ilObjRoleGUI Class Reference

Class ilObjRoleGUI. More...

Inheritance diagram for ilObjRoleGUI:

Collaboration diagram for ilObjRoleGUI:

Public Member Functions
	__construct ($a_data, $a_id, $a_call_by_reference=false, $a_prepare_output=true)
	Constructor public. More...
	executeCommand ()
	getParentRefId ()
	Get ref id of current object (not role folder id) More...
	getParentObjId ()
	Get obj_id of current object. More...
	getParentType ()
	get type of current object (not role folder) More...
	setBackTarget ($a_text, $a_link)
	set back tab target More...
	getBackTarget ()
	getAdminTabs ()
	admin and normal tabs are equal for roles More...
	createObject ()
	Only called from administration -> role folder ? Otherwise this check access is wrong. More...
	editObject ()
	Edit role properties. More...
	saveObject ()
	Save new role. More...
	updateObject ()
	Save role settings. More...
	permSaveObject ($a_show_admin_permissions=false)
	save permissions More...
	adoptPermSaveObject ()
	copy permissions from role More...
	assignSaveObject ()
	wrapper for renamed function More...
	addUserObject ($a_user_ids)
	Assign user (callback from ilRepositorySearchGUI) More...
	deassignUserObject ()
	de-assign users from role More...
	userassignmentObject ()
	display user assignment panel More...
	cancelObject ()
	cancelObject is called when an operation is canceled, method links back public More...
	listUsersRoleObject ()
	__prepareOutput ()
	__setHeader ()
	getTabs ()
	mailToRoleObject ()
	checkAccess ($a_perm_global, $a_perm_obj='')
Public Member Functions inherited from ilObjectGUI
	executeCommand ()
	execute command More...
	withReferences ()
	determines wether objects are referenced or not (got ref ids or not) More...
	setCreationMode ($a_mode=true)
	if true, a creation screen is displayed the current $_GET[ref_id] don't belong to the current class! the mode is determined in ilrepositorygui More...
	getCreationMode ()
	get creation mode More...
	prepareOutput ($a_show_subobjects=true)
	prepare output More...
	getAdminTabs ()
	administration tabs show only permissions and trash folder More...
	getHTML ()
	confirmedDeleteObject ()
	confirmed deletion of object -> objects are moved to trash or deleted immediately, if trash is disabled More...
	cancelDeleteObject ()
	cancel deletion of object More...
	cancelObject ()
	cancel action and go back to previous page public More...
	createObject ()
	create new object form More...
	cancelCreation ()
	cancel create action and go back to repository parent More...
	saveObject ()
	save object More...
	getDidacticTemplateVar ($a_type)
	Get didactic template setting from creation screen. More...
	putObjectInTree (ilObject $a_obj, $a_parent_node_id=null)
	Add object to tree at given position. More...
	editObject ()
	edit object More...
	addExternalEditFormCustom (ilPropertyFormGUI $a_form)
	updateObject ()
	updates object entry in object_data More...
	getFormAction ($a_cmd, $a_formaction="")
	get form action for command (command is method name without "Object", e.g. More...
	isVisible ($a_ref_id, $a_type)
	viewObject ()
	viewObject container presentation for "administration -> repository, trash, permissions" More...
	deleteObject ($a_error=false)
	Display deletion confirmation screen. More...
	cloneAllObject ()
	Clone single (not container object) Method is overwritten in ilContainerGUI. More...
	redirectAfterCreation ()
	Redirect after creation, see https://docu.ilias.de/goto_docu_wiki_wpage_5035_1357.html. More...
	addToDeskObject ()
	removeFromDeskObject ()
Public Member Functions inherited from ILIAS\Object\ImplementsCreationCallback
	callCreationCallback (\ilObject $object, \ilObjectDefinition $obj_definition, int $requested_crtcb)

Data Fields
const	MODE_GLOBAL_UPDATE = 1
const	MODE_GLOBAL_CREATE = 2
const	MODE_LOCAL_UPDATE = 3
const	MODE_LOCAL_CREATE = 4
	$type
	$ctrl
Data Fields inherited from ilObjectGUI
const	ALLOWED_TAGS_IN_TITLE_AND_DESCRIPTION
const	COPY_WIZARD_NEEDS_PAGE = 1
	$objDefinition
	$tpl
	$tree
	$lng
	$data
	$object
	$ref_id
	$obj_id
	$maxcount
	$formaction
	$return_location
	$target_frame
	$tab_target_script
	$actions
	$sub_objects
	$omit_locator = false
const	CFORM_NEW = 1
const	CFORM_IMPORT = 2
const	CFORM_CLONE = 3

Protected Member Functions
	getContainerType ()
	Get type of role container. More...
	showDefaultPermissionSettings ()
	check if default permissions are shown or not More...
	initFormRoleProperties ($a_mode)
	Create role prperty form. More...
	loadRoleProperties (ilObjRole $role)
	Store form input in role object. More...
	readRoleProperties (ilObjRole $role)
	Read role properties and write them to form. More...
	checkDuplicate ($a_role_id=0)
	Check if role with same name already exists in this folder. More...
	permObject ($a_show_admin_permissions=false)
	Show template permissions. More...
	adminPermObject ()
	Show administration permissions. More...
	adminPermSaveObject ()
	Save admin permissions. More...
	adoptPermObject ()
	confirmDeleteRoleObject ()
	Show delete confirmation screen. More...
	performDeleteRoleObject ()
	Delete role. More...
	addAdminLocatorItems ($a_do_not_add_object=false)
	isChangeExistingObjectsConfirmationRequired ()
	Check if a confirmation about further settings is required or not. More...
	showChangeExistingObjectsConfirmation ()
	Show confirmation screen. More...
	changeExistingObjectsObject ()
	Change existing objects. More...
	setSubTabs ($a_tab)
	Set sub tabs. More...
	addToClipboardObject ()
	Add selected users to user clipboard. More...
	addLocatorItems ()
	ensureRoleAccessForContext ()
Protected Member Functions inherited from ilObjectGUI
	getObjectService ()
	Get object service. More...
	assignObject ()
	setTitleAndDescription ()
	called by prepare output More...
	initHeaderAction ($a_sub_type=null, $a_sub_id=null)
	Add header action menu. More...
	insertHeaderAction ($a_list_gui)
	Insert header action into main template. More...
	addHeaderAction ()
	Add header action menu. More...
	redrawHeaderActionObject ()
	Ajax call: redraw action header only. More...
	setTabs ()
	set admin tabs public More...
	setAdminTabs ()
	set admin tabs public More...
	setLocator ()
	set Locator More...
	addLocatorItems ()
	should be overwritten to add object specific items (repository items are preloaded) More...
	omitLocator ($a_omit=true)
	addAdminLocatorItems ($a_do_not_add_object=false)
	should be overwritten to add object specific items (repository items are preloaded) More...
	initCreationForms ($a_new_type)
	Init creation froms. More...
	getCreationFormsHTML (array $a_forms)
	Get HTML for creation forms (accordion) More...
	initCreateForm ($a_new_type)
	Init object creation form. More...
	initDidacticTemplate (ilPropertyFormGUI $form)
	Show didactic template types. More...
	addDidacticTemplateOptions (array &$a_options)
	Add custom templates. More...
	afterSave (ilObject $a_new_object)
	Post (successful) object creation hook. More...
	initEditForm ()
	Init object edit form. More...
	initEditCustomForm (ilPropertyFormGUI $a_form)
	Add custom fields to update form. More...
	getEditFormValues ()
	Get values for edit form. More...
	getEditFormCustomValues (array &$a_values)
	Add values to custom edit fields. More...
	validateCustom (ilPropertyFormGUI $a_form)
	Validate custom values (if not possible with checkInput()) More...
	updateCustom (ilPropertyFormGUI $a_form)
	Insert custom update form values into object. More...
	afterUpdate ()
	Post (successful) object update hook. More...
	initImportForm ($a_new_type)
	Init object import form. More...
	importFileObject ($parent_id=null, $a_catch_errors=true)
	Import. More...
	afterImport (ilObject $a_new_object)
	Post (successful) object import hook. More...
	setFormAction ($a_cmd, $a_formaction)
	set specific form action for command More...
	getReturnLocation ($a_cmd, $a_location="")
	get return location for command (command is method name without "Object", e.g. More...
	setReturnLocation ($a_cmd, $a_location)
	set specific return location for command More...
	getTargetFrame ($a_cmd, $a_target_frame="")
	get target frame for command (command is method name without "Object", e.g. More...
	setTargetFrame ($a_cmd, $a_target_frame)
	set specific target frame for command More...
	showPossibleSubObjects ()
	show possible subobjects (pulldown menu) More...
	getTemplateFile ($a_cmd, $a_type="")
	get a template blockfile format: tpl. More...
	getTabs ()
	get tabs abstract method. More...
	__showButton ($a_cmd, $a_text, $a_target='')
	hitsperpageObject ()
&	__initTableGUI ()
	__setTableGUIBasicData (&$tbl, &$result_set, $a_from="")
	standard implementation for tables use 'from' variable use different initial setting of table More...
	redirectToRefId ($a_ref_id, $a_cmd="")
	redirects to (repository) view per ref id usually to a container and usually used at the end of a save/import method where the object gui type (of the new object) doesn't match with the type of the current $_GET["ref_id"] value More...
	fillCloneTemplate ($a_tpl_varname, $a_type)
	Fill object clone template This method can be called from any object GUI class that wants to offer object cloning. More...
	getCenterColumnHTML ()
	Get center column. More...
	getRightColumnHTML ()
	Display right column. More...
	setColumnSettings (ilColumnGUI $column_gui)
	May be overwritten in subclasses. More...
	checkPermission ($a_perm, $a_cmd="", $a_type="", $a_ref_id=null)
	Check permission and redirect on error. More...
	checkPermissionBool ($a_perm, $a_cmd="", $a_type="", $a_ref_id=null)
	Check permission. More...
	enableDragDropFileUpload ()
	Enables the file upload into this object by dropping files. More...
	handleAutoRating (ilObject $a_new_obj)
	Activate rating automatically if parent container setting. More...

