content/classes/class.ilObjContentObjectAccess.php

Go to the documentation of this file.

<?php
/*
        +-----------------------------------------------------------------------------+
        | ILIAS open source                                                           |
        +-----------------------------------------------------------------------------+
        | Copyright (c) 1998-2006 ILIAS open source, University of Cologne            |
        |                                                                             |
        | This program is free software; you can redistribute it and/or               |
        | modify it under the terms of the GNU General Public License                 |
        | as published by the Free Software Foundation; either version 2              |
        | of the License, or (at your option) any later version.                      |
        |                                                                             |
        | This program is distributed in the hope that it will be useful,             |
        | but WITHOUT ANY WARRANTY; without even the implied warranty of              |
        | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               |
        | GNU General Public License for more details.                                |
        |                                                                             |
        | You should have received a copy of the GNU General Public License           |
        | along with this program; if not, write to the Free Software                 |
        | Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA. |
        +-----------------------------------------------------------------------------+
*/

include_once("classes/class.ilObjectAccess.php");

class ilObjContentObjectAccess extends ilObjectAccess
{
        function _checkAccess($a_cmd, $a_permission, $a_ref_id, $a_obj_id, $a_user_id = "")
        {
                global $ilUser, $lng, $rbacsystem, $ilAccess;

                if ($a_user_id == "")
                {
                        $a_user_id = $ilUser->getId();
                }

                switch ($a_cmd)
                {
                        case "view":

                                if(!ilObjContentObjectAccess::_lookupOnline($a_obj_id)
                                        && !$rbacsystem->checkAccessOfUser($a_user_id,'write',$a_ref_id))
                                {
                                        $ilAccess->addInfoItem(IL_NO_OBJECT_ACCESS, $lng->txt("offline"));
                                        return false;
                                }
                                break;
                                
                        case "continue":
                        
                                // no continue command for anonymous user
                                if ($ilUser->getId() == ANONYMOUS_USER_ID)
                                {
                                        $ilAccess->addInfoItem(IL_NO_OBJECT_ACCESS, $lng->txt("lm_no_continue_for_anonym"));
                                        return false;
                                }
                        
                                if(!ilObjContentObjectAccess::_lookupOnline($a_obj_id)
                                        && !$rbacsystem->checkAccessOfUser($a_user_id,'write',$a_ref_id))
                                {
                                        $ilAccess->addInfoItem(IL_NO_OBJECT_ACCESS, $lng->txt("offline"));
                                        return false;
                                }

                                if (ilObjContentObjectAccess::_getLastAccessedPage($a_ref_id,$a_user_id) <= 0)
                                {
                                        $ilAccess->addInfoItem(IL_NO_OBJECT_ACCESS, $lng->txt("not_accessed_yet"));
                                        return false;
                                }
                                break;
                                
                        // for permission query feature
                        case "info":
                                if(!ilObjContentObjectAccess::_lookupOnline($a_obj_id))
                                {
                                        $ilAccess->addInfoItem(IL_NO_OBJECT_ACCESS, $lng->txt("offline"));
                                }
                                else
                                {
                                        $ilAccess->addInfoItem(IL_STATUS_MESSAGE, $lng->txt("online"));
                                }
                                break;

                }

                switch ($a_permission)
                {
                        case "read":
                        case "visible":
                                if (!ilObjContentObjectAccess::_lookupOnline($a_obj_id) &&
                                        (!$rbacsystem->checkAccessOfUser($a_user_id,'write', $a_ref_id)))
                                {
                                        $ilAccess->addInfoItem(IL_NO_OBJECT_ACCESS, $lng->txt("offline"));
                                        return false;
                                }
                                break;
                }


                return true;
        }

        //
        // access relevant methods
        //

        function _lookupOnline($a_id)
        {
                global $ilDB;

                $q = "SELECT * FROM content_object WHERE id = '".$a_id."'";
                $lm_set = $ilDB->query($q);
                $lm_rec = $lm_set->fetchRow(DB_FETCHMODE_ASSOC);

                return ilUtil::yn2tf($lm_rec["online"]);
        }

        function _getLastAccessedPage($a_ref_id, $a_user_id = "")
        {
                global $ilDB, $ilUser;
                
                if ($a_user_id == "")
                {
                        $a_user_id = $ilUser->getId();
                }

                $q = "SELECT * FROM lo_access WHERE ".
                        "usr_id = ".$ilDB->quote($a_user_id)." AND ".
                        "lm_id = ".$ilDB->quote($a_ref_id);
                        
                $lm_id = ilObject::_lookupObjId($a_ref_id);

                $acc_set = $ilDB->query($q);

                if ($acc_rec = $acc_set->fetchRow(DB_FETCHMODE_ASSOC))
                {
                        $mtree = new ilTree($lm_id);
                        $mtree->setTableNames('lm_tree','lm_data');
                        $mtree->setTreeTablePK("lm_id");
                        if ($mtree->isInTree($acc_rec["obj_id"]))
                        {
                                return $acc_rec["obj_id"];
                        }
                }
                
                return 0;
        }

        function _checkGoto($a_target)
        {
                global $ilAccess;
                
                $t_arr = explode("_", $a_target);

                if (($t_arr[0] != "lm" &&  $t_arr[0] != "dbk" &&  $t_arr[0] != "st"
                        &&  $t_arr[0] != "pg")
                        || ((int) $t_arr[1]) <= 0)
                {
                        return false;
                }

                if ($t_arr[0] == "lm" || $t_arr[0] == "dbk")
                {
                        if ($ilAccess->checkAccess("read", "", $t_arr[1]) ||
                                $ilAccess->checkAccess("visible", "", $t_arr[1]))
                        {
                                return true;
                        }
                }
                else
                {
                        if ($t_arr[2] > 0)
                        {
                                $ref_ids = array($t_arr[2]);
                        }
                        else
                        {
                                // determine learning object
                                include_once("content/classes/class.ilLMObject.php");
                                $lm_id = ilLMObject::_lookupContObjID($t_arr[1]);
                                $ref_ids = ilObject::_getAllReferences($lm_id);
                        }
                        // check read permissions
                        foreach ($ref_ids as $ref_id)
                        {
                                // Permission check
                                if ($ilAccess->checkAccess("read", "", $ref_id))
                                {
                                        return true;
                                }
                        }

                }
                return false;
        }

}

?>