ilObjRoleGUI Class Reference

Class ilObjRoleGUI. More...

Inheritance diagram for ilObjRoleGUI:

Collaboration diagram for ilObjRoleGUI:

Public Member Functions
	__construct ($a_data, $a_id, $a_call_by_reference=false, $a_prepare_output=true)
	Constructor public. More...
	executeCommand ()
	getParentRefId ()
	Get ref id of current object (not role folder id) More...
	getParentObjId ()
	Get obj_id of current object. More...
	getParentType ()
	get type of current object (not role folder) More...
	setBackTarget ($a_text, $a_link)
	set back tab target More...
	getBackTarget ()
	getAdminTabs ()
	admin and normal tabs are equal for roles More...
	listDesktopItemsObject ()
	askDeleteDesktopItemObject ()
	deleteDesktopItemsObject ()
	selectDesktopItemObject ()
	assignDesktopItemObject ()
	createObject ()
	Only called from administration -> role folder ? Otherwise this check access is wrong. More...
	editObject ()
	Edit role properties. More...
	saveObject ()
	Save new role. More...
	updateObject ()
	Save role settings. More...
	permSaveObject ($a_show_admin_permissions=false)
	save permissions More...
	adoptPermSaveObject ()
	copy permissions from role More...
	assignSaveObject ()
	wrapper for renamed function More...
	addUserObject ($a_user_ids)
	Assign user (callback from ilRepositorySearchGUI) More...
	deassignUserObject ()
	de-assign users from role More...
	userassignmentObject ()
	display user assignment panel More...
	cancelObject ()
	cancelObject is called when an operation is canceled, method links back public More...
	listUsersRoleObject ()
	__prepareOutput ()
	__setHeader ()
	getTabs ()
	mailToRoleObject ()
	checkAccess ($a_perm_global, $a_perm_obj='')
Public Member Functions inherited from ilObjectGUI
	executeCommand ()
	execute command More...
	withReferences ()
	determines wether objects are referenced or not (got ref ids or not) More...
	setCreationMode ($a_mode=true)
	if true, a creation screen is displayed the current $_GET[ref_id] don't belong to the current class! the mode is determined in ilrepositorygui More...
	getCreationMode ()
	get creation mode More...
	prepareOutput ($a_show_subobjects=true)
	prepare output More...
	getAdminTabs ()
	administration tabs show only permissions and trash folder More...
	getHTML ()
	confirmedDeleteObject ()
	confirmed deletion of object -> objects are moved to trash or deleted immediately, if trash is disabled More...
	cancelDeleteObject ()
	cancel deletion of object More...
	cancelObject ()
	cancel action and go back to previous page public More...
	createObject ()
	create new object form More...
	cancelCreation ()
	cancel create action and go back to repository parent More...
	saveObject ()
	save object More...
	getDidacticTemplateVar ($a_type)
	Get didactic template setting from creation screen. More...
	putObjectInTree (ilObject $a_obj, $a_parent_node_id=null)
	Add object to tree at given position. More...
	editObject ()
	edit object More...
	addExternalEditFormCustom (ilPropertyFormGUI $a_form)
	updateObject ()
	updates object entry in object_data More...
	getFormAction ($a_cmd, $a_formaction="")
	get form action for command (command is method name without "Object", e.g. More...
	isVisible ($a_ref_id, $a_type)
	viewObject ()
	list childs of current object More...
	deleteObject ($a_error=false)
	Display deletion confirmation screen. More...
	cloneAllObject ()
	Clone single (not container object) Method is overwritten in ilContainerGUI. More...

Data Fields
const	MODE_GLOBAL_UPDATE = 1
const	MODE_GLOBAL_CREATE = 2
const	MODE_LOCAL_UPDATE = 3
const	MODE_LOCAL_CREATE = 4
	$type
	$ctrl
Data Fields inherited from ilObjectGUI
const	COPY_WIZARD_NEEDS_PAGE = 1
	$objDefinition
	$tpl
	$tree
	$lng
	$data
	$object
	$ref_id
	$obj_id
	$maxcount
	$formaction
	$return_location
	$target_frame
	$tab_target_script
	$actions
	$sub_objects
	$omit_locator = false
const	CFORM_NEW = 1
const	CFORM_IMPORT = 2
const	CFORM_CLONE = 3

Protected Member Functions
	getContainerType ()
	Get type of role container. More...
	showDefaultPermissionSettings ()
	check if default permissions are shown or not More...
	initFormRoleProperties ($a_mode)
	Create role prperty form. More...
	loadRoleProperties (ilObjRole $role)
	Store form input in role object. More...
	readRoleProperties (ilObjRole $role)
	Read role properties and write them to form. More...
	checkDuplicate ($a_role_id=0)
	Check if role with same name already exists in this folder. More...
	permObject ($a_show_admin_permissions=false)
	Show template permissions. More...
	adminPermObject ()
	Show administration permissions. More...
	adminPermSaveObject ()
	Save admin permissions. More...
	adoptPermObject ()
	confirmDeleteRoleObject ()
	Show delete confirmation screen. More...
	performDeleteRoleObject ()
	Delete role. More...
	addAdminLocatorItems ($a_do_not_add_object=false)
	isChangeExistingObjectsConfirmationRequired ()
	Check if a confirmation about further settings is required or not. More...
	showChangeExistingObjectsConfirmation ()
	Show confirmation screen. More...
	changeExistingObjectsObject ()
	Change existing objects. More...
	setSubTabs ($a_tab)
	Set sub tabs. More...
	addToClipboardObject ()
	Add selected users to user clipboard. More...
	addLocatorItems ()
	ensureRoleAccessForContext ()
Protected Member Functions inherited from ilObjectGUI
	assignObject ()
	setTitleAndDescription ()
	called by prepare output More...
	initHeaderAction ($a_sub_type=null, $a_sub_id=null)
	Add header action menu. More...
	insertHeaderAction ($a_list_gui)
	Insert header action into main template. More...
	addHeaderAction ()
	Add header action menu. More...
	redrawHeaderActionObject ()
	Ajax call: redraw action header only. More...
	showMountWebfolderIcon ()
	setTabs ()
	set admin tabs public More...
	setAdminTabs ()
	set admin tabs public More...
	setLocator ()
	set Locator More...
	addLocatorItems ()
	should be overwritten to add object specific items (repository items are preloaded) More...
	omitLocator ($a_omit=true)
	addAdminLocatorItems ($a_do_not_add_object=false)
	should be overwritten to add object specific items (repository items are preloaded) More...
	initCreationForms ($a_new_type)
	Init creation froms. More...
	getCreationFormsHTML (array $a_forms)
	Get HTML for creation forms (accordion) More...
	initCreateForm ($a_new_type)
	Init object creation form. More...
	initDidacticTemplate (ilPropertyFormGUI $form)
	Show didactic template types. More...
	addDidacticTemplateOptions (array &$a_options)
	Add custom templates. More...
	afterSave (ilObject $a_new_object)
	Post (successful) object creation hook. More...
	initEditForm ()
	Init object edit form. More...
	initEditCustomForm (ilPropertyFormGUI $a_form)
	Add custom fields to update form. More...
	getEditFormValues ()
	Get values for edit form. More...
	getEditFormCustomValues (array &$a_values)
	Add values to custom edit fields. More...
	validateCustom (ilPropertyFormGUI $a_form)
	Validate custom values (if not possible with checkInput()) More...
	updateCustom (ilPropertyFormGUI $a_form)
	Insert custom update form values into object. More...
	afterUpdate ()
	Post (successful) object update hook. More...
	initImportForm ($a_new_type)
	Init object import form. More...
	importFileObject ($parent_id=null, $a_catch_errors=true)
	Import. More...
	afterImport (ilObject $a_new_object)
	Post (successful) object import hook. More...
	setFormAction ($a_cmd, $a_formaction)
	set specific form action for command More...
	getReturnLocation ($a_cmd, $a_location="")
	get return location for command (command is method name without "Object", e.g. More...
	setReturnLocation ($a_cmd, $a_location)
	set specific return location for command More...
	getTargetFrame ($a_cmd, $a_target_frame="")
	get target frame for command (command is method name without "Object", e.g. More...
	setTargetFrame ($a_cmd, $a_target_frame)
	set specific target frame for command More...
	showPossibleSubObjects ()
	show possible subobjects (pulldown menu) More...
	getTemplateFile ($a_cmd, $a_type="")
	get a template blockfile format: tpl. More...
	getTabs ()
	get tabs abstract method. More...
	__showButton ($a_cmd, $a_text, $a_target='')
	hitsperpageObject ()
&	__initTableGUI ()
	__setTableGUIBasicData (&$tbl, &$result_set, $a_from="")
	standard implementation for tables use 'from' variable use different initial setting of table More...
	redirectToRefId ($a_ref_id, $a_cmd="")
	redirects to (repository) view per ref id usually to a container and usually used at the end of a save/import method where the object gui type (of the new object) doesn't match with the type of the current $_GET["ref_id"] value More...
	fillCloneTemplate ($a_tpl_varname, $a_type)
	Fill object clone template This method can be called from any object GUI class that wants to offer object cloning. More...
	getCenterColumnHTML ()
	Get center column. More...
	getRightColumnHTML ()
	Display right column. More...
	setColumnSettings (ilColumnGUI $column_gui)
	May be overwritten in subclasses. More...
	checkPermission ($a_perm, $a_cmd="", $a_type="", $a_ref_id=null)
	Check permission and redirect on error. More...
	checkPermissionBool ($a_perm, $a_cmd="", $a_type="", $a_ref_id=null)
	Check permission. More...
	enableDragDropFileUpload ()
	Enables the file upload into this object by dropping files. More...
	handleAutoRating (ilObject $a_new_obj)
	Activate rating automatically if parent container setting. More...

Protected Attributes
	$obj_ref_id = 0
	$obj_obj_id = 0
	$obj_obj_type = ''
	$container_type = ''
Protected Attributes inherited from ilObjectGUI
	$ilErr
	$locator
	$user
	$access
	$settings
	$rbacreview
	$toolbar
	$rbacsystem
	$tmp_import_dir
	$tabs_gui = null
	$ctrl

Additional Inherited Members
Static Public Member Functions inherited from ilObjectGUI
static	_gotoRepositoryRoot ($a_raise_error=false)
	Goto repository root. More...
static	_gotoRepositoryNode ($a_ref_id, $a_cmd="frameset")
	Goto repository root. More...

Detailed Description

Class ilObjRoleGUI.

Author

Stefan Meyer <smeyer.de>

Sascha Hofmann sasch.nosp@m.ahof.nosp@m.mann@.nosp@m.gmx..nosp@m.de

Version

$Id$

ilObjRoleGUI: ilRepositorySearchGUI, ilExportGUI

Definition at line 20 of file class.ilObjRoleGUI.php.

Constructor & Destructor Documentation

__construct()

ilObjRoleGUI::__construct	(		$a_data,
			$a_id,
			$a_call_by_reference = false,
			$a_prepare_output = true
	)

Constructor public.

Definition at line 47 of file class.ilObjRoleGUI.php.

References ilObjectGUI\$lng, ilObjectGUI\$tree, ilObject\_lookupObjId(), ilObject\_lookupType(), array, getParentObjId(), and getParentRefId().

    {
        global $tree,$lng;

        $lng->loadLanguageModule('rbac');

        //TODO: move this to class.ilias.php
        define("USER_FOLDER_ID", 7);
        
        // Add ref_id of object that contains this role folder
        
        $this->obj_ref_id =
                (
                    (int) $_REQUEST['rolf_ref_id'] ?
                (int) $_REQUEST['rolf_ref_id'] :
                (int) $_REQUEST['ref_id']
                );
        
        $this->obj_obj_id = ilObject::_lookupObjId($this->getParentRefId());
        $this->obj_obj_type = ilObject::_lookupType($this->getParentObjId());
        
        $this->container_type = ilObject::_lookupType(ilObject::_lookupObjId($this->obj_ref_id));

        $this->type = "role";
        parent::__construct($a_data, $a_id, $a_call_by_reference, false);
        $this->ctrl->saveParameter($this, array('obj_id', 'rolf_ref_id'));
    }

Here is the call graph for this function:

Member Function Documentation

__prepareOutput()

ilObjRoleGUI::__prepareOutput

(

)

Definition at line 1290 of file class.ilObjRoleGUI.php.

References __setHeader(), ilUtil\infoPanel(), and ilUtil\sendInfo().

    {
        // output objects
        $this->tpl->addBlockFile("CONTENT", "content", "tpl.adm_content.html");
        $this->tpl->addBlockFile("STATUSLINE", "statusline", "tpl.statusline.html");

        // output message
        if ($this->message) {
            ilUtil::sendInfo($this->message);
        }

        // display infopanel if something happened
        ilUtil::infoPanel();

        // set header
        $this->__setHeader();
    }

Here is the call graph for this function:

__setHeader()

ilObjRoleGUI::__setHeader

(

)

Definition at line 1308 of file class.ilObjRoleGUI.php.

References ilUtil\getImagePath(), getTabs(), and object.

Referenced by __prepareOutput().

    {
        $this->tpl->setTitle($this->lng->txt('role'));
        $this->tpl->setDescription($this->object->getTitle());
        $this->tpl->setTitleIcon(ilUtil::getImagePath("icon_role.svg"));

        $this->getTabs($this->tabs_gui);
    }

Here is the call graph for this function:

Here is the caller graph for this function:

addAdminLocatorItems()

ilObjRoleGUI::addAdminLocatorItems (   $a_do_not_add_object = false )

protected

Definition at line 1321 of file class.ilObjRoleGUI.php.

References $_GET, $DIC, ilObject\_lookupObjId(), ilObject\_lookupType(), and object.

    {
        global $DIC;

        $ilLocator = $DIC['ilLocator'];

        if (
            $_GET["admin_mode"] == "settings"
            && $_GET["ref_id"] == ROLE_FOLDER_ID) {     // system settings
            parent::addAdminLocatorItems(true);

            $ilLocator->addItem(
                $this->lng->txt("obj_" . ilObject::_lookupType(ilObject::_lookupObjId($_GET["ref_id"]))),
                $this->ctrl->getLinkTargetByClass("ilobjrolefoldergui", 'view')
            );
            
            if ($_GET["obj_id"] > 0) {
                $ilLocator->addItem(
                    $this->object->getTitle(),
                    $this->ctrl->getLinkTarget($this, 'perm')
                );
            }
        } else {
            parent::addAdminLocatorItems($a_do_not_add_object);
        }
    }

Here is the call graph for this function:

addLocatorItems()

ilObjRoleGUI::addLocatorItems ( )

protected

Definition at line 1617 of file class.ilObjRoleGUI.php.

References $_GET, $DIC, ilObjRole\_getTranslation(), array, and object.

    {
        global $DIC;

        $ilLocator = $DIC['ilLocator'];

        if ($_GET["admin_mode"] == "") {
            $this->ctrl->setParameterByClass(
                "ilobjrolegui",
                "obj_id",
                (int) $_GET["obj_id"]
            );
            $ilLocator->addItem(
                ilObjRole::_getTranslation($this->object->getTitle()),
                $this->ctrl->getLinkTargetByClass(
                    array(
                        "ilpermissiongui",
                        "ilobjrolegui"),
                    "perm"
                )
            );
        }
    }

Here is the call graph for this function:

addToClipboardObject()

ilObjRoleGUI::addToClipboardObject ( )

protected

Add selected users to user clipboard.

Definition at line 1595 of file class.ilObjRoleGUI.php.

References $_POST, $GLOBALS, $ilCtrl, ilObjectGUI\$lng, $users, array, ilUserClipboard\getInstance(), ilUtil\sendFailure(), and ilUtil\sendSuccess().

    {
        global $lng, $ilCtrl;
        
        $users = (array) $_POST['user_id'];
        if (!count($users)) {
            ilUtil::sendFailure($this->lng->txt('select_one'), true);
            $ilCtrl->redirect($this, 'userassignment');
        }
        include_once './Services/User/classes/class.ilUserClipboard.php';
        $clip = ilUserClipboard::getInstance($GLOBALS['ilUser']->getId());
        $clip->add($users);
        $clip->save();

        $lng->loadLanguageModule('user');
        ilUtil::sendSuccess($this->lng->txt('clipboard_user_added'), true);
        $ilCtrl->redirect($this, 'userassignment');
    }

Here is the call graph for this function:

addUserObject()

ilObjRoleGUI::addUserObject

(

$a_user_ids

)

Assign user (callback from ilRepositorySearchGUI)

Parameters

array

$a_user_ids

Array of user ids

Returns

Definition at line 1043 of file class.ilObjRoleGUI.php.

References $GLOBALS, $obj_ref_id, ilObjectGUI\$rbacreview, ilObjectGUI\$user, checkAccess(), object, ilUtil\sendFailure(), ilUtil\sendInfo(), and ilUtil\sendSuccess().

    {
        global $rbacreview,$rbacadmin;
        
        if (!$this->checkAccess('edit_userassignment', 'edit_permission')) {
            ilUtil::sendFailure($this->lng->txt('msg_no_perm_assign_user_to_role'), true);
            return false;
        }
        if (!$rbacreview->isAssignable($this->object->getId(), $this->obj_ref_id) &&
            $this->obj_ref_id != ROLE_FOLDER_ID) {
            ilUtil::sendFailure($this->lng->txt('err_role_not_assignable'), true);
            return false;
        }
        if (!$a_user_ids) {
            $GLOBALS['lng']->loadLanguageModule('search');
            ilUtil::sendFailure($this->lng->txt('search_err_user_not_exist'), true);
            return false;
        }

        $assigned_users_all = $rbacreview->assignedUsers($this->object->getId());
                
        // users to assign
        $assigned_users_new = array_diff($a_user_ids, array_intersect($a_user_ids, $assigned_users_all));
        
        // selected users all already assigned. stop
        if (count($assigned_users_new) == 0) {
            ilUtil::sendInfo($this->lng->txt("rbac_msg_user_already_assigned"), true);
            $this->ctrl->redirect($this, 'userassignment');
        }
        
        // assign new users
        foreach ($assigned_users_new as $user) {
            $rbacadmin->assignUser($this->object->getId(), $user, false);
        }
        
        // update object data entry (to update last modification date)
        $this->object->update();

        ilUtil::sendSuccess($this->lng->txt("msg_userassignment_changed"), true);
        $this->ctrl->redirect($this, 'userassignment');
    }

Here is the call graph for this function:

adminPermObject()

ilObjRoleGUI::adminPermObject ( )

protected

Show administration permissions.

Returns

Definition at line 759 of file class.ilObjRoleGUI.php.

References permObject().

    {
        return $this->permObject(true);
    }

Here is the call graph for this function:

adminPermSaveObject()

ilObjRoleGUI::adminPermSaveObject ( )

protected

Save admin permissions.

Returns

Definition at line 768 of file class.ilObjRoleGUI.php.

References permSaveObject().

    {
        return $this->permSaveObject(true);
    }

Here is the call graph for this function:

adoptPermObject()

ilObjRoleGUI::adoptPermObject ( )

protected

Definition at line 773 of file class.ilObjRoleGUI.php.

References $id, $key, $output, ilObjectGUI\$rbacreview, $tbl, ilObjRole\_getTranslation(), ilUtil\_sortIds(), array, and object.

Referenced by adoptPermSaveObject().

    {
        global $rbacreview;

        $output = array();
        
        $parent_role_ids = $rbacreview->getParentRoleIds($this->obj_ref_id, true);
        $ids = array();
        foreach ($parent_role_ids as $id => $tmp) {
            $ids[] = $id;
        }
        // Sort ids
        $sorted_ids = ilUtil::_sortIds($ids, 'object_data', 'type,title', 'obj_id');
        $key = 0;
        foreach ($sorted_ids as $id) {
            $par = $parent_role_ids[$id];
            if ($par["obj_id"] != SYSTEM_ROLE_ID && $this->object->getId() != $par["obj_id"]) {
                $output[$key]["role_id"] = $par["obj_id"];
                $output[$key]["type"] = ($par["type"] == 'role' ? $this->lng->txt('obj_role') : $this->lng->txt('obj_rolt'));
                $output[$key]["role_name"] = ilObjRole::_getTranslation($par["title"]);
                $output[$key]["role_desc"] = $par["desc"];
                $key++;
            }
        }


        include_once('./Services/AccessControl/classes/class.ilRoleAdoptPermissionTableGUI.php');

        $tbl = new ilRoleAdoptPermissionTableGUI($this, "adoptPerm");
        $tbl->setTitle($this->lng->txt("adopt_perm_from_template"));
        $tbl->setData($output);

        $this->tpl->setContent($tbl->getHTML());
    }

Here is the call graph for this function:

Here is the caller graph for this function:

adoptPermSaveObject()

ilObjRoleGUI::adoptPermSaveObject

(

)

copy permissions from role

public

Definition at line 986 of file class.ilObjRoleGUI.php.

References $_POST, ilObjectGUI\$access, $obj_ref_id, ilObjectGUI\$rbacreview, ilObjectGUI\$rbacsystem, ilObjectGUI\$tree, adoptPermObject(), checkAccess(), object, ilUtil\sendFailure(), and ilUtil\sendSuccess().

    {
        global $rbacadmin, $rbacsystem, $rbacreview, $tree;

        if (!$_POST['adopt']) {
            ilUtil::sendFailure($this->lng->txt('select_one'));
            $this->adoptPermObject();
            return false;
        }
    
        $access = $this->checkAccess('visible,write', 'edit_permission');
        if (!$access) {
            $this->ilias->raiseError($this->lng->txt("msg_no_perm_perm"), $this->ilias->error_obj->MESSAGE);
        }

        if ($this->object->getId() == $_POST["adopt"]) {
            ilUtil::sendFailure($this->lng->txt("msg_perm_adopted_from_itself"), true);
        } else {
            $rbacadmin->deleteRolePermission($this->object->getId(), $this->obj_ref_id);
            $parentRoles = $rbacreview->getParentRoleIds($this->obj_ref_id, true);
            $rbacadmin->copyRoleTemplatePermissions(
                $_POST["adopt"],
                $parentRoles[$_POST["adopt"]]["parent"],
                $this->obj_ref_id,
                $this->object->getId(),
                false
            );

            // update object data entry (to update last modification date)
            $this->object->update();

            // send info
            $obj_data =&$this->ilias->obj_factory->getInstanceByObjId($_POST["adopt"]);
            ilUtil::sendSuccess($this->lng->txt("msg_perm_adopted_from1") . " '" . $obj_data->getTitle() . "'.<br/>" .
                     $this->lng->txt("msg_perm_adopted_from2"), true);
        }

        $this->ctrl->redirect($this, "perm");
    }

Here is the call graph for this function:

askDeleteDesktopItemObject()

ilObjRoleGUI::askDeleteDesktopItemObject

(

)

Definition at line 226 of file class.ilObjRoleGUI.php.

References $_POST, $counter, ilObjectGUI\$rbacsystem, checkAccess(), ilObjectFactory\getInstanceByRefId(), listDesktopItemsObject(), object, ilUtil\sendFailure(), and USER_FOLDER_ID.

    {
        global $rbacsystem;
        
        
        if (!$this->checkAccess('edit_permission')) {
            $this->ilias->raiseError($this->lng->txt("permission_denied"), $this->ilias->error_obj->MESSAGE);
        }
        if (!$rbacsystem->checkAccess('push_desktop_items', USER_FOLDER_ID)) {
            $this->ilias->raiseError($this->lng->txt("permission_denied"), $this->ilias->error_obj->MESSAGE);
        }
        if (!count($_POST['del_desk_item'])) {
            ilUtil::sendFailure($this->lng->txt('role_select_one_item'));

            $this->listDesktopItemsObject();

            return true;
        }
        
        include_once("./Services/Utilities/classes/class.ilConfirmationGUI.php");
        $confirmation_gui = new ilConfirmationGUI();
        $confirmation_gui->setFormAction($this->ctrl->getFormAction($this));
        $confirmation_gui->setHeaderText($this->lng->txt('role_assigned_desk_items') .
            ' "' . $this->object->getTitle() . '": ' .
            $this->lng->txt('role_sure_delete_desk_items'));
        $confirmation_gui->setCancel($this->lng->txt("cancel"), "listDesktopItems");
        $confirmation_gui->setConfirm($this->lng->txt("delete"), "deleteDesktopItems");
        
        include_once 'Services/AccessControl/classes/class.ilRoleDesktopItem.php';
        $role_desk_item_obj = new ilRoleDesktopItem($this->object->getId());
        $counter = 0;
        foreach ($_POST['del_desk_item'] as $role_item_id) {
            $item_data = $role_desk_item_obj->getItem($role_item_id);
            $tmp_obj =&ilObjectFactory::getInstanceByRefId($item_data['item_id']);
                                    
            if (strlen($desc = $tmp_obj->getDescription())) {
                $desc = '<div class="il_Description_no_margin">' . $desc . '</div>';
            }
            
            $confirmation_gui->addItem("del_desk_item[]", $role_item_id, $tmp_obj->getTitle() . $desc);
        }
        
        $this->tpl->setContent($confirmation_gui->getHTML());

        return true;
    }

Here is the call graph for this function:

assignDesktopItemObject()

ilObjRoleGUI::assignDesktopItemObject

(

)

Definition at line 343 of file class.ilObjRoleGUI.php.

References $_GET, ilObjectGUI\$rbacsystem, ilObject\_lookupType(), ilRoleDesktopItem\add(), object, selectDesktopItemObject(), ilUtil\sendFailure(), ilUtil\sendSuccess(), and USER_FOLDER_ID.

    {
        global $rbacsystem;

        if (!$rbacsystem->checkAccess('push_desktop_items', USER_FOLDER_ID)) {
            $this->ilias->raiseError($this->lng->txt("permission_denied"), $this->ilias->error_obj->MESSAGE);
            return false;
        }
    

        if (!isset($_GET['item_id'])) {
            ilUtil::sendFailure($this->lng->txt('role_no_item_selected'));
            $this->selectDesktopItemObject();

            return false;
        }

        include_once 'Services/AccessControl/classes/class.ilRoleDesktopItem.php';

        $role_desk_item_obj = new ilRoleDesktopItem($this->object->getId());
        $role_desk_item_obj->add((int) $_GET['item_id'], ilObject::_lookupType((int) $_GET['item_id'], true));

        ilUtil::sendSuccess($this->lng->txt('role_assigned_desktop_item'));

        $this->ctrl->redirect($this, 'listDesktopItems');
        return true;
    }

Here is the call graph for this function:

assignSaveObject()

ilObjRoleGUI::assignSaveObject

(

)

wrapper for renamed function

public

Definition at line 1031 of file class.ilObjRoleGUI.php.

    {
        $this->assignUserObject();
    }

cancelObject()

ilObjRoleGUI::cancelObject

(

)

cancelObject is called when an operation is canceled, method links back public

Definition at line 1229 of file class.ilObjRoleGUI.php.

References $_GET.

    {
        if ($_GET["new_type"] != "role") {
            $this->ctrl->redirect($this, "userassignment");
        } else {
            $this->ctrl->redirectByClass("ilobjrolefoldergui", "view");
        }
    }

changeExistingObjectsObject()

ilObjRoleGUI::changeExistingObjectsObject ( )

protected

Change existing objects.

Returns

Definition at line 1553 of file class.ilObjRoleGUI.php.

References $_POST, $obj_ref_id, ilObjectGUI\$rbacreview, ilObjectGUI\$tree, ilUtil\sendSuccess(), and ilUtil\stripSlashes().

    {
        global $tree,$rbacreview,$rbacadmin;
        
        $mode = (int) $_POST['mode'];
        $start = ($this->obj_ref_id == ROLE_FOLDER_ID ? ROOT_FOLDER_ID : $this->obj_ref_id);
        
        $this->object->changeExistingObjects($start, $mode, unserialize(ilUtil::stripSlashes($_POST['type_filter'])));
        
        ilUtil::sendSuccess($this->lng->txt('settings_saved'), true);
        $this->ctrl->redirect($this, 'perm');
    }

Here is the call graph for this function:

checkAccess()

ilObjRoleGUI::checkAccess	(		$a_perm_global,
			$a_perm_obj = ''
	)

Definition at line 1450 of file class.ilObjRoleGUI.php.

References ilObjectGUI\$rbacsystem.

Referenced by addUserObject(), adoptPermSaveObject(), askDeleteDesktopItemObject(), confirmDeleteRoleObject(), deassignUserObject(), deleteDesktopItemsObject(), editObject(), executeCommand(), getTabs(), performDeleteRoleObject(), permObject(), permSaveObject(), and userassignmentObject().

    {
        global $rbacsystem,$ilAccess;
        
        $a_perm_obj = $a_perm_obj ? $a_perm_obj : $a_perm_global;
        
        if ($this->obj_ref_id == ROLE_FOLDER_ID) {
            return $rbacsystem->checkAccess($a_perm_global, $this->obj_ref_id);
        } else {
            return $ilAccess->checkAccess($a_perm_obj, '', $this->obj_ref_id);
        }
    }

Here is the caller graph for this function:

checkDuplicate()

ilObjRoleGUI::checkDuplicate (   $a_role_id = 0 )

protected

Check if role with same name already exists in this folder.

Returns

bool

Definition at line 598 of file class.ilObjRoleGUI.php.

Referenced by saveObject(), and updateObject().

    {
        // disabled due to mantis #0013742: Renaming global roles: ILIAS denies if title fits other role title partially
        return false;
    }

Here is the caller graph for this function:

confirmDeleteRoleObject()

ilObjRoleGUI::confirmDeleteRoleObject ( )

protected

Show delete confirmation screen.

Returns

Definition at line 812 of file class.ilObjRoleGUI.php.

References ilObjectGUI\$access, ilObjectGUI\$ilErr, $ilUser, ilObjectGUI\$rbacreview, checkAccess(), ilUtil\getImagePath(), object, and ilUtil\sendQuestion().

    {
        global $ilErr,$rbacreview,$ilUser;
        
        $access = $this->checkAccess('visible,write', 'edit_permission');
        if (!$access) {
            $ilErr->raiseError($this->lng->txt('msg_no_perm_perm'), $ilErr->WARNING);
        }

        $question = $this->lng->txt('rbac_role_delete_qst');
        if ($rbacreview->isAssigned($ilUser->getId(), $this->object->getId())) {
            $question .= ('<br />' . $this->lng->txt('rbac_role_delete_self'));
        }
        ilUtil::sendQuestion($question);
        
        include_once './Services/Utilities/classes/class.ilConfirmationGUI.php';
        
        $confirm = new ilConfirmationGUI();
        $confirm->setFormAction($this->ctrl->getFormAction($this));
        $confirm->setHeaderText($question);
        $confirm->setCancel($this->lng->txt('cancel'), 'perm');
        $confirm->setConfirm($this->lng->txt('rbac_delete_role'), 'performDeleteRole');
        
        $confirm->addItem(
            'role',
            $this->object->getId(),
            $this->object->getTitle(),
            ilUtil::getImagePath('icon_role.svg')
        );
        
        $this->tpl->setContent($confirm->getHTML());
        return true;
    }

Here is the call graph for this function:

createObject()

ilObjRoleGUI::createObject

(

)

Only called from administration -> role folder ? Otherwise this check access is wrong.

Returns

Definition at line 523 of file class.ilObjRoleGUI.php.

References ilObjectGUI\$ilErr, ilObjectGUI\$rbacsystem, and initFormRoleProperties().

    {
        global $rbacsystem;
        
        if (!$rbacsystem->checkAccess('create_role', $this->obj_ref_id)) {
            $ilErr->raiseError($this->lng->txt('permission_denied'), $ilErr->MESSAGE);
        }
        
        $this->initFormRoleProperties(self::MODE_GLOBAL_CREATE);
        $this->tpl->setContent($this->form->getHTML());
    }

Here is the call graph for this function:

deassignUserObject()

ilObjRoleGUI::deassignUserObject

(

)

de-assign users from role

public

Definition at line 1090 of file class.ilObjRoleGUI.php.

References $_GET, $_POST, ilObjectGUI\$rbacreview, ilObjectGUI\$rbacsystem, ilObjectGUI\$user, array, checkAccess(), object, ilUtil\sendFailure(), and ilUtil\sendSuccess().

    {
        global $rbacsystem, $rbacadmin, $rbacreview;

        if (!$this->checkAccess('edit_userassignment', 'edit_permission')) {
            $this->ilias->raiseError($this->lng->txt("msg_no_perm_assign_user_to_role"), $this->ilias->error_obj->MESSAGE);
        }

        $selected_users = ($_POST["user_id"]) ? $_POST["user_id"] : array($_GET["user_id"]);

        if ($selected_users[0]=== null) {
            $this->ilias->raiseError($this->lng->txt("no_checkbox"), $this->ilias->error_obj->MESSAGE);
        }

        // prevent unassignment of system user from system role
        if ($this->object->getId() == SYSTEM_ROLE_ID) {
            if ($admin = array_search(SYSTEM_USER_ID, $selected_users) !== false) {
                unset($selected_users[$admin]);
            }
        }

        // check for each user if the current role is his last global role before deassigning him
        $last_role = array();
        $global_roles = $rbacreview->getGlobalRoles();
        
        foreach ($selected_users as $user) {
            $assigned_roles = $rbacreview->assignedRoles($user);
            $assigned_global_roles = array_intersect($assigned_roles, $global_roles);

            if (count($assigned_roles) == 1 or (count($assigned_global_roles) == 1 and in_array($this->object->getId(), $assigned_global_roles))) {
                $userObj = $this->ilias->obj_factory->getInstanceByObjId($user);
                $last_role[$user] = $userObj->getFullName();
                unset($userObj);
            }
        }

        
        // ... else perform deassignment
        foreach ($selected_users as $user) {
            if (!isset($last_role[$user])) {
                $rbacadmin->deassignUser($this->object->getId(), $user);
            }
        }

        // update object data entry (to update last modification date)
        $this->object->update();

        // raise error if last role was taken from a user...
        if (count($last_role)) {
            $user_list = implode(", ", $last_role);
            ilUtil::sendFailure($this->lng->txt('msg_is_last_role') . ': ' . $user_list . '<br />' . $this->lng->txt('msg_min_one_role'), true);
        } else {
            ilUtil::sendSuccess($this->lng->txt("msg_userassignment_changed"), true);
        }
        $this->ctrl->redirect($this, 'userassignment');
    }

Here is the call graph for this function:

deleteDesktopItemsObject()

ilObjRoleGUI::deleteDesktopItemsObject

(

)

Definition at line 273 of file class.ilObjRoleGUI.php.

References $_POST, ilObjectGUI\$rbacsystem, checkAccess(), ilRoleDesktopItem\delete(), listDesktopItemsObject(), object, ilUtil\sendFailure(), ilUtil\sendSuccess(), and USER_FOLDER_ID.

    {
        global $rbacsystem;
        
        if (!$this->checkAccess('edit_permission')) {
            $this->ilias->raiseError($this->lng->txt("permission_denied"), $this->ilias->error_obj->MESSAGE);
        }

        if (!$rbacsystem->checkAccess('push_desktop_items', USER_FOLDER_ID)) {
            $this->ilias->raiseError($this->lng->txt("permission_denied"), $this->ilias->error_obj->MESSAGE);
        }

        if (!count($_POST['del_desk_item'])) {
            ilUtil::sendFailure($this->lng->txt('role_select_one_item'));

            $this->listDesktopItemsObject();

            return true;
        }

        include_once 'Services/AccessControl/classes/class.ilRoleDesktopItem.php';

        $role_desk_item_obj = new ilRoleDesktopItem($this->object->getId());

        foreach ($_POST['del_desk_item'] as $role_item_id) {
            $role_desk_item_obj->delete($role_item_id);
        }

        ilUtil::sendSuccess($this->lng->txt('role_deleted_desktop_items'));
        $this->listDesktopItemsObject();

        return true;
    }

Here is the call graph for this function:

editObject()

ilObjRoleGUI::editObject

(

)

Edit role properties.

Returns

Definition at line 539 of file class.ilObjRoleGUI.php.

References ilObjectGUI\$ilErr, $ilSetting, $obj_ref_id, ilObjectGUI\$rbacreview, ilObjectGUI\$rbacsystem, checkAccess(), initFormRoleProperties(), object, and readRoleProperties().

    {
        global $rbacsystem, $rbacreview, $ilSetting,$ilErr,$ilToolbar;

        if (!$this->checkAccess('write', 'edit_permission')) {
            $ilErr->raiseError($this->lng->txt("msg_no_perm_write"), $ilErr->MESSAGE);
        }
        
        // Show copy role button
        if ($this->object->getId() != SYSTEM_ROLE_ID) {
            $ilToolbar->setFormAction($this->ctrl->getFormAction($this));
            if ($rbacreview->isDeleteable($this->object->getId(), $this->obj_ref_id)) {
                $ilToolbar->addButton(
                    $this->lng->txt('rbac_delete_role'),
                    $this->ctrl->getLinkTarget($this, 'confirmDeleteRole')
                );
            }
        }
        
        $this->initFormRoleProperties(self::MODE_GLOBAL_UPDATE);
        $this->readRoleProperties($this->object);
        $this->tpl->setContent($this->form->getHTML());
    }

Here is the call graph for this function:

ensureRoleAccessForContext()

ilObjRoleGUI::ensureRoleAccessForContext ( )

protected

Definition at line 1645 of file class.ilObjRoleGUI.php.

References $DIC, $obj_ref_id, and object.

Referenced by executeCommand().

    {
        global $DIC;

        $review = $DIC->rbac()->review();
        $logger = $DIC->logger()->ac();

        // creation of roles
        if (
            !$this->object->getId() ||
            $this->object->getId() == ROLE_FOLDER_ID
        ) {
            return true;
        }


        $possible_roles = [];
        try {
            $possible_roles = $review->getRolesOfObject(
                $this->obj_ref_id,
                false
            );
        } catch (\InvalidArgumentException $e) {
            $logger->warning('Role access check failed: ' . $e);

            include_once "Services/Object/exceptions/class.ilObjectException.php";
            throw new \ilObjectException($this->lng->txt('permission_denied'));
        }

        if (!in_array($this->object->getId(), $possible_roles)) {
            $logger->warning('Object id: ' . $this->object->getId() . ' is not accessible for ref_id: ' . $this->obj_ref_id);
            include_once "Services/Object/exceptions/class.ilObjectException.php";
            throw new \ilObjectException($this->lng->txt('permission_denied'));
        }
        return true;
    }

Here is the caller graph for this function:

executeCommand()

ilObjRoleGUI::executeCommand

(

)

Definition at line 76 of file class.ilObjRoleGUI.php.

References $GLOBALS, $obj_ref_id, ilObjectGUI\$rbacsystem, $ret, ilExportOptions\allocateExportId(), checkAccess(), ensureRoleAccessForContext(), ilExportOptions\KEY_ROOT, ilExportOptions\newInstance(), object, ilObjectGUI\prepareOutput(), and showDefaultPermissionSettings().

    {
        global $rbacsystem;

        $this->prepareOutput();
        
        $next_class = $this->ctrl->getNextClass($this);
        $cmd = $this->ctrl->getCmd();

        $this->ensureRoleAccessForContext();

        switch ($next_class) {
            case 'ilrepositorysearchgui':
                
                if (!$GLOBALS['ilAccess']->checkAccess('edit_permission', '', $this->obj_ref_id)) {
                    $GLOBALS['ilErr']->raiseError($GLOBALS['lng']->txt('permission_denied'), $GLOBALS['ilErr']->WARNING);
                }
                include_once('./Services/Search/classes/class.ilRepositorySearchGUI.php');
                $rep_search = new ilRepositorySearchGUI();
                $rep_search->setTitle($this->lng->txt('role_add_user'));
                $rep_search->setCallback($this, 'addUserObject');

                // Set tabs
                $this->tabs_gui->setTabActive('user_assignment');
                $this->ctrl->setReturn($this, 'userassignment');
                $ret =&$this->ctrl->forwardCommand($rep_search);
                break;
            
            case 'ilexportgui':
                    
                $this->tabs_gui->setTabActive('export');
                
                include_once './Services/Export/classes/class.ilExportOptions.php';
                $eo = ilExportOptions::newInstance(ilExportOptions::allocateExportId());
                $eo->addOption(ilExportOptions::KEY_ROOT, 0, $this->object->getId(), $this->obj_ref_id);
                
                include_once './Services/Export/classes/class.ilExportGUI.php';
                $exp = new ilExportGUI($this, new ilObjRole($this->object->getId()));
                $exp->addFormat('xml');
                $this->ctrl->forwardCommand($exp);
                break;

            default:
                if (!$cmd) {
                    if ($this->showDefaultPermissionSettings()) {
                        $cmd = "perm";
                    } else {
                        $cmd = 'userassignment';
                    }
                }
                $cmd .= "Object";
                $this->$cmd();
                    
                break;
        }

        return true;
    }

Here is the call graph for this function:

getAdminTabs()

ilObjRoleGUI::getAdminTabs

(

)

admin and normal tabs are equal for roles

Definition at line 179 of file class.ilObjRoleGUI.php.

References getTabs().

    {
        $this->getTabs();
    }

Here is the call graph for this function:

getBackTarget()

ilObjRoleGUI::getBackTarget

(

)

Definition at line 171 of file class.ilObjRoleGUI.php.

References array.

    {
        return $this->back_target ? $this->back_target : array();
    }

getContainerType()

ilObjRoleGUI::getContainerType ( )

protected

Get type of role container.

Returns

Definition at line 188 of file class.ilObjRoleGUI.php.

References $container_type.

Referenced by showDefaultPermissionSettings().

    {
        return $this->container_type;
    }

Here is the caller graph for this function:

getParentObjId()

ilObjRoleGUI::getParentObjId

(

)

Get obj_id of current object.

Returns

Definition at line 148 of file class.ilObjRoleGUI.php.

References $obj_obj_id.

Referenced by __construct().

    {
        return $this->obj_obj_id;
    }

Here is the caller graph for this function:

getParentRefId()

ilObjRoleGUI::getParentRefId

(

)

Get ref id of current object (not role folder id)

Returns

Definition at line 139 of file class.ilObjRoleGUI.php.

References $obj_ref_id.

Referenced by __construct(), and permObject().

    {
        return $this->obj_ref_id;
    }

Here is the caller graph for this function:

getParentType()

ilObjRoleGUI::getParentType

(

)

get type of current object (not role folder)

Returns

Definition at line 157 of file class.ilObjRoleGUI.php.

References $obj_obj_type.

Referenced by permObject(), and permSaveObject().

    {
        return $this->obj_obj_type;
    }

Here is the caller graph for this function:

getTabs()

ilObjRoleGUI::getTabs

(

)

Definition at line 1351 of file class.ilObjRoleGUI.php.

References $_GET, ilObjectGUI\$rbacreview, array, checkAccess(), object, and showDefaultPermissionSettings().

Referenced by __setHeader(), and getAdminTabs().

    {
        global $rbacreview, $ilHelp;

        $base_role_container = $rbacreview->getFoldersAssignedToRole($this->object->getId(), true);
        

        $activate_role_edit = false;
        
        // todo: activate the following (allow editing of local roles in
        // roles administration)
        if (in_array($this->obj_ref_id, $base_role_container) ||
            (strtolower($_GET["baseClass"]) == "iladministrationgui" &&
            $_GET["admin_mode"] == "settings")) {
            $activate_role_edit = true;
        }

        // not so nice (workaround for using tabs in repository)
        $this->tabs_gui->clearTargets();

        $ilHelp->setScreenIdComponent("role");

        if ($this->back_target != "") {
            $this->tabs_gui->setBackTarget(
                $this->back_target["text"],
                $this->back_target["link"]
            );
        }

        if ($this->checkAccess('write', 'edit_permission') && $activate_role_edit) {
            $this->tabs_gui->addTarget(
                "edit_properties",
                $this->ctrl->getLinkTarget($this, "edit"),
                array("edit","update"),
                get_class($this)
            );
        }
        /*
                if($this->checkAccess('write','edit_permission') and $this->showDefaultPermissionSettings())
                {
                    $force_active = ($_GET["cmd"] == "perm" || $_GET["cmd"] == "")
                        ? true
                        : false;
                    $this->tabs_gui->addTarget("default_perm_settings",
                        $this->ctrl->getLinkTarget($this, "perm"), array("perm", "adoptPermSave", "permSave"),
                        get_class($this),
                        "", $force_active);
                }
        */
        if ($this->checkAccess('write', 'edit_permission') and $this->showDefaultPermissionSettings()) {
            $this->tabs_gui->addTarget(
                "default_perm_settings",
                $this->ctrl->getLinkTarget($this, "perm"),
                array(),
                get_class($this)
            );
        }

        if ($this->checkAccess('write', 'edit_permission') && $activate_role_edit && $this->object->getId() != ANONYMOUS_ROLE_ID) {
            $this->tabs_gui->addTarget(
                "user_assignment",
                $this->ctrl->getLinkTarget($this, "userassignment"),
                array("deassignUser", "userassignment", "assignUser", "searchUserForm", "search"),
                get_class($this)
            );
        }

        if ($this->checkAccess('write', 'edit_permission') && $activate_role_edit  && $this->object->getId() != ANONYMOUS_ROLE_ID) {
            $this->tabs_gui->addTarget(
                "desktop_items",
                $this->ctrl->getLinkTarget($this, "listDesktopItems"),
                array("listDesktopItems", "deleteDesktopItems", "selectDesktopItem", "askDeleteDesktopItem"),
                get_class($this)
            );
        }
        if ($this->checkAccess('write', 'edit_permission')) {
            $this->tabs_gui->addTarget(
                'export',
                $this->ctrl->getLinkTargetByClass('ilExportGUI'),
                array()
            );
        }
    }

Here is the call graph for this function:

Here is the caller graph for this function:

initFormRoleProperties()

ilObjRoleGUI::initFormRoleProperties (   $a_mode )

protected

Create role prperty form.

Returns

Parameters

int

$a_mode

Definition at line 376 of file class.ilObjRoleGUI.php.

References $title, ilDiskQuotaActivationChecker\_isActive(), ilDiskQuotaActivationChecker\_isPersonalWorkspaceActive(), ilObjRole\isAutoGenerated(), object, ilFormPropertyGUI\setDisabled(), ilNumberInputGUI\setMinValue(), and ilCheckboxInputGUI\setValue().

Referenced by createObject(), editObject(), saveObject(), and updateObject().

    {
        include_once './Services/Form/classes/class.ilPropertyFormGUI.php';
        $this->form = new ilPropertyFormGUI();

        if ($this->creation_mode) {
            $this->ctrl->setParameter($this, "new_type", 'role');
        }
        $this->form->setFormAction($this->ctrl->getFormAction($this));
    
        switch ($a_mode) {
            case self::MODE_GLOBAL_CREATE:
                $this->form->setTitle($this->lng->txt('role_new'));
                $this->form->addCommandButton('save', $this->lng->txt('role_new'));
                break;
                
            case self::MODE_GLOBAL_UPDATE:
                $this->form->setTitle($this->lng->txt('role_edit'));
                $this->form->addCommandButton('update', $this->lng->txt('save'));
                break;
                
            case self::MODE_LOCAL_CREATE:
            case self::MODE_LOCAL_UPDATE:
        }
        // Fix cancel
        $this->form->addCommandButton('cancel', $this->lng->txt('cancel'));
        
        $title = new ilTextInputGUI($this->lng->txt('title'), 'title');
        if (ilObjRole::isAutoGenerated($this->object->getId())) {
            $title->setDisabled(true);
        } else {
            //#17111 No validation for disabled fields
            $title->setValidationRegexp('/^(?!il_).*$/');
            $title->setValidationFailureMessage($this->lng->txt('msg_role_reserved_prefix'));
        }

        $title->setSize(40);
        $title->setMaxLength(70);
        $title->setRequired(true);
        $this->form->addItem($title);
        
        $desc = new ilTextAreaInputGUI($this->lng->txt('description'), 'desc');
        if (ilObjRole::isAutoGenerated($this->object->getId())) {
            $desc->setDisabled(true);
        }
        $desc->setCols(40);
        $desc->setRows(3);
        $this->form->addItem($desc);

        if ($a_mode != self::MODE_LOCAL_CREATE && $a_mode != self::MODE_GLOBAL_CREATE) {
            $ilias_id = new ilNonEditableValueGUI($this->lng->txt("ilias_id"), "ilias_id");
            $this->form->addItem($ilias_id);
        }
        
        if ($this->obj_ref_id == ROLE_FOLDER_ID) {
            $reg = new ilCheckboxInputGUI($this->lng->txt('allow_register'), 'reg');
            $reg->setValue(1);
            #$reg->setInfo($this->lng->txt('rbac_new_acc_reg_info'));
            $this->form->addItem($reg);
            
            $la = new ilCheckboxInputGUI($this->lng->txt('allow_assign_users'), 'la');
            $la->setValue(1);
            #$la->setInfo($this->lng->txt('rbac_local_admin_info'));
            $this->form->addItem($la);
        }
        
        $pro = new ilCheckboxInputGUI($this->lng->txt('role_protect_permissions'), 'pro');
        $pro->setValue(1);
        #$pro->setInfo($this->lng->txt('role_protext_permission_info'));
        $this->form->addItem($pro);
        
        include_once 'Services/WebDAV/classes/class.ilDiskQuotaActivationChecker.php';
        if (ilDiskQuotaActivationChecker::_isActive()) {
            $quo = new ilNumberInputGUI($this->lng->txt('disk_quota'), 'disk_quota');
            $quo->setMinValue(0);
            $quo->setSize(4);
            $quo->setInfo($this->lng->txt('enter_in_mb_desc') . '<br />' . $this->lng->txt('disk_quota_on_role_desc'));
            $this->form->addItem($quo);
        }
        if (ilDiskQuotaActivationChecker::_isPersonalWorkspaceActive()) {
            $this->lng->loadLanguageModule("file");
            $wquo = new ilNumberInputGUI($this->lng->txt('personal_workspace_disk_quota'), 'wsp_disk_quota');
            $wquo->setMinValue(0);
            $wquo->setSize(4);
            $wquo->setInfo($this->lng->txt('enter_in_mb_desc') . '<br />' . $this->lng->txt('disk_quota_on_role_desc'));
            $this->form->addItem($wquo);
        }
            
        return true;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

isChangeExistingObjectsConfirmationRequired()

ilObjRoleGUI::isChangeExistingObjectsConfirmationRequired ( )

protected

Check if a confirmation about further settings is required or not.

Returns

bool

Definition at line 1467 of file class.ilObjRoleGUI.php.

References $_POST, and ilObjectGUI\$rbacreview.

Referenced by permSaveObject().

    {
        global $rbacreview;
        
        if (!(int) $_POST['recursive'] and !is_array($_POST['recursive_list'])) {
            return false;
        }
        
        // Role is protected
        if ($rbacreview->isProtected($this->obj_ref_id, $this->object->getId())) {
            // TODO: check if recursive_list is enabled
            // and if yes: check if inheritance is broken for the relevant object types
            return count($rbacreview->getFoldersAssignedToRole($this->object->getId())) > 1;
        } else {
            // TODO: check if recursive_list is enabled
            // and if yes: check if inheritance is broken for the relevant object types
            return count($rbacreview->getFoldersAssignedToRole($this->object->getId())) > 1;
        }
    }

Here is the caller graph for this function:

listDesktopItemsObject()

ilObjRoleGUI::listDesktopItemsObject

(

)

Definition at line 205 of file class.ilObjRoleGUI.php.

References $obj_ref_id, ilObjectGUI\$rbacreview, ilObjectGUI\$rbacsystem, $tbl, ilObjectGUI\__showButton(), ilUtil\sendInfo(), and USER_FOLDER_ID.

Referenced by askDeleteDesktopItemObject(), deleteDesktopItemsObject(), and selectDesktopItemObject().

    {
        global $rbacsystem,$rbacreview;

        if (!$rbacreview->isAssignable($this->object->getId(), $this->obj_ref_id) &&
            $this->obj_ref_id != ROLE_FOLDER_ID) {
            ilUtil::sendInfo($this->lng->txt('role_no_users_no_desk_items'));
            return true;
        }

        if ($rbacsystem->checkAccess('push_desktop_items', USER_FOLDER_ID)) {
            $this->__showButton('selectDesktopItem', $this->lng->txt('role_desk_add'));
        }
        
        include_once 'Services/AccessControl/classes/class.ilRoleDesktopItemsTableGUI.php';
        $tbl = new ilRoleDesktopItemsTableGUI($this, 'listDesktopItems', $this->object);
        $this->tpl->setContent($tbl->getHTML());
        
        return true;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

listUsersRoleObject()

ilObjRoleGUI::listUsersRoleObject

(

)

Definition at line 1239 of file class.ilObjRoleGUI.php.

References $_POST, $_SESSION, $counter, ilObjectGUI\$rbacreview, ilObjectGUI\$rbacsystem, ilObjectGUI\$user, ilObjectGUI\__showButton(), array, ilUtil\formCheckbox(), ilObjectFactory\getInstanceByObjId(), and ilUtil\sendFailure().

    {
        global $rbacsystem,$rbacreview;

        $_SESSION["role_role"] = $_POST["role"] = $_POST["role"] ? $_POST["role"] : $_SESSION["role_role"];

        if (!is_array($_POST["role"])) {
            ilUtil::sendFailure($this->lng->txt("role_no_roles_selected"));
            $this->searchObject();

            return false;
        }

        $this->tpl->addBlockFile("ADM_CONTENT", "adm_content", "tpl.role_usr_selection.html", "Services/AccessControl");
        $this->__showButton("searchUserForm", $this->lng->txt("role_new_search"));

        // GET ALL MEMBERS
        $members = array();

        foreach ($_POST["role"] as $role_id) {
            $members = array_merge($rbacreview->assignedUsers($role_id), $members);
        }

        $members = array_unique($members);

        // FORMAT USER DATA
        $counter = 0;
        $f_result = array();

        foreach ($members as $user) {
            if (!$tmp_obj = ilObjectFactory::getInstanceByObjId($user, false)) {
                continue;
            }
            
            $user_ids[$counter] = $user;
            
            // TODO: exclude anonymous user
            $f_result[$counter][] = ilUtil::formCheckbox(0, "user[]", $user);
            $f_result[$counter][] = $tmp_obj->getLogin();
            $f_result[$counter][] = $tmp_obj->getFirstname();
            $f_result[$counter][] = $tmp_obj->getLastname();

            unset($tmp_obj);
            ++$counter;
        }

        $this->__showSearchUserTable($f_result, $user_ids, "listUsersRole");

        return true;
    }

Here is the call graph for this function:

loadRoleProperties()

ilObjRoleGUI::loadRoleProperties ( ilObjRole  $role )

protected

Store form input in role object.

Returns

Parameters

object

$role

Definition at line 472 of file class.ilObjRoleGUI.php.

References ilUtil\MB2Bytes(), ilObjRole\setAllowRegister(), ilObject\setDescription(), ilObjRole\setDiskQuota(), ilObjRole\setPersonalWorkspaceDiskQuota(), ilObject\setTitle(), and ilObjRole\toggleAssignUsersStatus().

Referenced by saveObject(), and updateObject().

    {
        //Don't set if fields are disabled to prevent html manipulation.
        if (!$this->form->getItemByPostVar('title')->getDisabled()) {
            $role->setTitle($this->form->getInput('title'));
        }
        if (!$this->form->getItemByPostVar('desc')->getDisabled()) {
            $role->setDescription($this->form->getInput('desc'));
        }
        $role->setAllowRegister($this->form->getInput('reg'));
        $role->toggleAssignUsersStatus($this->form->getInput('la'));
        $role->setDiskQuota(ilUtil::MB2Bytes($this->form->getInput('disk_quota')));
        $role->setPersonalWorkspaceDiskQuota(ilUtil::MB2Bytes($this->form->getInput('wsp_disk_quota')));
        return true;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

mailToRoleObject()

ilObjRoleGUI::mailToRoleObject

(

)

Definition at line 1435 of file class.ilObjRoleGUI.php.

References $_SESSION, ilObject\_getIdsForTitle(), array, ilMailFormCall\getRedirectTarget(), ilMailRoleAddressType\getRoleMailboxAddress(), object, and ilUtil\redirect().

    {
        $obj_ids = ilObject::_getIdsForTitle($this->object->getTitle(), $this->object->getType());
        if (count($obj_ids) > 1) {
            $_SESSION['mail_roles'][] = '#il_role_' . $this->object->getId();
        } else {
            require_once 'Services/Mail/classes/Address/Type/class.ilMailRoleAddressType.php';
            $_SESSION['mail_roles'][] = ilMailRoleAddressType::getRoleMailboxAddress($this->object->getId());
        }

        require_once 'Services/Mail/classes/class.ilMailFormCall.php';
        $script = ilMailFormCall::getRedirectTarget($this, 'userassignment', array(), array('type' => 'role'));
        ilUtil::redirect($script);
    }

Here is the call graph for this function:

performDeleteRoleObject()

ilObjRoleGUI::performDeleteRoleObject ( )

protected

Delete role.

Returns

Definition at line 851 of file class.ilObjRoleGUI.php.

References ilObjectGUI\$access, ilObjectGUI\$ilErr, checkAccess(), and ilUtil\sendSuccess().

    {
        global $ilErr;

        $access = $this->checkAccess('visible,write', 'edit_permission');
        if (!$access) {
            $ilErr->raiseError($this->lng->txt('msg_no_perm_perm'), $ilErr->WARNING);
        }
        
        $this->object->setParent((int) $this->obj_ref_id);
        $this->object->delete();
        ilUtil::sendSuccess($this->lng->txt('msg_deleted_role'), true);
        
        $this->ctrl->returnToParent($this);
    }

Here is the call graph for this function:

permObject()

ilObjRoleGUI::permObject (   $a_show_admin_permissions = false )

protected

Show template permissions.

Returns

void

Definition at line 636 of file class.ilObjRoleGUI.php.

References $def, ilObjectGUI\$ilErr, $obj_ref_id, ilObjectGUI\$objDefinition, $options, ilObjectGUI\$rbacreview, $tbl, array, checkAccess(), ilAccordionGUI\FORCE_ALL_OPEN, getParentRefId(), getParentType(), ilObjectPlugin\lookupTxtById(), object, setSubTabs(), and ilUtil\sortArray().

Referenced by adminPermObject().

    {
        global $ilTabs, $ilErr, $ilToolbar, $objDefinition,$rbacreview;
        
        $ilTabs->setTabActive('default_perm_settings');
        
        $this->setSubTabs('default_perm_settings');
        
        if ($a_show_admin_permissions) {
            $ilTabs->setSubTabActive('rbac_admin_permissions');
        } else {
            $ilTabs->setSubTabActive('rbac_repository_permissions');
        }
        
        if (!$this->checkAccess('write', 'edit_permission')) {
            $ilErr->raiseError($this->lng->txt('msg_no_perm_perm'), $ilErr->MESSAGE);
            return true;
        }
        
        // Show copy role button
        if ($this->object->getId() != SYSTEM_ROLE_ID) {
            $ilToolbar->setFormAction($this->ctrl->getFormAction($this));
            $ilToolbar->addButton(
                $this->lng->txt("adopt_perm_from_template"),
                $this->ctrl->getLinkTarget($this, 'adoptPerm')
            );
            if ($rbacreview->isDeleteable($this->object->getId(), $this->obj_ref_id)) {
                $ilToolbar->addButton(
                    $this->lng->txt('rbac_delete_role'),
                    $this->ctrl->getLinkTarget($this, 'confirmDeleteRole')
                );
            }
        }
        
        $this->tpl->addBlockFile(
            'ADM_CONTENT',
            'adm_content',
            'tpl.rbac_template_permissions.html',
            'Services/AccessControl'
        );
        
        $this->tpl->setVariable('PERM_ACTION', $this->ctrl->getFormAction($this));
        
        include_once './Services/Accordion/classes/class.ilAccordionGUI.php';
        $acc = new ilAccordionGUI();
        $acc->setBehaviour(ilAccordionGUI::FORCE_ALL_OPEN);
        $acc->setId('template_perm_' . $this->getParentRefId());
        
        if ($this->obj_ref_id == ROLE_FOLDER_ID) {
            if ($a_show_admin_permissions) {
                $subs = $objDefinition->getSubObjectsRecursively('adm', true, true);
            } else {
                $subs = $objDefinition->getSubObjectsRecursively('root', true, $a_show_admin_permissions);
            }
        } else {
            $subs = $objDefinition->getSubObjectsRecursively($this->getParentType(), true, $a_show_admin_permissions);
        }
        
        $sorted = array();
        foreach ($subs as $subtype => $def) {
            if ($objDefinition->isPlugin($subtype)) {
                $translation = ilObjectPlugin::lookupTxtById($subtype, "obj_" . $subtype);
            } elseif ($objDefinition->isSystemObject($subtype)) {
                $translation = $this->lng->txt("obj_" . $subtype);
            } else {
                $translation = $this->lng->txt('objs_' . $subtype);
            }
            
            $sorted[$subtype] = $def;
            $sorted[$subtype]['translation'] = $translation;
        }
        
        
        $sorted = ilUtil::sortArray($sorted, 'translation', 'asc', true, true);
        foreach ($sorted as $subtype => $def) {
            if ($objDefinition->isPlugin($subtype)) {
                $translation = ilObjectPlugin::lookupTxtById($subtype, "obj_" . $subtype);
            } elseif ($objDefinition->isSystemObject($subtype)) {
                $translation = $this->lng->txt("obj_" . $subtype);
            } else {
                $translation = $this->lng->txt('objs_' . $subtype);
            }

            include_once 'Services/AccessControl/classes/class.ilObjectRoleTemplatePermissionTableGUI.php';
            $tbl = new ilObjectRoleTemplatePermissionTableGUI(
                $this,
                'perm',
                $this->getParentRefId(),
                $this->object->getId(),
                $subtype,
                $a_show_admin_permissions
            );
            $tbl->parse();
            
            $acc->addItem($translation, $tbl->getHTML());
        }

        $this->tpl->setVariable('ACCORDION', $acc->getHTML());
        
        // Add options table
        include_once './Services/AccessControl/classes/class.ilObjectRoleTemplateOptionsTableGUI.php';
        $options = new ilObjectRoleTemplateOptionsTableGUI(
            $this,
            'perm',
            $this->obj_ref_id,
            $this->object->getId(),
            $a_show_admin_permissions
        );
        if ($this->object->getId() != SYSTEM_ROLE_ID) {
            $options->addMultiCommand(
                $a_show_admin_permissions ? 'adminPermSave' : 'permSave',
                $this->lng->txt('save')
            );
        }

        $options->parse();
        $this->tpl->setVariable('OPTIONS_TABLE', $options->getHTML());
    }

Here is the call graph for this function:

Here is the caller graph for this function:

permSaveObject()

ilObjRoleGUI::permSaveObject

(

$a_show_admin_permissions = false

)

save permissions

public

Definition at line 872 of file class.ilObjRoleGUI.php.