Protected Attributes
	$obj_ref_id = 0
	$obj_obj_id = 0
	$obj_obj_type = ''
	$container_type = ''
Protected Attributes inherited from ilObjectGUI
const	UPLOAD_TYPE_LOCAL = 1
const	UPLOAD_TYPE_UPLOAD_DIRECTORY = 2
	$ilErr
	$locator
	$user
	$access
	$rbacsystem
	$settings
	$rbacreview
	$toolbar
	$tmp_import_dir
	$tabs_gui = null
	$ctrl
	$object_service
	$favourites
	$request

Additional Inherited Members
Static Public Member Functions inherited from ilObjectGUI
static	_gotoRepositoryRoot ($a_raise_error=false)
	Goto repository root. More...
static	_gotoRepositoryNode ($a_ref_id, $a_cmd="frameset")
	Goto repository root. More...

Detailed Description

Class ilObjRoleGUI.

Author

Stefan Meyer <smeyer.de>

Sascha Hofmann sasch.nosp@m.ahof.nosp@m.mann@.nosp@m.gmx..nosp@m.de

Version

$Id$ ilObjRoleGUI: ilRepositorySearchGUI, ilExportGUI, ilRecommendedContentRoleConfigGUI

Definition at line 31 of file class.ilObjRoleGUI.php.

Constructor & Destructor Documentation

__construct()

ilObjRoleGUI::__construct	(		$a_data,
			$a_id,
			$a_call_by_reference = false,
			$a_prepare_output = true
	)

Constructor public.

Definition at line 58 of file class.ilObjRoleGUI.php.

References $DIC, ilObjectGUI\$lng, ilObjectGUI\$tree, ILIAS\GlobalScreen\Provider\__construct(), ilObject\_lookupObjId(), ilObject\_lookupType(), getParentObjId(), and getParentRefId().

    {
        global $DIC;

        $tree = $DIC['tree'];
        $lng = $DIC['lng'];

        $lng->loadLanguageModule('rbac');

        //TODO: move this to class.ilias.php
        define("USER_FOLDER_ID", 7);

        // Add ref_id of object that contains this role folder

        $this->obj_ref_id = (int) $_REQUEST['rolf_ref_id']
            ? (int) $_REQUEST['rolf_ref_id']
            : (int) $_REQUEST['ref_id'];

        $this->obj_obj_id = ilObject::_lookupObjId($this->getParentRefId());
        $this->obj_obj_type = ilObject::_lookupType($this->getParentObjId());

        $this->container_type = ilObject::_lookupType(ilObject::_lookupObjId($this->obj_ref_id));

        $this->type = "role";
        parent::__construct($a_data, $a_id, $a_call_by_reference, false);
        $this->ctrl->saveParameter($this, ['obj_id', 'rolf_ref_id']);
    }

Here is the call graph for this function:

Member Function Documentation

__prepareOutput()

ilObjRoleGUI::__prepareOutput

(

)

Definition at line 1148 of file class.ilObjRoleGUI.php.

References __setHeader(), ilUtil\infoPanel(), and ilUtil\sendInfo().

    {
        // output objects
        $this->tpl->addBlockFile("CONTENT", "content", "tpl.adm_content.html");
        $this->tpl->addBlockFile("STATUSLINE", "statusline", "tpl.statusline.html");

        // output message
        if ($this->message) {
            ilUtil::sendInfo($this->message);
        }

        // display infopanel if something happened
        ilUtil::infoPanel();

        // set header
        $this->__setHeader();
    }

Here is the call graph for this function:

__setHeader()

ilObjRoleGUI::__setHeader

(

)

Definition at line 1166 of file class.ilObjRoleGUI.php.

References ilUtil\getImagePath(), and getTabs().

Referenced by __prepareOutput().

    {
        $this->tpl->setTitle($this->lng->txt('role'));
        $this->tpl->setDescription($this->object->getTitle());
        $this->tpl->setTitleIcon(ilUtil::getImagePath("icon_role.svg"));

        $this->getTabs($this->tabs_gui);
    }

Here is the call graph for this function:

Here is the caller graph for this function:

addAdminLocatorItems()

ilObjRoleGUI::addAdminLocatorItems (   $a_do_not_add_object = false )

protected

Definition at line 1179 of file class.ilObjRoleGUI.php.

References $_GET, $DIC, ilObjRole\_getTranslation(), ilObject\_lookupObjId(), ilObject\_lookupType(), and ROLE_FOLDER_ID.

    {
        global $DIC;

        $ilLocator = $DIC['ilLocator'];

        if (
            $_GET["admin_mode"] == "settings"
            && $_GET["ref_id"] == ROLE_FOLDER_ID) {     // system settings
            parent::addAdminLocatorItems(true);

            $ilLocator->addItem(
                $this->lng->txt("obj_" . ilObject::_lookupType(ilObject::_lookupObjId($_GET["ref_id"]))),
                $this->ctrl->getLinkTargetByClass("ilobjrolefoldergui", 'view')
            );

            if ($_GET["obj_id"] > 0) {
                $ilLocator->addItem(
                    ilObjRole::_getTranslation($this->object->getTitle()),
                    $this->ctrl->getLinkTarget($this, 'perm')
                );
            }
        } else {
            parent::addAdminLocatorItems($a_do_not_add_object);
        }
    }

Here is the call graph for this function:

addLocatorItems()

ilObjRoleGUI::addLocatorItems ( )

protected

Definition at line 1474 of file class.ilObjRoleGUI.php.

References $_GET, $DIC, and ilObjRole\_getTranslation().

    {
        global $DIC;

        $ilLocator = $DIC['ilLocator'];

        if ($_GET["admin_mode"] == "") {
            $this->ctrl->setParameterByClass(
                "ilobjrolegui",
                "obj_id",
                (int) $_GET["obj_id"]
            );
            $ilLocator->addItem(
                ilObjRole::_getTranslation($this->object->getTitle()),
                $this->ctrl->getLinkTargetByClass(
                    [
                        "ilpermissiongui",
                        "ilobjrolegui"
                    ],
                    "perm"
                )
            );
        }
    }

Here is the call graph for this function:

addToClipboardObject()

ilObjRoleGUI::addToClipboardObject ( )

protected

Add selected users to user clipboard.

Definition at line 1449 of file class.ilObjRoleGUI.php.

References $_POST, $DIC, $GLOBALS, ilObjectGUI\$lng, ilUserClipboard\getInstance(), and ilUtil\sendFailure().

