = false, $privilege = "AR") {
|
|
return array_shift (array_keys (users_get_groups ($id_user, $privilege)));
|
|
}
|
|
|
|
/**
|
|
* Return access to a specific agent by a specific user
|
|
*
|
|
* @param int Agent id.
|
|
* @param string Access mode to be checked. Default AR (Agent reading)
|
|
* @param string User id. Current user by default
|
|
*
|
|
* @return bool Access to that agent (false not, true yes)
|
|
*/
|
|
function users_access_to_agent ($id_agent, $mode = "AR", $id_user = false) {
|
|
if (empty ($id_agent))
|
|
return false;
|
|
|
|
if ($id_user == false) {
|
|
global $config;
|
|
$id_user = $config['id_user'];
|
|
}
|
|
|
|
$id_group = (int) db_get_value ('id_grupo', 'tagente', 'id_agente', (int) $id_agent);
|
|
return (bool) check_acl ($id_user, $id_group, $mode);
|
|
}
|
|
|
|
?>
|