References $_POST, ilObjectGUI\$access, $def, $key, $obj_ref_id, ilObjectGUI\$objDefinition, ilObjectGUI\$rbacreview, ilObjectGUI\$rbacsystem, ilObjectGUI\$tree, ilRbacLog\add(), array, checkAccess(), ilRbacLog\diffTemplate(), ilRbacLog\EDIT_TEMPLATE, ilRbacLog\gatherTemplate(), getParentType(), ilRbacLog\isActive(), isChangeExistingObjectsConfirmationRequired(), ilObjRole\MODE_PROTECTED_KEEP_LOCAL_POLICIES, ilObjRole\MODE_UNPROTECTED_KEEP_LOCAL_POLICIES, object, ilUtil\sendSuccess(), showChangeExistingObjectsConfirmation(), and ilUtil\tf2yn().

Referenced by adminPermSaveObject().

    {
        global $rbacsystem, $rbacadmin, $rbacreview, $objDefinition, $tree;

        // for role administration check write of global role folder
        $access = $this->checkAccess('visible,write', 'edit_permission');
            
        if (!$access) {
            $this->ilias->raiseError($this->lng->txt("msg_no_perm_perm"), $this->ilias->error_obj->MESSAGE);
        }

        // rbac log
        include_once "Services/AccessControl/classes/class.ilRbacLog.php";
        $rbac_log_active = ilRbacLog::isActive();
        if ($rbac_log_active) {
            $rbac_log_old = ilRbacLog::gatherTemplate($this->obj_ref_id, $this->object->getId());
        }

        // delete all template entries of enabled types
        if ($this->obj_ref_id == ROLE_FOLDER_ID) {
            if ($a_show_admin_permissions) {
                $subs = $objDefinition->getSubObjectsRecursively('adm', true, true);
            } else {
                $subs = $objDefinition->getSubObjectsRecursively('root', true, false);
            }
        } else {
            $subs = $objDefinition->getSubObjectsRecursively($this->getParentType(), true, false);
        }
        
        foreach ($subs as $subtype => $def) {
            // Delete per object type
            $rbacadmin->deleteRolePermission($this->object->getId(), $this->obj_ref_id, $subtype);
        }

        if (empty($_POST["template_perm"])) {
            $_POST["template_perm"] = array();
        }

        foreach ($_POST["template_perm"] as $key => $ops_array) {
            // sets new template permissions
            $rbacadmin->setRolePermission($this->object->getId(), $key, $ops_array, $this->obj_ref_id);
        }

        if ($rbac_log_active) {
            $rbac_log_new = ilRbacLog::gatherTemplate($this->obj_ref_id, $this->object->getId());
            $rbac_log_diff = ilRbacLog::diffTemplate($rbac_log_old, $rbac_log_new);
            ilRbacLog::add(ilRbacLog::EDIT_TEMPLATE, $this->obj_ref_id, $rbac_log_diff);
        }

        // update object data entry (to update last modification date)
        $this->object->update();
        
        // set protected flag
        if ($this->obj_ref_id == ROLE_FOLDER_ID or $rbacreview->isAssignable($this->object->getId(), $this->obj_ref_id)) {
            $rbacadmin->setProtected($this->obj_ref_id, $this->object->getId(), ilUtil::tf2yn($_POST['protected']));
        }
        
        if ($a_show_admin_permissions) {
            $_POST['recursive'] = true;
        }
        
        // Redirect if Change existing objects is not chosen
        if (!$_POST['recursive'] and !is_array($_POST['recursive_list'])) {
            ilUtil::sendSuccess($this->lng->txt("saved_successfully"), true);
            if ($a_show_admin_permissions) {
                $this->ctrl->redirect($this, 'adminPerm');
            } else {
                $this->ctrl->redirect($this, 'perm');
            }
        }
        // New implementation
        if ($this->isChangeExistingObjectsConfirmationRequired() and !$a_show_admin_permissions) {
            $this->showChangeExistingObjectsConfirmation();
            return true;
        }
        
        $start = ($this->obj_ref_id == ROLE_FOLDER_ID ? ROOT_FOLDER_ID : $this->obj_ref_id);
        if ($a_show_admin_permissions) {
            $start = $tree->getParentId($this->obj_ref_id);
        }

        if ($_POST['protected']) {
            $this->object->changeExistingObjects(
                $start,
                ilObjRole::MODE_PROTECTED_KEEP_LOCAL_POLICIES,
                array('all'),
                array()
                #$a_show_admin_permissions ? array('adm') : array()
            );
        } else {
            $this->object->changeExistingObjects(
                $start,
                ilObjRole::MODE_UNPROTECTED_KEEP_LOCAL_POLICIES,
                array('all'),
                array()
                #$a_show_admin_permissions ? array('adm') : array()
            );
        }
        ilUtil::sendSuccess($this->lng->txt("saved_successfully"), true);
        
        if ($a_show_admin_permissions) {
            $this->ctrl->redirect($this, 'adminPerm');
        } else {
            $this->ctrl->redirect($this, 'perm');
        }
        return true;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

readRoleProperties()

ilObjRoleGUI::readRoleProperties ( ilObjRole  $role )

protected

Read role properties and write them to form.

Returns

Parameters

object

$role

Definition at line 493 of file class.ilObjRoleGUI.php.

References ilObjectGUI\$data, ilObjectGUI\$rbacreview, ilDiskQuotaActivationChecker\_isActive(), ilDiskQuotaActivationChecker\_isPersonalWorkspaceActive(), ilObject\_lookupType(), ilUtil\Bytes2MB(), ilObjRole\getAllowRegister(), ilObjRole\getAssignUsersStatus(), ilObject\getDescription(), ilObjRole\getDiskQuota(), ilObject\getId(), ilObjRole\getPersonalWorkspaceDiskQuota(), and ilObject\getTitle().

Referenced by editObject().

    {
        global $rbacreview;
        
        include_once 'Services/WebDAV/classes/class.ilDiskQuotaActivationChecker.php';

        $data['title'] = $role->getTitle();
        $data['desc'] = $role->getDescription();
        $data['ilias_id'] = 'il_' . IL_INST_ID . '_' . ilObject::_lookupType($role->getId()) . '_' . $role->getId();
        $data['reg'] = $role->getAllowRegister();
        $data['la'] = $role->getAssignUsersStatus();
        if (ilDiskQuotaActivationChecker::_isActive()) {
            $data['disk_quota'] = ilUtil::Bytes2MB($role->getDiskQuota());
        }
        if (ilDiskQuotaActivationChecker::_isPersonalWorkspaceActive()) {
            $data['wsp_disk_quota'] = ilUtil::Bytes2MB($role->getPersonalWorkspaceDiskQuota());
        }
        $data['pro'] = $rbacreview->isProtected($this->obj_ref_id, $role->getId());
        
        $this->form->setValuesByArray($data);
    }

Here is the call graph for this function:

Here is the caller graph for this function:

saveObject()

ilObjRoleGUI::saveObject

(

)

Save new role.

Returns

Definition at line 568 of file class.ilObjRoleGUI.php.

References $obj_ref_id, ilObjectGUI\$rbacreview, checkDuplicate(), initFormRoleProperties(), loadRoleProperties(), ilUtil\sendFailure(), and ilUtil\sendSuccess().

    {
        global $rbacadmin,$rbacreview;
        
        $this->initFormRoleProperties(self::MODE_GLOBAL_CREATE);
        if ($this->form->checkInput() and !$this->checkDuplicate()) {
            include_once './Services/AccessControl/classes/class.ilObjRole.php';
            $this->loadRoleProperties($this->role = new ilObjRole());
            $this->role->create();
            $rbacadmin->assignRoleToFolder($this->role->getId(), $this->obj_ref_id, 'y');
            $rbacadmin->setProtected(
                $this->obj_ref_id,
                $this->role->getId(),
                $this->form->getInput('pro') ? 'y' : 'n'
            );
            ilUtil::sendSuccess($this->lng->txt("role_added"), true);
            $this->ctrl->setParameter($this, 'obj_id', $this->role->getId());
            $this->ctrl->redirect($this, 'perm');
        }
        
        ilUtil::sendFailure($this->lng->txt('err_check_input'));
        $this->form->setValuesByPost();
        $this->tpl->setContent($this->form->getHTML());
        return false;
    }

Here is the call graph for this function:

selectDesktopItemObject()

ilObjRoleGUI::selectDesktopItemObject

(

)

Definition at line 308 of file class.ilObjRoleGUI.php.

References $_GET, $output, ilObjectGUI\$rbacsystem, ilObjectGUI\$tree, ilObjectGUI\__showButton(), listDesktopItemsObject(), object, ilUtil\sendFailure(), ilUtil\sendInfo(), and USER_FOLDER_ID.

Referenced by assignDesktopItemObject().

    {
        global $rbacsystem,$tree;

        include_once 'Services/AccessControl/classes/class.ilRoleDesktopItemSelector.php';
        include_once 'Services/AccessControl/classes/class.ilRoleDesktopItem.php';

        if (!$rbacsystem->checkAccess('push_desktop_items', USER_FOLDER_ID)) {
            #$this->ilias->raiseError($this->lng->txt("permission_denied"),$this->ilias->error_obj->MESSAGE);
            ilUtil::sendFailure($this->lng->txt('permission_denied'));
            $this->listDesktopItemsObject();
            return false;
        }

        $this->tpl->addBlockFile("ADM_CONTENT", "adm_content", "tpl.role_desktop_item_selector.html", "Services/AccessControl");
        $this->__showButton('listDesktopItems', $this->lng->txt('back'));

        ilUtil::sendInfo($this->lng->txt("role_select_desktop_item"));
        
        $exp = new ilRoleDesktopItemSelector(
            $this->ctrl->getLinkTarget($this, 'selectDesktopItem'),
            new ilRoleDesktopItem($this->object->getId())
        );
        $exp->setExpand($_GET["role_desk_item_link_expand"] ? $_GET["role_desk_item_link_expand"] : $tree->readRootId());
        $exp->setExpandTarget($this->ctrl->getLinkTarget($this, 'selectDesktopItem'));
        
        $exp->setOutput(0);
        
        $output = $exp->getOutput();
        $this->tpl->setVariable("EXPLORER", $output);
        //$this->tpl->setVariable("EXPLORER", $exp->getOutput());

        return true;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

setBackTarget()

ilObjRoleGUI::setBackTarget	(		$a_text,
			$a_link
	)

set back tab target

Definition at line 165 of file class.ilObjRoleGUI.php.

References array.

    {
        $this->back_target = array("text" => $a_text,
            "link" => $a_link);
    }

setSubTabs()

ilObjRoleGUI::setSubTabs (   $a_tab )

protected

Set sub tabs.

Parameters

object

$a_tab

Returns

Definition at line 1571 of file class.ilObjRoleGUI.php.

Referenced by permObject().

    {
        global $ilTabs;
        
        switch ($a_tab) {
            case 'default_perm_settings':
                if ($this->obj_ref_id != ROLE_FOLDER_ID) {
                    return true;
                }
                $ilTabs->addSubTabTarget(
                    'rbac_repository_permissions',
                    $this->ctrl->getLinkTarget($this, 'perm')
                );
                $ilTabs->addSubTabTarget(
                    'rbac_admin_permissions',
                    $this->ctrl->getLinkTarget($this, 'adminPerm')
                );
        }
        return true;
    }

Here is the caller graph for this function:

showChangeExistingObjectsConfirmation()

ilObjRoleGUI::showChangeExistingObjectsConfirmation ( )

protected

Show confirmation screen.

Returns

Definition at line 1491 of file class.ilObjRoleGUI.php.

References $_POST, $form, array, ilObjRole\MODE_PROTECTED_DELETE_LOCAL_POLICIES, ilObjRole\MODE_PROTECTED_KEEP_LOCAL_POLICIES, ilObjRole\MODE_UNPROTECTED_DELETE_LOCAL_POLICIES, ilObjRole\MODE_UNPROTECTED_KEEP_LOCAL_POLICIES, ilRadioGroupInputGUI\setValue(), and ilRadioOption\setValue().

Referenced by permSaveObject().

    {
        $protected = $_POST['protected'];
        
        include_once './Services/Form/classes/class.ilPropertyFormGUI.php';
        $form = new ilPropertyFormGUI();
        $form->setFormAction($this->ctrl->getFormAction($this, 'changeExistingObjects'));
        $form->setTitle($this->lng->txt('rbac_change_existing_confirm_tbl'));
        
        $form->addCommandButton('changeExistingObjects', $this->lng->txt('change_existing_objects'));
        $form->addCommandButton('perm', $this->lng->txt('cancel'));
        
        $hidden = new ilHiddenInputGUI('type_filter');
        $hidden->setValue(
            $_POST['recursive'] ?
                serialize(array('all')) :
                serialize($_POST['recursive_list'])
        );
        $form->addItem($hidden);

        $rad = new ilRadioGroupInputGUI($this->lng->txt('rbac_local_policies'), 'mode');
        
        if ($protected) {
            $rad->setValue(ilObjRole::MODE_PROTECTED_DELETE_LOCAL_POLICIES);
            $keep = new ilRadioOption(
                $this->lng->txt('rbac_keep_local_policies'),
                ilObjRole::MODE_PROTECTED_KEEP_LOCAL_POLICIES,
                $this->lng->txt('rbac_keep_local_policies_info')
            );
        } else {
            $rad->setValue(ilObjRole::MODE_UNPROTECTED_KEEP_LOCAL_POLICIES);
            $keep = new ilRadioOption(
                $this->lng->txt('rbac_keep_local_policies'),
                ilObjRole::MODE_UNPROTECTED_KEEP_LOCAL_POLICIES,
                $this->lng->txt('rbac_unprotected_keep_local_policies_info')
            );
        }
        $rad->addOption($keep);
        
        if ($protected) {
            $del =  new ilRadioOption(
                $this->lng->txt('rbac_delete_local_policies'),
                ilObjRole::MODE_PROTECTED_DELETE_LOCAL_POLICIES,
                $this->lng->txt('rbac_delete_local_policies_info')
            );
        } else {
            $del =  new ilRadioOption(
                $this->lng->txt('rbac_delete_local_policies'),
                ilObjRole::MODE_UNPROTECTED_DELETE_LOCAL_POLICIES,
                $this->lng->txt('rbac_unprotected_delete_local_policies_info')
            );
        }
        $rad->addOption($del);
        
        $form->addItem($rad);
        $this->tpl->setContent($form->getHTML());
    }

Here is the call graph for this function:

Here is the caller graph for this function:

showDefaultPermissionSettings()

ilObjRoleGUI::showDefaultPermissionSettings ( )

protected

check if default permissions are shown or not

Returns

Definition at line 197 of file class.ilObjRoleGUI.php.

References ilObjectGUI\$objDefinition, and getContainerType().

Referenced by executeCommand(), and getTabs().

    {
        global $objDefinition;
        
        return $objDefinition->isContainer($this->getContainerType());
    }

Here is the call graph for this function:

Here is the caller graph for this function:

updateObject()

ilObjRoleGUI::updateObject

(

)

Save role settings.

Returns

Definition at line 608 of file class.ilObjRoleGUI.php.

References checkDuplicate(), initFormRoleProperties(), loadRoleProperties(), object, ilUtil\sendFailure(), and ilUtil\sendSuccess().

    {
        global $rbacadmin;
        
        $this->initFormRoleProperties(self::MODE_GLOBAL_UPDATE);
        if ($this->form->checkInput() and !$this->checkDuplicate($this->object->getId())) {
            include_once './Services/AccessControl/classes/class.ilObjRole.php';
            $this->loadRoleProperties($this->object);
            $this->object->update();
            $rbacadmin->setProtected(
                $this->obj_ref_id,
                $this->object->getId(),
                $this->form->getInput('pro') ? 'y' : 'n'
            );
            ilUtil::sendSuccess($this->lng->txt("saved_successfully"), true);
            $this->ctrl->redirect($this, 'edit');
        }
        
        ilUtil::sendFailure($this->lng->txt('err_check_input'));
        $this->form->setValuesByPost();
        $this->tpl->setContent($this->form->getHTML());
        return false;
    }

Here is the call graph for this function:

userassignmentObject()

ilObjRoleGUI::userassignmentObject

(

)

display user assignment panel

Definition at line 1151 of file class.ilObjRoleGUI.php.

References $ilUser, ilObjectGUI\$lng, ilObjectGUI\$rbacreview, ilObjectGUI\$rbacsystem, ilSecuritySettings\_getInstance(), array, checkAccess(), ilRepositorySearchGUI\fillAutoCompleteToolbar(), and object.

    {
        global $rbacreview, $rbacsystem, $lng, $ilUser;
        
        if (!$this->checkAccess('edit_userassignment', 'edit_permission')) {
            $this->ilias->raiseError($this->lng->txt("msg_no_perm_assign_user_to_role"), $this->ilias->error_obj->MESSAGE);
        }
        
        $this->tabs_gui->setTabActive('user_assignment');
        
        $this->tpl->addBlockFile('ADM_CONTENT', 'adm_content', 'tpl.rbac_ua.html', 'Services/AccessControl');
        
        include_once './Services/UIComponent/Toolbar/classes/class.ilToolbarGUI.php';
        $tb = new ilToolbarGUI();

        // protected admin role
        include_once './Services/PrivacySecurity/classes/class.ilSecuritySettings.php';
        if (
            $this->object->getId() != SYSTEM_ROLE_ID ||
                (
                    !$rbacreview->isAssigned($ilUser->getId(), SYSTEM_ROLE_ID) or
                    !ilSecuritySettings::_getInstance()->isAdminRoleProtected()
                )
        ) {


            // add member
            include_once './Services/Search/classes/class.ilRepositorySearchGUI.php';
            ilRepositorySearchGUI::fillAutoCompleteToolbar(
                $this,
                $tb,
                array(
                    'auto_complete_name'        => $lng->txt('user'),
                    'submit_name'                       => $lng->txt('add')
                )
            );

            /*
                    // add button
                    $tb->addFormButton($lng->txt("add"), "assignUser");
            */
            $tb->addSpacer();

            $tb->addButton(
                $this->lng->txt('search_user'),
                $this->ctrl->getLinkTargetByClass('ilRepositorySearchGUI', 'start')
            );
            $tb->addSpacer();
        }
        
        $tb->addButton(
            $this->lng->txt('role_mailto'),
            $this->ctrl->getLinkTarget($this, 'mailToRole')
        );
        $this->tpl->setVariable('BUTTONS_UA', $tb->getHTML());
        
        
        include_once './Services/PrivacySecurity/classes/class.ilSecuritySettings.php';
        $role_assignment_editable = true;
        if (
                $this->object->getId() == SYSTEM_ROLE_ID &&
                !ilSecuritySettings::_getInstance()->checkAdminRoleAccessible($ilUser->getId())) {
            $role_assignment_editable = false;
        }

        include_once './Services/AccessControl/classes/class.ilAssignedUsersTableGUI.php';
        $ut = new ilAssignedUsersTableGUI($this, 'userassignment', $this->object->getId(), $role_assignment_editable);
        
        $this->tpl->setVariable('TABLE_UA', $ut->getHTML());
        
        return true;
    }

Here is the call graph for this function:

Field Documentation

$container_type

ilObjRoleGUI::$container_type = ''

protected

Definition at line 38 of file class.ilObjRoleGUI.php.

Referenced by getContainerType().

$ctrl

ilObjRoleGUI::$ctrl

Definition at line 41 of file class.ilObjRoleGUI.php.

$obj_obj_id

ilObjRoleGUI::$obj_obj_id = 0

protected

Definition at line 36 of file class.ilObjRoleGUI.php.

Referenced by getParentObjId().

$obj_obj_type

ilObjRoleGUI::$obj_obj_type = ''

protected

Definition at line 37 of file class.ilObjRoleGUI.php.

Referenced by getParentType().

$obj_ref_id

ilObjRoleGUI::$obj_ref_id = 0

protected

Definition at line 35 of file class.ilObjRoleGUI.php.

Referenced by addUserObject(), adoptPermSaveObject(), changeExistingObjectsObject(), editObject(), ensureRoleAccessForContext(), executeCommand(), getParentRefId(), listDesktopItemsObject(), permObject(), permSaveObject(), and saveObject().

$type

ilObjRoleGUI::$type

Definition at line 32 of file class.ilObjRoleGUI.php.

MODE_GLOBAL_CREATE

const ilObjRoleGUI::MODE_GLOBAL_CREATE = 2

Definition at line 23 of file class.ilObjRoleGUI.php.

MODE_GLOBAL_UPDATE

const ilObjRoleGUI::MODE_GLOBAL_UPDATE = 1

Definition at line 22 of file class.ilObjRoleGUI.php.

MODE_LOCAL_CREATE

const ilObjRoleGUI::MODE_LOCAL_CREATE = 4

Definition at line 25 of file class.ilObjRoleGUI.php.

MODE_LOCAL_UPDATE

const ilObjRoleGUI::MODE_LOCAL_UPDATE = 3

Definition at line 24 of file class.ilObjRoleGUI.php.

---

The documentation for this class was generated from the following file:

• Services/AccessControl/classes/class.ilObjRoleGUI.php