    {
        global $DIC;

        $lng = $DIC['lng'];
        $ilCtrl = $DIC['ilCtrl'];

        $users = (array) $_POST['user_id'];
        if (!count($users)) {
            ilUtil::sendFailure($this->lng->txt('select_one'), true);
            $ilCtrl->redirect($this, 'userassignment');
        }
        include_once './Services/User/classes/class.ilUserClipboard.php';
        $clip = ilUserClipboard::getInstance($GLOBALS['DIC']['ilUser']->getId());
        $clip->add($users);
        $clip->save();

        $lng->loadLanguageModule('user');
        ilUtil::sendSuccess($this->lng->txt('clipboard_user_added'), true);
        $ilCtrl->redirect($this, 'userassignment');
    }

Here is the call graph for this function:

addUserObject()

ilObjRoleGUI::addUserObject

(

$a_user_ids

)

Assign user (callback from ilRepositorySearchGUI)

Parameters

array

$a_user_ids

Array of user ids

Returns

Definition at line 886 of file class.ilObjRoleGUI.php.

References $DIC, $GLOBALS, $obj_ref_id, ilObjectGUI\$rbacreview, ANONYMOUS_USER_ID, checkAccess(), ROLE_FOLDER_ID, ilUtil\sendFailure(), and ilUtil\sendInfo().

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];

        if (!$this->checkAccess('edit_userassignment', 'edit_permission')) {
            ilUtil::sendFailure($this->lng->txt('msg_no_perm_assign_user_to_role'), true);
            return false;
        }
        if (!$rbacreview->isAssignable($this->object->getId(), $this->obj_ref_id) &&
            $this->obj_ref_id != ROLE_FOLDER_ID) {
            ilUtil::sendFailure($this->lng->txt('err_role_not_assignable'), true);
            return false;
        }
        if (!$a_user_ids) {
            $GLOBALS['DIC']['lng']->loadLanguageModule('search');
            ilUtil::sendFailure($this->lng->txt('search_err_user_not_exist'), true);
            return false;
        }

        $assigned_users_all = $rbacreview->assignedUsers($this->object->getId());

        // users to assign
        $assigned_users_new = array_diff($a_user_ids, array_intersect($a_user_ids, $assigned_users_all));

        // selected users all already assigned. stop
        if (count($assigned_users_new) == 0) {
            ilUtil::sendInfo($this->lng->txt("rbac_msg_user_already_assigned"), true);
            $this->ctrl->redirect($this, 'userassignment');
        }

        // assign new users
        foreach ($assigned_users_new as $user_id) {
            if ($user_id === ANONYMOUS_USER_ID) {
                $this->tpl->setOnScreenMessage('failure', $this->lng->txt('msg_anonymous_cannot_be_assigned'), true);
                return;
            }
            $rbacadmin->assignUser($this->object->getId(), $user_id, false);
        }

        // update object data entry (to update last modification date)
        $this->object->update();

        ilUtil::sendSuccess($this->lng->txt("msg_userassignment_changed"), true);
        $this->ctrl->redirect($this, 'userassignment');
    }

Here is the call graph for this function:

adminPermObject()

ilObjRoleGUI::adminPermObject ( )

protected

Show administration permissions.

Returns

Definition at line 587 of file class.ilObjRoleGUI.php.

References permObject().

    {
        return $this->permObject(true);
    }

Here is the call graph for this function:

adminPermSaveObject()

ilObjRoleGUI::adminPermSaveObject ( )

protected

Save admin permissions.

Returns

Definition at line 596 of file class.ilObjRoleGUI.php.

References permSaveObject().

    {
        return $this->permSaveObject(true);
    }

Here is the call graph for this function:

adoptPermObject()

ilObjRoleGUI::adoptPermObject ( )

protected

Definition at line 601 of file class.ilObjRoleGUI.php.

References $DIC, ilObjectGUI\$rbacreview, ilObjRole\_getTranslation(), ilUtil\_sortIds(), and SYSTEM_ROLE_ID.

Referenced by adoptPermSaveObject().

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $output = [];

        $this->tabs_gui->clearTargets();

        $parent_role_ids = $rbacreview->getParentRoleIds($this->obj_ref_id, true);
        $ids = [];
        foreach ($parent_role_ids as $id => $tmp) {
            $ids[] = $id;
        }
        // Sort ids
        $sorted_ids = ilUtil::_sortIds($ids, 'object_data', 'type,title', 'obj_id');
        $key = 0;
        foreach ($sorted_ids as $id) {
            $par = $parent_role_ids[$id];
            if ($par["obj_id"] != SYSTEM_ROLE_ID && $this->object->getId() != $par["obj_id"]) {
                $output[$key]["role_id"] = $par["obj_id"];
                $output[$key]["type"] = ($par["type"] == 'role' ? $this->lng->txt('obj_role') : $this->lng->txt('obj_rolt'));
                $output[$key]["role_name"] = ilObjRole::_getTranslation($par["title"]);
                $output[$key]["role_desc"] = $par["desc"];
                $key++;
            }
        }


        include_once('./Services/AccessControl/classes/class.ilRoleAdoptPermissionTableGUI.php');

        $tbl = new ilRoleAdoptPermissionTableGUI($this, "adoptPerm");
        $tbl->setTitle($this->lng->txt("adopt_perm_from_template"));
        $tbl->setData($output);

        $this->tpl->setContent($tbl->getHTML());
    }

Here is the call graph for this function:

Here is the caller graph for this function:

adoptPermSaveObject()

ilObjRoleGUI::adoptPermSaveObject

(

)

copy permissions from role

public

Definition at line 823 of file class.ilObjRoleGUI.php.

References $_POST, ilObjectGUI\$access, $DIC, $obj_ref_id, ilObjectGUI\$rbacreview, ilObjectGUI\$rbacsystem, ilObjectGUI\$tree, ilObjRole\_getTranslation(), adoptPermObject(), checkAccess(), and ilUtil\sendFailure().

    {
        global $DIC;

        $rbacadmin = $DIC['rbacadmin'];
        $rbacsystem = $DIC['rbacsystem'];
        $rbacreview = $DIC['rbacreview'];
        $tree = $DIC['tree'];

        if (!$_POST['adopt']) {
            ilUtil::sendFailure($this->lng->txt('select_one'));
            $this->adoptPermObject();
            return false;
        }

        $access = $this->checkAccess('visible,write', 'edit_permission');
        if (!$access) {
            $this->ilias->raiseError($this->lng->txt("msg_no_perm_perm"), $this->ilias->error_obj->MESSAGE);
        }

        if ($this->object->getId() == $_POST["adopt"]) {
            ilUtil::sendFailure($this->lng->txt("msg_perm_adopted_from_itself"), true);
        } else {
            $rbacadmin->deleteRolePermission($this->object->getId(), $this->obj_ref_id);
            $parentRoles = $rbacreview->getParentRoleIds($this->obj_ref_id, true);
            $rbacadmin->copyRoleTemplatePermissions(
                $_POST["adopt"],
                $parentRoles[$_POST["adopt"]]["parent"],
                $this->obj_ref_id,
                $this->object->getId(),
                false
            );

            // update object data entry (to update last modification date)
            $this->object->update();

            // send info
            $obj_data = &$this->ilias->obj_factory->getInstanceByObjId($_POST["adopt"]);
            ilUtil::sendSuccess($this->lng->txt("msg_perm_adopted_from1") . " '" .
                    ilObjRole::_getTranslation($obj_data->getTitle()) . "'.<br/>" .
                     $this->lng->txt("msg_perm_adopted_from2"), true);
        }

        $this->ctrl->redirect($this, "perm");
    }

Here is the call graph for this function:

assignSaveObject()

ilObjRoleGUI::assignSaveObject

(

)

wrapper for renamed function

public

Definition at line 874 of file class.ilObjRoleGUI.php.

    {
        $this->assignUserObject();
    }

cancelObject()

ilObjRoleGUI::cancelObject

(

)

cancelObject is called when an operation is canceled, method links back public

Definition at line 1084 of file class.ilObjRoleGUI.php.

References $_GET.

    {
        if ($_GET["new_type"] != "role") {
            $this->ctrl->redirect($this, "userassignment");
        } else {
            $this->ctrl->redirectByClass("ilobjrolefoldergui", "view");
        }
    }

changeExistingObjectsObject()

ilObjRoleGUI::changeExistingObjectsObject ( )

protected

Change existing objects.

Returns

Definition at line 1402 of file class.ilObjRoleGUI.php.

References $_POST, $obj_ref_id, ROLE_FOLDER_ID, ROOT_FOLDER_ID, and ilUtil\stripSlashes().

    {
        $mode = (int) $_POST['mode'];
        $start = ($this->obj_ref_id == ROLE_FOLDER_ID ? ROOT_FOLDER_ID : $this->obj_ref_id);
        $this->object->changeExistingObjects(
            $start,
            $mode,
            json_decode(
                ilUtil::stripSlashes($_POST['type_filter']),
                true
            )
        );
        ilUtil::sendSuccess($this->lng->txt('settings_saved'), true);
        $this->ctrl->redirect($this, 'perm');
    }

Here is the call graph for this function:

checkAccess()

ilObjRoleGUI::checkAccess	(		$a_perm_global,
			$a_perm_obj = ''
	)

Definition at line 1298 of file class.ilObjRoleGUI.php.

References $DIC, ilObjectGUI\$rbacsystem, and ROLE_FOLDER_ID.

Referenced by addUserObject(), adoptPermSaveObject(), confirmDeleteRoleObject(), deassignUserObject(), editObject(), executeCommand(), getTabs(), performDeleteRoleObject(), permObject(), permSaveObject(), and userassignmentObject().

    {
        global $DIC;

        $rbacsystem = $DIC['rbacsystem'];
        $ilAccess = $DIC['ilAccess'];

        $a_perm_obj = $a_perm_obj ? $a_perm_obj : $a_perm_global;

        if ($this->obj_ref_id == ROLE_FOLDER_ID) {
            return $rbacsystem->checkAccess($a_perm_global, $this->obj_ref_id);
        } else {
            return $ilAccess->checkAccess($a_perm_obj, '', $this->obj_ref_id);
        }
    }

Here is the caller graph for this function:

checkDuplicate()

ilObjRoleGUI::checkDuplicate (   $a_role_id = 0 )

protected

Check if role with same name already exists in this folder.

Returns

bool

Definition at line 442 of file class.ilObjRoleGUI.php.

Referenced by saveObject(), and updateObject().

    {
        // disabled due to mantis #0013742: Renaming global roles: ILIAS denies if title fits other role title partially
        return false;
    }

Here is the caller graph for this function:

confirmDeleteRoleObject()

ilObjRoleGUI::confirmDeleteRoleObject ( )

protected

Show delete confirmation screen.

Returns

Definition at line 643 of file class.ilObjRoleGUI.php.

References $DIC, $ilUser, ilObjectGUI\$rbacreview, ilObjRole\_getTranslation(), checkAccess(), ilUtil\getImagePath(), and ilUtil\sendQuestion().

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $ilUser = $DIC['ilUser'];

        $this->tabs_gui->clearTargets();

        if (!$this->checkAccess('visible,write', 'edit_permission')) {
            $this->tpl->setOnScreenMessage('msg_no_perm_perm', $this->lng->txt('permission_denied'), true);
            $this->ctrl->redirectByClass(ilRepositoryGUI::class);
        }

        $question = $this->lng->txt('rbac_role_delete_qst');
        if ($rbacreview->isAssigned($ilUser->getId(), $this->object->getId())) {
            $question .= ('<br />' . $this->lng->txt('rbac_role_delete_self'));
        }
        ilUtil::sendQuestion($question);

        include_once './Services/Utilities/classes/class.ilConfirmationGUI.php';

        $confirm = new ilConfirmationGUI();
        $confirm->setFormAction($this->ctrl->getFormAction($this));
        $confirm->setHeaderText($question);
        $confirm->setCancel($this->lng->txt('cancel'), 'perm');
        $confirm->setConfirm($this->lng->txt('rbac_delete_role'), 'performDeleteRole');

        $confirm->addItem(
            'role',
            $this->object->getId(),
            ilObjRole::_getTranslation($this->object->getTitle()),
            ilUtil::getImagePath('icon_role.svg')
        );

        $this->tpl->setContent($confirm->getHTML());
        return true;
    }

Here is the call graph for this function:

createObject()

ilObjRoleGUI::createObject

(

)

Only called from administration -> role folder ? Otherwise this check access is wrong.

Returns

Definition at line 355 of file class.ilObjRoleGUI.php.

References $DIC, ilObjectGUI\$rbacsystem, and initFormRoleProperties().

    {
        global $DIC;

        $rbacsystem = $DIC['rbacsystem'];

        if (!$rbacsystem->checkAccess('create_role', $this->obj_ref_id)) {
            $this->tpl->setOnScreenMessage('failure', $this->lng->txt('permission_denied'), true);
            $this->ctrl->redirectByClass(ilRepositoryGUI::class);
        }

        $this->initFormRoleProperties(self::MODE_GLOBAL_CREATE);
        $this->tpl->setContent($this->form->getHTML());
    }

Here is the call graph for this function:

deassignUserObject()

ilObjRoleGUI::deassignUserObject

(

)

de-assign users from role

public

Definition at line 940 of file class.ilObjRoleGUI.php.

References $_GET, $_POST, $DIC, ilObjectGUI\$rbacreview, ilObjectGUI\$rbacsystem, ilObjectGUI\$user, checkAccess(), ilUtil\sendFailure(), SYSTEM_ROLE_ID, and SYSTEM_USER_ID.

    {
        global $DIC;

        $rbacsystem = $DIC['rbacsystem'];
        $rbacadmin = $DIC['rbacadmin'];
        $rbacreview = $DIC['rbacreview'];

        if (!$this->checkAccess('edit_userassignment', 'edit_permission')) {
            $this->ilias->raiseError($this->lng->txt("msg_no_perm_assign_user_to_role"), $this->ilias->error_obj->MESSAGE);
        }

        $selected_users = ($_POST["user_id"]) ? $_POST["user_id"] : array($_GET["user_id"]);

        if ($selected_users[0] === null) {
            $this->ilias->raiseError($this->lng->txt("no_checkbox"), $this->ilias->error_obj->MESSAGE);
        }

        // prevent unassignment of system user from system role
        if ($this->object->getId() == SYSTEM_ROLE_ID) {
            if ($admin = array_search(SYSTEM_USER_ID, $selected_users) !== false) {
                unset($selected_users[$admin]);
            }
        }

        // check for each user if the current role is his last global role before deassigning him
        $last_role = [];
        $global_roles = $rbacreview->getGlobalRoles();

        foreach ($selected_users as $user) {
            $assigned_roles = $rbacreview->assignedRoles($user);
            $assigned_global_roles = array_intersect($assigned_roles, $global_roles);

            if (count($assigned_roles) == 1 or (count($assigned_global_roles) == 1 and in_array($this->object->getId(), $assigned_global_roles))) {
                $userObj = $this->ilias->obj_factory->getInstanceByObjId($user);
                $last_role[$user] = $userObj->getFullName();
                unset($userObj);
            }
        }


        // ... else perform deassignment
        foreach ($selected_users as $user) {
            if (!isset($last_role[$user])) {
                $rbacadmin->deassignUser($this->object->getId(), $user);
            }
        }

        // update object data entry (to update last modification date)
        $this->object->update();

        // raise error if last role was taken from a user...
        if (count($last_role)) {
            $user_list = implode(", ", $last_role);
            ilUtil::sendFailure($this->lng->txt('msg_is_last_role') . ': ' . $user_list . '<br />' . $this->lng->txt('msg_min_one_role'), true);
        } else {
            ilUtil::sendSuccess($this->lng->txt("msg_userassignment_changed"), true);
        }
        $this->ctrl->redirect($this, 'userassignment');
    }

Here is the call graph for this function:

editObject()

ilObjRoleGUI::editObject

(

)

Edit role properties.

Returns

Definition at line 374 of file class.ilObjRoleGUI.php.

References $DIC, $obj_ref_id, ilObjectGUI\$rbacreview, checkAccess(), initFormRoleProperties(), readRoleProperties(), and SYSTEM_ROLE_ID.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $ilToolbar = $DIC['ilToolbar'];

        if (!$this->checkAccess('write', 'edit_permission')) {
            $this->tpl->setOnScreenMessage('msg_no_perm_write', $this->lng->txt('permission_denied'), true);
            $this->ctrl->redirectByClass(ilRepositoryGUI::class);
        }

        $this->tabs_gui->activateTab('edit_properties');

        // Show copy role button
        if ($this->object->getId() != SYSTEM_ROLE_ID) {
            $ilToolbar->setFormAction($this->ctrl->getFormAction($this));
            if ($rbacreview->isDeleteable($this->object->getId(), $this->obj_ref_id)) {
                $ilToolbar->addButton(
                    $this->lng->txt('rbac_delete_role'),
                    $this->ctrl->getLinkTarget($this, 'confirmDeleteRole')
                );
            }
        }

        $this->initFormRoleProperties(self::MODE_GLOBAL_UPDATE);
        $this->readRoleProperties($this->object);
        $this->tpl->setContent($this->form->getHTML());
    }

Here is the call graph for this function:

ensureRoleAccessForContext()

ilObjRoleGUI::ensureRoleAccessForContext ( )

protected

Definition at line 1503 of file class.ilObjRoleGUI.php.

References $DIC, Vendor\Package\$e, $obj_ref_id, and ROLE_FOLDER_ID.

Referenced by executeCommand().

    {
        global $DIC;

        $review = $DIC->rbac()->review();
        $logger = $DIC->logger()->ac();

        // creation of roles
        if (
            !$this->object->getId() ||
            $this->object->getId() == ROLE_FOLDER_ID
        ) {
            return true;
        }


        $possible_roles = [];
        try {
            $possible_roles = $review->getRolesOfObject(
                $this->obj_ref_id,
                false
            );
        } catch (\InvalidArgumentException $e) {
            $logger->warning('Role access check failed: ' . $e);

            include_once "Services/Object/exceptions/class.ilObjectException.php";
            throw new \ilObjectException($this->lng->txt('permission_denied'));
        }

        if (!in_array($this->object->getId(), $possible_roles)) {
            $logger->warning('Object id: ' . $this->object->getId() . ' is not accessible for ref_id: ' . $this->obj_ref_id);
            include_once "Services/Object/exceptions/class.ilObjectException.php";
            throw new \ilObjectException($this->lng->txt('permission_denied'));
        }
        return true;
    }

Here is the caller graph for this function:

executeCommand()

ilObjRoleGUI::executeCommand

(

)

Definition at line 87 of file class.ilObjRoleGUI.php.

References $DIC, $GLOBALS, $obj_ref_id, ilObjectGUI\$rbacsystem, $ret, ilExportOptions\allocateExportId(), checkAccess(), ensureRoleAccessForContext(), ilExportOptions\KEY_ROOT, ilExportOptions\newInstance(), ilObjectGUI\prepareOutput(), and showDefaultPermissionSettings().

    {
        global $DIC;

        $rbacsystem = $DIC['rbacsystem'];

        $this->prepareOutput();

        $next_class = $this->ctrl->getNextClass($this);
        $cmd = $this->ctrl->getCmd();

        $this->ensureRoleAccessForContext();

        switch ($next_class) {
            case 'ilrepositorysearchgui':

                if (!$GLOBALS['DIC']['ilAccess']->checkAccess('edit_permission', '', $this->obj_ref_id)) {
                    $GLOBALS['DIC']['ilErr']->raiseError($GLOBALS['DIC']['lng']->txt('permission_denied'), $GLOBALS['DIC']['ilErr']->WARNING);
                }
                include_once('./Services/Search/classes/class.ilRepositorySearchGUI.php');
                $rep_search = new ilRepositorySearchGUI();
                $rep_search->setTitle($this->lng->txt('role_add_user'));
                $rep_search->setCallback($this, 'addUserObject');

                // Set tabs
                $this->tabs_gui->setTabActive('user_assignment');
                $this->ctrl->setReturn($this, 'userassignment');
                $ret = &$this->ctrl->forwardCommand($rep_search);
                break;

            case 'ilexportgui':

                $this->tabs_gui->setTabActive('export');

                include_once './Services/Export/classes/class.ilExportOptions.php';
                $eo = ilExportOptions::newInstance(ilExportOptions::allocateExportId());
                $eo->addOption(ilExportOptions::KEY_ROOT, 0, $this->object->getId(), $this->obj_ref_id);

                include_once './Services/Export/classes/class.ilExportGUI.php';
                $exp = new ilExportGUI($this, new ilObjRole($this->object->getId()));
                $exp->addFormat('xml');
                $this->ctrl->forwardCommand($exp);
                break;

            case 'ilrecommendedcontentroleconfiggui':
                $this->tabs_gui->setTabActive('rep_recommended_content');
                $ui = new ilRecommendedContentRoleConfigGUI($this->object->getId(), $this->obj_ref_id);
                $this->ctrl->forwardCommand($ui);
                break;

            default:
                if (!$cmd) {
                    if ($this->showDefaultPermissionSettings()) {
                        $cmd = "perm";
                    } else {
                        $cmd = 'userassignment';
                    }
                }
                $cmd .= "Object";
                $this->$cmd();

                break;
        }

        return true;
    }

Here is the call graph for this function:

getAdminTabs()

ilObjRoleGUI::getAdminTabs

(

)

admin and normal tabs are equal for roles

Definition at line 198 of file class.ilObjRoleGUI.php.

References getTabs().

    {
        $this->getTabs();
    }

Here is the call graph for this function:

getBackTarget()

ilObjRoleGUI::getBackTarget

(

)

Definition at line 190 of file class.ilObjRoleGUI.php.

    {
        return $this->back_target ? $this->back_target : array();
    }

getContainerType()

ilObjRoleGUI::getContainerType ( )

protected

Get type of role container.

Returns

Definition at line 207 of file class.ilObjRoleGUI.php.

References $container_type.

Referenced by showDefaultPermissionSettings().

    {
        return $this->container_type;
    }

Here is the caller graph for this function:

getParentObjId()

ilObjRoleGUI::getParentObjId

(

)

Get obj_id of current object.

Returns

Definition at line 167 of file class.ilObjRoleGUI.php.

References $obj_obj_id.

Referenced by __construct().

    {
        return $this->obj_obj_id;
    }

Here is the caller graph for this function:

getParentRefId()

ilObjRoleGUI::getParentRefId

(

)

Get ref id of current object (not role folder id)

Returns

Definition at line 158 of file class.ilObjRoleGUI.php.

References $obj_ref_id.

Referenced by __construct(), and permObject().

    {
        return $this->obj_ref_id;
    }

Here is the caller graph for this function:

getParentType()

ilObjRoleGUI::getParentType

(

)

get type of current object (not role folder)

Returns

Definition at line 176 of file class.ilObjRoleGUI.php.

References $obj_obj_type.

Referenced by permObject(), and permSaveObject().

    {
        return $this->obj_obj_type;
    }

Here is the caller graph for this function:

getTabs()

ilObjRoleGUI::getTabs

(

)

Definition at line 1209 of file class.ilObjRoleGUI.php.

References $_GET, $DIC, ilObjectGUI\$rbacreview, ANONYMOUS_ROLE_ID, checkAccess(), and showDefaultPermissionSettings().

Referenced by __setHeader(), and getAdminTabs().

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $ilHelp = $DIC['ilHelp'];

        $base_role_container = $rbacreview->getFoldersAssignedToRole($this->object->getId(), true);

        $activate_role_edit = false;

        // todo: activate the following (allow editing of local roles in
        // roles administration)
        if (in_array($this->obj_ref_id, $base_role_container) ||
            (strtolower($_GET["baseClass"]) == "iladministrationgui" &&
            $_GET["admin_mode"] == "settings")) {
            $activate_role_edit = true;
        }

        // not so nice (workaround for using tabs in repository)
        $this->tabs_gui->clearTargets();

        $ilHelp->setScreenIdComponent("role");

        if ($this->back_target != "") {
            $this->tabs_gui->setBackTarget(
                $this->back_target["text"],
                $this->back_target["link"]
            );
        } else {
            $this->tabs_gui->setBackTarget($this->lng->txt('btn_back'), $this->ctrl->getParentReturn($this));
        }

        if ($this->checkAccess('write', 'edit_permission') && $activate_role_edit) {
            $this->tabs_gui->addTarget(
                "edit_properties",
                $this->ctrl->getLinkTarget($this, "edit"),
                ["edit", "update"],
                get_class($this)
            );
        }
        if ($this->checkAccess('write', 'edit_permission') && $this->showDefaultPermissionSettings()) {
            $this->tabs_gui->addTarget(
                "default_perm_settings",
                $this->ctrl->getLinkTarget($this, "perm"),
                [],
                get_class($this)
            );
        }

        if ($this->checkAccess('write', 'edit_permission') && $activate_role_edit && $this->object->getId() != ANONYMOUS_ROLE_ID) {
            $this->tabs_gui->addTarget(
                "user_assignment",
                $this->ctrl->getLinkTarget($this, "userassignment"),
                ["deassignUser", "userassignment", "assignUser", "searchUserForm", "search"],
                get_class($this)
            );
        }

        if ($this->checkAccess('write', 'edit_permission') && $activate_role_edit && $this->object->getId() != ANONYMOUS_ROLE_ID) {
            $this->lng->loadLanguageModule("rep");
            $this->tabs_gui->addTarget(
                "rep_recommended_content",
                $this->ctrl->getLinkTargetByClass("ilrecommendedcontentroleconfiggui", "")
            );
        }
        if ($this->checkAccess('write', 'edit_permission')) {
            $this->tabs_gui->addTarget(
                'export',
                $this->ctrl->getLinkTargetByClass('ilExportGUI'),
                []
            );
        }
    }

Here is the call graph for this function:

Here is the caller graph for this function:

initFormRoleProperties()

ilObjRoleGUI::initFormRoleProperties (   $a_mode )

protected

Create role prperty form.

Returns

Parameters

int

$a_mode

Definition at line 233 of file class.ilObjRoleGUI.php.

References ilObjRole\isAutoGenerated(), ROLE_FOLDER_ID, ilFormPropertyGUI\setDisabled(), and ilCheckboxInputGUI\setValue().

Referenced by createObject(), editObject(), saveObject(), and updateObject().

    {
        include_once './Services/Form/classes/class.ilPropertyFormGUI.php';
        $this->form = new ilPropertyFormGUI();

        if ($this->creation_mode) {
            $this->ctrl->setParameter($this, "new_type", 'role');
        }
        $this->form->setFormAction($this->ctrl->getFormAction($this));

        switch ($a_mode) {
            case self::MODE_GLOBAL_CREATE:
                $this->form->setTitle($this->lng->txt('role_new'));
                $this->form->addCommandButton('save', $this->lng->txt('role_new'));
                break;

            case self::MODE_GLOBAL_UPDATE:
                $this->form->setTitle($this->lng->txt('role_edit'));
                $this->form->addCommandButton('update', $this->lng->txt('save'));
                break;

            case self::MODE_LOCAL_CREATE:
            case self::MODE_LOCAL_UPDATE:
        }
        // Fix cancel
        $this->form->addCommandButton('cancel', $this->lng->txt('cancel'));

        $title = new ilTextInputGUI($this->lng->txt('title'), 'title');
        if (ilObjRole::isAutoGenerated($this->object->getId())) {
            $title->setDisabled(true);
        } else {
            //#17111 No validation for disabled fields
            $title->setValidationRegexp('/^(?!il_).*$/');
            $title->setValidationFailureMessage($this->lng->txt('msg_role_reserved_prefix'));
        }

        $title->setSize(40);
        $title->setMaxLength(70);
        $title->setRequired(true);
        $this->form->addItem($title);

        $desc = new ilTextAreaInputGUI($this->lng->txt('description'), 'desc');
        if (ilObjRole::isAutoGenerated($this->object->getId())) {
            $desc->setDisabled(true);
        }
        $desc->setCols(40);
        $desc->setRows(3);
        $this->form->addItem($desc);

        if ($a_mode != self::MODE_LOCAL_CREATE && $a_mode != self::MODE_GLOBAL_CREATE) {
            $ilias_id = new ilNonEditableValueGUI($this->lng->txt("ilias_id"), "ilias_id");
            $this->form->addItem($ilias_id);
        }

        if ($this->obj_ref_id == ROLE_FOLDER_ID) {
            $reg = new ilCheckboxInputGUI($this->lng->txt('allow_register'), 'reg');
            $reg->setValue(1);
            #$reg->setInfo($this->lng->txt('rbac_new_acc_reg_info'));
            $this->form->addItem($reg);

            $la = new ilCheckboxInputGUI($this->lng->txt('allow_assign_users'), 'la');
            $la->setValue(1);
            #$la->setInfo($this->lng->txt('rbac_local_admin_info'));
            $this->form->addItem($la);
        }

        $pro = new ilCheckboxInputGUI($this->lng->txt('role_protect_permissions'), 'pro');
        $pro->setValue(1);
        #$pro->setInfo($this->lng->txt('role_protext_permission_info'));
        $this->form->addItem($pro);

        return true;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

isChangeExistingObjectsConfirmationRequired()

ilObjRoleGUI::isChangeExistingObjectsConfirmationRequired ( )

protected

Check if a confirmation about further settings is required or not.

Returns

bool

Definition at line 1318 of file class.ilObjRoleGUI.php.

References $_POST, $DIC, and ilObjectGUI\$rbacreview.

Referenced by permSaveObject().

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];

        if (!(int) $_POST['recursive'] and !is_array($_POST['recursive_list'])) {
            return false;
        }

        // Role is protected
        if ($rbacreview->isProtected($this->obj_ref_id, $this->object->getId())) {
            // TODO: check if recursive_list is enabled
            // and if yes: check if inheritance is broken for the relevant object types
            return count($rbacreview->getFoldersAssignedToRole($this->object->getId())) > 1;
        } else {
            // TODO: check if recursive_list is enabled
            // and if yes: check if inheritance is broken for the relevant object types
            return count($rbacreview->getFoldersAssignedToRole($this->object->getId())) > 1;
        }
    }

Here is the caller graph for this function:

listUsersRoleObject()

ilObjRoleGUI::listUsersRoleObject

(

)

Definition at line 1094 of file class.ilObjRoleGUI.php.

References $_POST, $_SESSION, $DIC, ilObjectGUI\$rbacreview, ilObjectGUI\$rbacsystem, ilObjectGUI\$user, ilObjectGUI\__showButton(), ilUtil\formCheckbox(), ilObjectFactory\getInstanceByObjId(), and ilUtil\sendFailure().

    {
        global $DIC;

        $rbacsystem = $DIC['rbacsystem'];
        $rbacreview = $DIC['rbacreview'];

        $_SESSION["role_role"] = $_POST["role"] = $_POST["role"] ? $_POST["role"] : $_SESSION["role_role"];

        if (!is_array($_POST["role"])) {
            ilUtil::sendFailure($this->lng->txt("role_no_roles_selected"));
            $this->searchObject();

            return false;
        }

        $this->tpl->addBlockFile("ADM_CONTENT", "adm_content", "tpl.role_usr_selection.html", "Services/AccessControl");
        $this->__showButton("searchUserForm", $this->lng->txt("role_new_search"));

        // GET ALL MEMBERS
        $members = array();

        foreach ($_POST["role"] as $role_id) {
            $members = array_merge($rbacreview->assignedUsers($role_id), $members);
        }

        $members = array_unique($members);

        // FORMAT USER DATA
        $counter = 0;
        $f_result = array();

        foreach ($members as $user) {
            if (!$tmp_obj = ilObjectFactory::getInstanceByObjId($user, false)) {
                continue;
            }

            $user_ids[$counter] = $user;

            // TODO: exclude anonymous user
            $f_result[$counter][] = ilUtil::formCheckbox(0, "user[]", $user);
            $f_result[$counter][] = $tmp_obj->getLogin();
            $f_result[$counter][] = $tmp_obj->getFirstname();
            $f_result[$counter][] = $tmp_obj->getLastname();

            unset($tmp_obj);
            ++$counter;
        }

        $this->__showSearchUserTable($f_result, $user_ids, "listUsersRole");

        return true;
    }

Here is the call graph for this function:

loadRoleProperties()

ilObjRoleGUI::loadRoleProperties ( ilObjRole  $role )

protected

Store form input in role object.

Returns

Parameters

object

$role

Definition at line 312 of file class.ilObjRoleGUI.php.

References ilObjRole\setAllowRegister(), ilObject\setDescription(), ilObject\setTitle(), and ilObjRole\toggleAssignUsersStatus().

Referenced by saveObject(), and updateObject().

    {
        //Don't set if fields are disabled to prevent html manipulation.
        if (!$this->form->getItemByPostVar('title')->getDisabled()) {
            $role->setTitle($this->form->getInput('title'));
        }
        if (!$this->form->getItemByPostVar('desc')->getDisabled()) {
            $role->setDescription($this->form->getInput('desc'));
        }
        $role->setAllowRegister($this->form->getInput('reg'));
        $role->toggleAssignUsersStatus($this->form->getInput('la'));
        return true;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

mailToRoleObject()

ilObjRoleGUI::mailToRoleObject

(

)

Definition at line 1284 of file class.ilObjRoleGUI.php.

References $_SESSION, ilObject\_getIdsForTitle(), ilMailFormCall\getRedirectTarget(), and ilUtil\redirect().

    {
        $obj_ids = ilObject::_getIdsForTitle($this->object->getTitle(), $this->object->getType());
        if (count($obj_ids) > 1) {
            $_SESSION['mail_roles'][] = '#il_role_' . $this->object->getId();
        } else {
            $_SESSION['mail_roles'][] = (new \ilRoleMailboxAddress($this->object->getId()))->value();
        }

        require_once 'Services/Mail/classes/class.ilMailFormCall.php';
        $script = ilMailFormCall::getRedirectTarget($this, 'userassignment', [], ['type' => 'role']);
        ilUtil::redirect($script);
    }

Here is the call graph for this function:

performDeleteRoleObject()

ilObjRoleGUI::performDeleteRoleObject ( )

protected

Delete role.

Returns

Definition at line 687 of file class.ilObjRoleGUI.php.

References ilObjectGUI\$access, and checkAccess().

    {
        $access = $this->checkAccess('visible,write', 'edit_permission');
        if (!$access) {
            $this->tpl->setOnScreenMessage('msg_no_perm_perm', $this->lng->txt('permission_denied'), true);
            $this->ctrl->redirectByClass(ilRepositoryGUI::class);
        }

        $this->object->setParent((int) $this->obj_ref_id);
        $this->object->delete();
        ilUtil::sendSuccess($this->lng->txt('msg_deleted_role'), true);

        $this->ctrl->returnToParent($this);
    }

Here is the call graph for this function:

permObject()

ilObjRoleGUI::permObject (   $a_show_admin_permissions = false )

protected

Show template permissions.

Returns

void

Definition at line 482 of file class.ilObjRoleGUI.php.

References $DIC, ilObjectGUI\$ilErr, $obj_ref_id, ilObjectGUI\$objDefinition, ilObjectGUI\$rbacreview, ilTable2GUI\addMultiCommand(), checkAccess(), ilAccordionGUI\FORCE_ALL_OPEN, getParentRefId(), getParentType(), ilObjectRoleTemplatePermissionTableGUI\parse(), ROLE_FOLDER_ID, setSubTabs(), and SYSTEM_ROLE_ID.

Referenced by adminPermObject().

    {
        global $DIC;

        $ilTabs = $DIC['ilTabs'];
        $ilErr = $DIC['ilErr'];
        $ilToolbar = $DIC['ilToolbar'];
        $objDefinition = $DIC['objDefinition'];
        $rbacreview = $DIC['rbacreview'];

        $ilTabs->setTabActive('default_perm_settings');

        $this->setSubTabs('default_perm_settings');

        if ($a_show_admin_permissions) {
            $ilTabs->setSubTabActive('rbac_admin_permissions');
        } else {
            $ilTabs->setSubTabActive('rbac_repository_permissions');
        }

        if (!$this->checkAccess('write', 'edit_permission')) {
            $this->tpl->setOnScreenMessage('msg_no_perm_write', $this->lng->txt('permission_denied'), true);
            $this->ctrl->redirectByClass(ilRepositoryGUI::class);
        }

        // Show copy role button
        if ($this->object->getId() != SYSTEM_ROLE_ID) {
            $ilToolbar->setFormAction($this->ctrl->getFormAction($this));
            $ilToolbar->addButton(
                $this->lng->txt("adopt_perm_from_template"),
                $this->ctrl->getLinkTarget($this, 'adoptPerm')
            );
            if ($rbacreview->isDeleteable($this->object->getId(), $this->obj_ref_id)) {
                $ilToolbar->addButton(
                    $this->lng->txt('rbac_delete_role'),
                    $this->ctrl->getLinkTarget($this, 'confirmDeleteRole')
                );
            }
        }

        $this->tpl->addBlockFile(
            'ADM_CONTENT',
            'adm_content',
            'tpl.rbac_template_permissions.html',
            'Services/AccessControl'
        );

        $this->tpl->setVariable('PERM_ACTION', $this->ctrl->getFormAction($this));

        include_once './Services/Accordion/classes/class.ilAccordionGUI.php';
        $acc = new ilAccordionGUI();
        $acc->setBehaviour(ilAccordionGUI::FORCE_ALL_OPEN);
        $acc->setId('template_perm_' . $this->getParentRefId());

        if ($this->obj_ref_id == ROLE_FOLDER_ID) {
            if ($a_show_admin_permissions) {
                $subs = ilObjRole::getSubObjects('adm', true);
            } else {
                $subs = ilObjRole::getSubObjects('root', false);
            }
        } else {
            $subs = ilObjRole::getSubObjects($this->getParentType(), $a_show_admin_permissions);
        }

        foreach ($subs as $subtype => $def) {
            include_once 'Services/AccessControl/classes/class.ilObjectRoleTemplatePermissionTableGUI.php';
            $tbl = new ilObjectRoleTemplatePermissionTableGUI(
                $this,
                'perm',
                $this->getParentRefId(),
                $this->object->getId(),
                $subtype,
                $a_show_admin_permissions
            );
            $tbl->parse();

            $acc->addItem($def['translation'], $tbl->getHTML());
        }

        $this->tpl->setVariable('ACCORDION', $acc->getHTML());

        // Add options table
        include_once './Services/AccessControl/classes/class.ilObjectRoleTemplateOptionsTableGUI.php';
        $options = new ilObjectRoleTemplateOptionsTableGUI(
            $this,
            'perm',
            $this->obj_ref_id,
            $this->object->getId(),
            $a_show_admin_permissions
        );
        if ($this->object->getId() != SYSTEM_ROLE_ID) {
            $options->addMultiCommand(
                $a_show_admin_permissions ? 'adminPermSave' : 'permSave',
                $this->lng->txt('save')
            );
        }

        $options->parse();
        $this->tpl->setVariable('OPTIONS_TABLE', $options->getHTML());
    }

Here is the call graph for this function:

Here is the caller graph for this function:

permSaveObject()

ilObjRoleGUI::permSaveObject

(

$a_show_admin_permissions = false

)

save permissions

public

Definition at line 707 of file class.ilObjRoleGUI.php.

References $_POST, $DIC, $obj_ref_id, ilObjectGUI\$objDefinition, ilObjectGUI\$rbacreview, ilObjectGUI\$rbacsystem, ilObjectGUI\$tree, ilRbacLog\add(), checkAccess(), ilRbacLog\diffTemplate(), ilRbacLog\EDIT_TEMPLATE, ilRbacLog\gatherTemplate(), getParentType(), ilRbacLog\isActive(), isChangeExistingObjectsConfirmationRequired(), ilObjRole\MODE_PROTECTED_KEEP_LOCAL_POLICIES, ilObjRole\MODE_UNPROTECTED_KEEP_LOCAL_POLICIES, ROLE_FOLDER_ID, ROOT_FOLDER_ID, showChangeExistingObjectsConfirmation(), and ilUtil\tf2yn().

Referenced by adminPermSaveObject().

    {
        global $DIC;

        $rbacsystem = $DIC['rbacsystem'];
        $rbacadmin = $DIC['rbacadmin'];
        $rbacreview = $DIC['rbacreview'];
        $objDefinition = $DIC['objDefinition'];
        $tree = $DIC['tree'];

        if (!$this->checkAccess('visible,write', 'edit_permission')) {
            $this->tpl->setOnScreenMessage('msg_no_perm_perm', $this->lng->txt('permission_denied'), true);
            $this->ctrl->redirectByClass(ilRepositoryGUI::class);
        }

        // rbac log
        include_once "Services/AccessControl/classes/class.ilRbacLog.php";
        $rbac_log_active = ilRbacLog::isActive();
        if ($rbac_log_active) {
            $rbac_log_old = ilRbacLog::gatherTemplate($this->obj_ref_id, $this->object->getId());
        }

        // delete all template entries of enabled types
        if ($this->obj_ref_id == ROLE_FOLDER_ID) {
            if ($a_show_admin_permissions) {
                $subs = ilObjRole::getSubObjects('adm', true);
            } else {
                $subs = ilObjRole::getSubObjects('root', false);
            }
        } else {
            $subs = ilObjRole::getSubObjects($this->getParentType(), $a_show_admin_permissions);
        }

        foreach ($subs as $subtype => $def) {
            // Delete per object type
            $rbacadmin->deleteRolePermission($this->object->getId(), $this->obj_ref_id, $subtype);
        }

        if (empty($_POST["template_perm"])) {
            $_POST["template_perm"] = array();
        }

        foreach ($_POST["template_perm"] as $key => $ops_array) {
            // sets new template permissions
            $rbacadmin->setRolePermission($this->object->getId(), $key, $ops_array, $this->obj_ref_id);
        }

        if ($rbac_log_active) {
            $rbac_log_new = ilRbacLog::gatherTemplate($this->obj_ref_id, $this->object->getId());
            $rbac_log_diff = ilRbacLog::diffTemplate($rbac_log_old, $rbac_log_new);
            ilRbacLog::add(ilRbacLog::EDIT_TEMPLATE, $this->obj_ref_id, $rbac_log_diff);
        }

