1: <?php
  2: /**
  3:  * This file contains the right collection and item class.
  4:  *
  5:  * @package          Core
  6:  * @subpackage       GenericDB_Model
  7:  * @version          SVN Revision $Rev:$
  8:  *
  9:  * @author           Murat Purc <murat@purc.de>
 10:  * @copyright        four for business AG <www.4fb.de>
 11:  * @license          http://www.contenido.org/license/LIZENZ.txt
 12:  * @link             http://www.4fb.de
 13:  * @link             http://www.contenido.org
 14:  */
 15: 
 16: defined('CON_FRAMEWORK') || die('Illegal call: Missing framework initialization - request aborted.');
 17: 
 18: /**
 19:  * Right collection
 20:  *
 21:  * @package Core
 22:  * @subpackage GenericDB_Model
 23:  */
 24: class cApiRightCollection extends ItemCollection {
 25: 
 26:     /**
 27:      * Constructor
 28:      */
 29:     public function __construct() {
 30:         global $cfg;
 31:         parent::__construct($cfg['tab']['rights'], 'idright');
 32:         $this->_setItemClass('cApiRight');
 33: 
 34:         // set the join partners so that joins can be used via link() method
 35:         $this->_setJoinPartner('cApiUserCollection');
 36:         $this->_setJoinPartner('cApiAreaCollection');
 37:         $this->_setJoinPartner('cApiActionCollection');
 38:         $this->_setJoinPartner('cApiCategoryCollection');
 39:         $this->_setJoinPartner('cApiClientCollection');
 40:         $this->_setJoinPartner('cApiLanguageCollection');
 41:     }
 42: 
 43:     /**
 44:      * Creates a right entry.
 45:      *
 46:      * @param string $userId
 47:      * @param int $idarea
 48:      * @param int $idaction
 49:      * @param int $idcat
 50:      * @param int $idclient
 51:      * @param int $idlang
 52:      * @param int $type
 53:      * @return cApiRight
 54:      */
 55:     public function create($userId, $idarea, $idaction, $idcat, $idclient, $idlang, $type) {
 56:         $oItem = parent::createNewItem();
 57: 
 58:         $oItem->set('user_id', $this->escape($userId));
 59:         $oItem->set('idarea', (int) $idarea);
 60:         $oItem->set('idaction', (int) $idaction);
 61:         $oItem->set('idcat', (int) $idcat);
 62:         $oItem->set('idclient', (int) $idclient);
 63:         $oItem->set('idlang', (int) $idlang);
 64:         $oItem->set('type', (int) $type);
 65: 
 66:         $oItem->store();
 67: 
 68:         return $oItem;
 69:     }
 70: 
 71:     /**
 72:      * Checks if a specific user has frontend access to a protected category.
 73:      *
 74:      * @param int $idcat
 75:      * @param string $userId
 76:      * @return bool
 77:      */
 78:     public function hasFrontendAccessByCatIdAndUserId($idcat, $userId) {
 79:         global $cfg;
 80: 
 81:         $sql = "SELECT :pk FROM `:rights` AS A, `:actions` AS B, `:area` AS C " . "WHERE B.name = 'front_allow' AND C.name = 'str' AND A.user_id = ':userid' AND " . "A.idcat = :idcat AND A.idarea = C.idarea AND B.idaction = A.idaction LIMIT 1";
 82: 
 83:         $params = array(
 84:             'pk' => $this->primaryKey,
 85:             'rights' => $this->table,
 86:             'actions' => $cfg['tab']['actions'],
 87:             'area' => $cfg['tab']['area'],
 88:             'userid' => $userId,
 89:             'idcat' => (int) $idcat
 90:         );
 91: 
 92:         $sql = $this->db->prepare($sql, $params);
 93:         $this->db->query($sql);
 94:         return ($this->db->nextRecord());
 95:     }
 96: 
 97:     /**
 98:      * Deletes right entries by user id.
 99:      *
100:      * @todo Implement functions to delete rights by area, action, cat, client,
101:      *       language.
102:      * @param string $userId
103:      * @return bool
104:      */
105:     public function deleteByUserId($userId) {
106:         $result = $this->deleteBy('user_id', $userId);
107:         return ($result > 0)? true : false;
108:     }
109: 
110: }
111: 
112: /**
113:  * Right item
114:  *
115:  * @package Core
116:  * @subpackage GenericDB_Model
117:  */
118: class cApiRight extends Item {
119: 
120:     /**
121:      * Constructor function
122:      *
123:      * @param mixed $mId Specifies the ID of item to load
124:      */
125:     public function __construct($mId = false) {
126:         global $cfg;
127:         parent::__construct($cfg['tab']['rights'], 'idright');
128:         $this->setFilters(array(), array());
129:         if ($mId !== false) {
130:             $this->loadByPrimaryKey($mId);
131:         }
132:     }
133: 
134: }
135: