Alex
fd4d2d6662
* Access Controls: Preserve query string parameters across list and edit pages * Update access_controls_reload.php * Update access_control_edit.php
243 lines
10 KiB
PHP
243 lines
10 KiB
PHP
<?php
|
|
/*
|
|
FusionPBX
|
|
Version: MPL 1.1
|
|
|
|
The contents of this file are subject to the Mozilla Public License Version
|
|
1.1 (the "License"); you may not use this file except in compliance with
|
|
the License. You may obtain a copy of the License at
|
|
http://www.mozilla.org/MPL/
|
|
|
|
Software distributed under the License is distributed on an "AS IS" basis,
|
|
WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
|
|
for the specific language governing rights and limitations under the
|
|
License.
|
|
|
|
The Original Code is FusionPBX
|
|
|
|
The Initial Developer of the Original Code is
|
|
Mark J Crane <markjcrane@fusionpbx.com>
|
|
Portions created by the Initial Developer are Copyright (C) 2018-2026
|
|
the Initial Developer. All Rights Reserved.
|
|
|
|
Contributor(s):
|
|
Mark J Crane <markjcrane@fusionpbx.com>
|
|
*/
|
|
|
|
//includes files
|
|
require_once dirname(__DIR__, 2) . "/resources/require.php";
|
|
require_once "resources/check_auth.php";
|
|
|
|
//check permissions
|
|
if (!permission_exists('access_control_view')) {
|
|
echo "access denied";
|
|
exit;
|
|
}
|
|
|
|
//add multi-lingual support
|
|
$language = new text;
|
|
$text = $language->get();
|
|
|
|
//define variable
|
|
$search = '';
|
|
|
|
//add the settings object
|
|
$settings = new settings(["domain_uuid" => $_SESSION['domain_uuid'], "user_uuid" => $_SESSION['user_uuid']]);
|
|
|
|
//set from session variables
|
|
$list_row_edit_button = $settings->get('theme', 'list_row_edit_button', 'false');
|
|
|
|
// Set variables from http GET parameters
|
|
$page = is_numeric($_GET['page'] ?? '') ? $_GET['page'] : 0;
|
|
$order_by = preg_replace('#[^a-zA-Z0-9_\-]#', '', ($_GET['order_by'] ?? 'access_control_name'));
|
|
$order = ($_GET['order'] ?? '') === 'desc' ? 'desc' : 'asc';
|
|
$search = $_GET['search'] ?? '';
|
|
|
|
// Build the query string
|
|
$param = [];
|
|
if (!empty($page)) {
|
|
$param['page'] = $page;
|
|
}
|
|
if (!empty($_GET['order_by'])) {
|
|
$param['order_by'] = $order_by;
|
|
}
|
|
if (!empty($_GET['order'])) {
|
|
$param['order'] = $order;
|
|
}
|
|
if (!empty($search)) {
|
|
$param['search'] = $search;
|
|
}
|
|
$query_string = http_build_query($param);
|
|
|
|
//get the http post data
|
|
if (!empty($_POST['access_controls'])) {
|
|
$action = $_POST['action'] ?? '';
|
|
$access_controls = $_POST['access_controls'];
|
|
}
|
|
|
|
//process the http post data by action
|
|
if (!empty($action) && !empty($access_controls) && count($access_controls) > 0) {
|
|
switch ($action) {
|
|
case 'copy':
|
|
if (permission_exists('access_control_add')) {
|
|
$obj = new access_controls;
|
|
$obj->copy($access_controls);
|
|
}
|
|
break;
|
|
case 'delete':
|
|
if (permission_exists('access_control_delete')) {
|
|
$obj = new access_controls;
|
|
$obj->delete($access_controls);
|
|
}
|
|
break;
|
|
}
|
|
|
|
//redirect the user
|
|
header('Location: access_controls.php'.($query_string ? '?'.$query_string : ''));
|
|
exit;
|
|
}
|
|
|
|
|
|
//get the count
|
|
$sql = "select count(access_control_uuid) ";
|
|
$sql .= "from v_access_controls ";
|
|
if (!empty($search)) {
|
|
$sql .= "where (";
|
|
$sql .= " lower(access_control_name) like :search ";
|
|
$sql .= " or lower(access_control_default) like :search ";
|
|
$sql .= " or lower(access_control_description) like :search ";
|
|
$sql .= ") ";
|
|
$parameters['search'] = '%'.lower_case($search).'%';
|
|
}
|
|
$num_rows = $database->select($sql, $parameters ?? null, 'column');
|
|
|
|
//get the list
|
|
$sql = "select ";
|
|
$sql .= "access_control_uuid, ";
|
|
$sql .= "access_control_name, ";
|
|
$sql .= "access_control_default, ";
|
|
$sql .= "access_control_description ";
|
|
$sql .= "from v_access_controls ";
|
|
if (!empty($search)) {
|
|
$sql .= "where (";
|
|
$sql .= " lower(access_control_name) like :search ";
|
|
$sql .= " or lower(access_control_default) like :search ";
|
|
$sql .= " or lower(access_control_description) like :search ";
|
|
$sql .= ") ";
|
|
$parameters['search'] = '%'.lower_case($search).'%';
|
|
}
|
|
$sql .= order_by($order_by, $order, 'access_control_name', 'asc');
|
|
$access_controls = $database->select($sql, $parameters ?? null, 'all');
|
|
unset($sql, $parameters);
|
|
|
|
//create token
|
|
$object = new token;
|
|
$token = $object->create($_SERVER['PHP_SELF']);
|
|
|
|
//additional includes
|
|
$document['title'] = $text['title-access_controls'];
|
|
require_once "resources/header.php";
|
|
|
|
//show the content
|
|
echo "<div class='action_bar' id='action_bar'>\n";
|
|
echo " <div class='heading'><b>".$text['title-access_controls']."</b><div class='count'>".number_format($num_rows)."</div></div>\n";
|
|
echo " <div class='actions'>\n";
|
|
echo button::create(['label'=>$text['button-reload'],'icon'=>$settings->get('theme', 'button_icon_reload'),'type'=>'button','id'=>'button_reload','link'=>'access_controls_reload.php'.($query_string ? '?'.$query_string : ''),'style'=>'margin-right: 15px;']);
|
|
if (permission_exists('access_control_add')) {
|
|
echo button::create(['type'=>'button','label'=>$text['button-add'],'icon'=>$settings->get('theme', 'button_icon_add'),'id'=>'btn_add','name'=>'btn_add','link'=>'access_control_edit.php'.($query_string ? '?'.$query_string : '')]);
|
|
}
|
|
if (permission_exists('access_control_add') && $access_controls) {
|
|
echo button::create(['type'=>'button','label'=>$text['button-copy'],'icon'=>$settings->get('theme', 'button_icon_copy'),'id'=>'btn_copy','name'=>'btn_copy','style'=>'display:none;','onclick'=>"modal_open('modal-copy','btn_copy');"]);
|
|
}
|
|
if (permission_exists('access_control_delete') && $access_controls) {
|
|
echo button::create(['type'=>'button','label'=>$text['button-delete'],'icon'=>$settings->get('theme', 'button_icon_delete'),'id'=>'btn_delete','name'=>'btn_delete','style'=>'display:none;','onclick'=>"modal_open('modal-delete','btn_delete');"]);
|
|
}
|
|
echo "<form id='form_search' class='inline' method='get'>\n";
|
|
echo "<input type='text' class='txt list-search' name='search' id='search' value=\"".escape($search)."\" placeholder=\"".$text['label-search']."\" onkeydown=''>";
|
|
echo button::create(['label'=>$text['button-search'],'icon'=>$settings->get('theme', 'button_icon_search'),'type'=>'submit','id'=>'btn_search']);
|
|
//echo button::create(['label'=>$text['button-reset'],'icon'=>$settings->get('theme', 'button_icon_reset'),'type'=>'button','id'=>'btn_reset','link'=>'access_controls.php','style'=>($search == '' ? 'display: none;' : null)]);
|
|
echo " </form>\n";
|
|
echo " </div>\n";
|
|
echo " <div style='clear: both;'></div>\n";
|
|
echo "</div>\n";
|
|
|
|
if (permission_exists('access_control_add') && $access_controls) {
|
|
echo modal::create(['id'=>'modal-copy','type'=>'copy','actions'=>button::create(['type'=>'button','label'=>$text['button-continue'],'icon'=>'check','id'=>'btn_copy','style'=>'float: right; margin-left: 15px;','collapse'=>'never','onclick'=>"modal_close(); list_action_set('copy'); list_form_submit('form_list');"])]);
|
|
}
|
|
if (permission_exists('access_control_delete') && $access_controls) {
|
|
echo modal::create(['id'=>'modal-delete','type'=>'delete','actions'=>button::create(['type'=>'button','label'=>$text['button-continue'],'icon'=>'check','id'=>'btn_delete','style'=>'float: right; margin-left: 15px;','collapse'=>'never','onclick'=>"modal_close(); list_action_set('delete'); list_form_submit('form_list');"])]);
|
|
}
|
|
|
|
echo $text['title_description-access_controls']."\n";
|
|
echo "<br /><br />\n";
|
|
|
|
echo "<form id='form_list' method='post'>\n";
|
|
echo "<input type='hidden' id='action' name='action' value=''>\n";
|
|
|
|
echo "<div class='card'>\n";
|
|
echo "<table class='list'>\n";
|
|
echo "<tr class='list-header'>\n";
|
|
if (permission_exists('access_control_add') || permission_exists('access_control_edit') || permission_exists('access_control_delete')) {
|
|
echo " <th class='checkbox'>\n";
|
|
echo " <input type='checkbox' id='checkbox_all' name='checkbox_all' onclick='list_all_toggle(); checkbox_on_change(this);' ".(!empty($access_controls) ?: "style='visibility: hidden;'").">\n";
|
|
echo " </th>\n";
|
|
}
|
|
echo th_order_by('access_control_name', $text['label-access_control_name'], $order_by, $order, null, null, $query_string);
|
|
echo th_order_by('access_control_default', $text['label-access_control_default'], $order_by, $order, null, null, $query_string);
|
|
echo " <th class='hide-sm-dn'>".$text['label-access_control_description']."</th>\n";
|
|
if (permission_exists('access_control_edit') && $list_row_edit_button == 'true') {
|
|
echo " <td class='action-button'> </td>\n";
|
|
}
|
|
echo "</tr>\n";
|
|
|
|
if (!empty($access_controls) && count($access_controls) > 0) {
|
|
$x = 0;
|
|
foreach ($access_controls as $row) {
|
|
$list_row_url = '';
|
|
if (permission_exists('access_control_view')) {
|
|
$list_row_url = "access_control_edit.php?id=".urlencode($row['access_control_uuid']).($query_string ? '&'.$query_string : '');
|
|
if (!empty($row['domain_uuid']) && $row['domain_uuid'] != $_SESSION['domain_uuid'] && permission_exists('domain_select')) {
|
|
$list_row_url .= '&domain_uuid='.urlencode($row['domain_uuid']).'&domain_change=true';
|
|
}
|
|
}
|
|
echo "<tr class='list-row' href='".$list_row_url."'>\n";
|
|
if (permission_exists('access_control_add') || permission_exists('access_control_edit') || permission_exists('access_control_delete')) {
|
|
echo " <td class='checkbox'>\n";
|
|
echo " <input type='checkbox' name='access_controls[$x][checked]' id='checkbox_".$x."' value='true' onclick=\"checkbox_on_change(this); if (!this.checked) { document.getElementById('checkbox_all').checked = false; }\">\n";
|
|
echo " <input type='hidden' name='access_controls[$x][uuid]' value='".escape($row['access_control_uuid'])."' />\n";
|
|
echo " </td>\n";
|
|
}
|
|
echo " <td>\n";
|
|
if (permission_exists('access_control_edit')) {
|
|
echo " <a href='".$list_row_url."' title=\"".$text['button-edit']."\">".escape($row['access_control_name'])."</a>\n";
|
|
}
|
|
else {
|
|
echo " ".escape($row['access_control_name']);
|
|
}
|
|
echo " </td>\n";
|
|
echo " <td>".escape($row['access_control_default'])."</td>\n";
|
|
echo " <td class='description overflow hide-sm-dn'>".escape($row['access_control_description'])."</td>\n";
|
|
if (permission_exists('access_control_edit') && $list_row_edit_button == 'true') {
|
|
echo " <td class='action-button'>\n";
|
|
echo button::create(['type'=>'button','title'=>$text['button-edit'],'icon'=>$settings->get('theme', 'button_icon_edit'),'link'=>$list_row_url]);
|
|
echo " </td>\n";
|
|
}
|
|
echo "</tr>\n";
|
|
$x++;
|
|
}
|
|
unset($access_controls);
|
|
}
|
|
|
|
echo "</table>\n";
|
|
echo "</div>\n";
|
|
echo "<br />\n";
|
|
|
|
echo "<input type='hidden' name='".$token['name']."' value='".$token['hash']."'>\n";
|
|
|
|
echo "</form>\n";
|
|
|
|
//include the footer
|
|
require_once "resources/footer.php";
|
|
|
|
?>
|