class.ilRoleXmlImporter.php

Go to the documentation of this file.

<?php
/* Copyright (c) 1998-2009 ILIAS open source, Extended GPL, see docs/LICENSE */

include_once './Services/AccessControl/exceptions/class.ilRoleImporterException.php';

class ilRoleXmlImporter
{
    protected $role_folder = 0;
        protected $role = null;
        
        protected $xml = '';
        
        public function __construct($a_role_folder_id = 0)
        {
                $this->role_folder = $a_role_folder_id;
        }
        
        public function setXml($a_xml)
        {
                $this->xml = $a_xml;
        }
        
        public function getXml()
        {
                return $this->xml;
        }
        
        public function getRoleFolderId()
        {
                return $this->role_folder;
        }
        
        public function getRole()
        {
                return $this->role;
        }
        
        public function setRole(ilObject $role)
        {
                $this->role = $role;
        }
        
        public function import()
        {
                libxml_use_internal_errors(true);
                
                $root = simplexml_load_string($this->getXml());
                
                if(!$root instanceof SimpleXMLElement)
                {
                        throw new ilRoleImporterException($this->parseXmlErrors());
                }
                foreach($root->role as $roleElement)
                {
                        $this->importSimpleXml($roleElement);
                        // only one role is parsed
                        break;
                }
        }


        public function importSimpleXml(SimpleXMLElement $role)
        {
                global $rbacadmin, $rbacreview, $lng;

                $import_id = (string) $role['id'];
                $GLOBALS['ilLog']->write(__METHOD__.' Importing role with import id '. $import_id);

                if(!$this->initRole($import_id))
                {
                        return 0;
                }
                
                $this->getRole()->setTitle(trim((string) $role->title));
                $this->getRole()->setDescription(trim((string) $role->description));
                
                $type =  ilObject::_lookupType($this->getRoleFolderId(), true);
                $exp = explode("_", $this->getRole()->getTitle());

                if(count($exp) > 0 && $exp[0] === "il")
                {
                        if(count($exp) > 1 && $exp[1] !== $type)
                        {
                                throw new ilRoleImporterException(sprintf($lng->txt("rbac_cant_import_role_wrong_type"),
                                        $lng->txt('obj_'.$exp[1]),$lng->txt('obj_'.$type)));
                        }

                        $exp[3] = $this->getRoleFolderId();

                        $id = ilObjRole::_getIdsForTitle(implode("_", $exp));

                        if($id[0])
                        {
                                $GLOBALS['ilLog']->write(__METHOD__.': Overwrite role '. implode("_", $exp));
                                $this->getRole()->setId($id[0]);
                                $this->getRole()->read();
                        }
                }

                // Create or update
                if($this->getRole()->getId())
                {
                        $rbacadmin->deleteRolePermission($this->getRole()->getId(), $this->getRoleFolderId());
                        $this->getRole()->update();
                }
                else
                {
                        $this->getRole()->create();
                }

                
                $this->assignToRoleFolder();

                $protected = (string) $role['protected'];
                if($protected)
                {
                        $rbacadmin->setProtected(0,$this->getRole()->getId(),'y');
                }

                // Add operations
                $ops = $rbacreview->getOperations();
                $operations = array();
                foreach($ops as $ope)
                {
                        $operations[$ope['operation']] = $ope['ops_id'];
                }

                foreach($role->operations as $sxml_operations)
                {
                        foreach($sxml_operations as $sxml_op)
                        {
                                $ops_group = (string) $sxml_op['group'];
                                $ops_id = (int) $operations[trim((string) $sxml_op)];
                                $ops = trim((string) $sxml_op);
                                
                                if($ops_group and $ops_id)
                                {
                                        $rbacadmin->setRolePermission(
                                                $this->getRole()->getId(),
                                                $ops_group,
                                                array($ops_id),
                                                $this->getRoleFolderId() // #10161
                                        );
                                }
                                else
                                {
                                        $GLOBALS['ilLog']->write(__METHOD__.': Cannot create operation for...');
                                        $GLOBALS['ilLog']->write(__METHOD__.': New operation for group '. $ops_group);
                                        $GLOBALS['ilLog']->write(__METHOD__.': New operation '.$ops);
                                        $GLOBALS['ilLog']->write(__METHOD__.': New operation '. $ops_id);
                                }

                        }
                }

                return $this->getRole()->getId();
        }
        
        protected function assigntoRoleFolder()
        {
                global $rbacadmin, $rbacreview;
                
                if(!$this->getRoleFolderId())
                {
                        return;
                }

                if($rbacreview->isRoleAssignedToObject($this->getRole()->getId(),$this->getRoleFolderId()))
                {
                        return;
                }

                $rbacadmin->assignRoleToFolder(
                        $this->getRole()->getId(),
                        $this->getRoleFolderId(),
                        $this->getRole() instanceof ilObjRole ? 'y' : 'n'
                );
        }


        protected function initRole($import_id)
        {
                if($this->getRole())
                {
                        return true;
                }
                
                $obj_id = ilObject::_lookupObjIdByImportId($import_id);
                include_once './Services/Object/classes/class.ilObjectFactory.php';
                if($obj_id)
                {
                        $this->role = ilObjectFactory::getInstanceByObjId($obj_id,false);
                }
                if(!$this->getRole() instanceof ilObjRole or !$this->getRole() instanceof ilObjRoleTemplate)
                {
                        include_once './Services/AccessControl/classes/class.ilObjRoleTemplate.php';
                        $this->role = new ilObjRoleTemplate();
                }
                return true;
        }
        
        protected function parseXmlErrors()
        {
                $errors = '';
                
                foreach(libxml_get_errors() as $err)
                {
                        $errors .= $err->code.'<br/>';
                }
                return $errors;
        }
}
?>