        // update object data entry (to update last modification date)
        $this->object->update();

        // set protected flag
        if ($this->obj_ref_id == ROLE_FOLDER_ID or $rbacreview->isAssignable($this->object->getId(), $this->obj_ref_id)) {
            $rbacadmin->setProtected($this->obj_ref_id, $this->object->getId(), ilUtil::tf2yn($_POST['protected']));
        }

        if ($a_show_admin_permissions) {
            $_POST['recursive'] = true;
        }

        // Redirect if Change existing objects is not chosen
        if (!$_POST['recursive'] and !is_array($_POST['recursive_list'])) {
            ilUtil::sendSuccess($this->lng->txt("saved_successfully"), true);
            if ($a_show_admin_permissions) {
                $this->ctrl->redirect($this, 'adminPerm');
            } else {
                $this->ctrl->redirect($this, 'perm');
            }
        }
        // New implementation
        if ($this->isChangeExistingObjectsConfirmationRequired() and !$a_show_admin_permissions) {
            $this->showChangeExistingObjectsConfirmation();
            return true;
        }

        $start = ($this->obj_ref_id == ROLE_FOLDER_ID ? ROOT_FOLDER_ID : $this->obj_ref_id);
        if ($a_show_admin_permissions) {
            $start = $tree->getParentId($this->obj_ref_id);
        }

        if ($_POST['protected']) {
            $this->object->changeExistingObjects(
                $start,
                ilObjRole::MODE_PROTECTED_KEEP_LOCAL_POLICIES,
                ['all'],
                []
            );
        } else {
            $this->object->changeExistingObjects(
                $start,
                ilObjRole::MODE_UNPROTECTED_KEEP_LOCAL_POLICIES,
                ['all'],
                []
            );
        }
        ilUtil::sendSuccess($this->lng->txt("saved_successfully"), true);

        if ($a_show_admin_permissions) {
            $this->ctrl->redirect($this, 'adminPerm');
        } else {
            $this->ctrl->redirect($this, 'perm');
        }
        return true;
    }

Here is the call graph for this function:

Here is the caller graph for this function:

readRoleProperties()

ilObjRoleGUI::readRoleProperties ( ilObjRole  $role )

protected

Read role properties and write them to form.

Returns

Parameters

object

$role

Definition at line 331 of file class.ilObjRoleGUI.php.

References ilObjectGUI\$data, $DIC, ilObjectGUI\$rbacreview, ilObject\_lookupType(), ilObjRole\getAllowRegister(), ilObjRole\getAssignUsersStatus(), ilObject\getDescription(), ilObject\getId(), ilObjRole\getPresentationTitle(), and IL_INST_ID.

Referenced by editObject().

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];

        $data['title'] = $role->getPresentationTitle();
        $data['desc'] = $role->getDescription();
        $data['ilias_id'] = 'il_' . IL_INST_ID . '_' . ilObject::_lookupType($role->getId()) . '_' . $role->getId();
        $data['reg'] = $role->getAllowRegister();
        $data['la'] = $role->getAssignUsersStatus();
        $data['pro'] = $rbacreview->isProtected($this->obj_ref_id, $role->getId());

        $this->form->setValuesByArray($data);
    }

Here is the call graph for this function:

Here is the caller graph for this function:

saveObject()

ilObjRoleGUI::saveObject

(

)

Save new role.

Returns

Definition at line 409 of file class.ilObjRoleGUI.php.

References $DIC, $obj_ref_id, ilObjectGUI\$rbacreview, checkDuplicate(), initFormRoleProperties(), loadRoleProperties(), and ilUtil\sendFailure().

    {
        global $DIC;

        $rbacadmin = $DIC['rbacadmin'];
        $rbacreview = $DIC['rbacreview'];

        $this->initFormRoleProperties(self::MODE_GLOBAL_CREATE);
        if ($this->form->checkInput() and !$this->checkDuplicate()) {
            include_once './Services/AccessControl/classes/class.ilObjRole.php';
            $this->loadRoleProperties($this->role = new ilObjRole());
            $this->role->create();
            $rbacadmin->assignRoleToFolder($this->role->getId(), $this->obj_ref_id, 'y');
            $rbacadmin->setProtected(
                $this->obj_ref_id,
                $this->role->getId(),
                $this->form->getInput('pro') ? 'y' : 'n'
            );
            ilUtil::sendSuccess($this->lng->txt("role_added"), true);
            $this->ctrl->setParameter($this, 'obj_id', $this->role->getId());
            $this->ctrl->redirect($this, 'perm');
        }

        ilUtil::sendFailure($this->lng->txt('err_check_input'));
        $this->form->setValuesByPost();
        $this->tpl->setContent($this->form->getHTML());
        return false;
    }

Here is the call graph for this function:

setBackTarget()

ilObjRoleGUI::setBackTarget	(		$a_text,
			$a_link
	)

set back tab target

Definition at line 184 of file class.ilObjRoleGUI.php.

    {
        $this->back_target = array("text" => $a_text,
            "link" => $a_link);
    }

setSubTabs()

ilObjRoleGUI::setSubTabs (   $a_tab )

protected

Set sub tabs.

Parameters

object

$a_tab

Returns

Definition at line 1423 of file class.ilObjRoleGUI.php.

References $DIC, and ROLE_FOLDER_ID.

Referenced by permObject().

    {
        global $DIC;

        $ilTabs = $DIC['ilTabs'];

        switch ($a_tab) {
            case 'default_perm_settings':
                if ($this->obj_ref_id != ROLE_FOLDER_ID) {
                    return true;
                }
                $ilTabs->addSubTabTarget(
                    'rbac_repository_permissions',
                    $this->ctrl->getLinkTarget($this, 'perm')
                );
                $ilTabs->addSubTabTarget(
                    'rbac_admin_permissions',
                    $this->ctrl->getLinkTarget($this, 'adminPerm')
                );
        }
        return true;
    }

Here is the caller graph for this function:

showChangeExistingObjectsConfirmation()

ilObjRoleGUI::showChangeExistingObjectsConfirmation ( )

protected

Show confirmation screen.

Returns

Definition at line 1344 of file class.ilObjRoleGUI.php.

References $_POST, ilObjRole\MODE_PROTECTED_DELETE_LOCAL_POLICIES, ilObjRole\MODE_PROTECTED_KEEP_LOCAL_POLICIES, ilObjRole\MODE_UNPROTECTED_DELETE_LOCAL_POLICIES, ilObjRole\MODE_UNPROTECTED_KEEP_LOCAL_POLICIES, ilRadioGroupInputGUI\setValue(), and ilRadioOption\setValue().

Referenced by permSaveObject().

    {
        $protected = $_POST['protected'];

        include_once './Services/Form/classes/class.ilPropertyFormGUI.php';
        $form = new ilPropertyFormGUI();
        $form->setFormAction($this->ctrl->getFormAction($this, 'changeExistingObjects'));
        $form->setTitle($this->lng->txt('rbac_change_existing_confirm_tbl'));

        $form->addCommandButton('changeExistingObjects', $this->lng->txt('change_existing_objects'));
        $form->addCommandButton('perm', $this->lng->txt('cancel'));

        $hidden = new ilHiddenInputGUI('type_filter');
        $hidden->setValue($_POST['recursive'] ? json_encode(['all']) : json_encode($_POST['recursive_list']));
        $form->addItem($hidden);

        $rad = new ilRadioGroupInputGUI($this->lng->txt('rbac_local_policies'), 'mode');

        if ($protected) {
            $rad->setValue(ilObjRole::MODE_PROTECTED_DELETE_LOCAL_POLICIES);
            $keep = new ilRadioOption(
                $this->lng->txt('rbac_keep_local_policies'),
                ilObjRole::MODE_PROTECTED_KEEP_LOCAL_POLICIES,
                $this->lng->txt('rbac_keep_local_policies_info')
            );
        } else {
            $rad->setValue(ilObjRole::MODE_UNPROTECTED_KEEP_LOCAL_POLICIES);
            $keep = new ilRadioOption(
                $this->lng->txt('rbac_keep_local_policies'),
                ilObjRole::MODE_UNPROTECTED_KEEP_LOCAL_POLICIES,
                $this->lng->txt('rbac_unprotected_keep_local_policies_info')
            );
        }
        $rad->addOption($keep);

        if ($protected) {
            $del = new ilRadioOption(
                $this->lng->txt('rbac_delete_local_policies'),
                ilObjRole::MODE_PROTECTED_DELETE_LOCAL_POLICIES,
                $this->lng->txt('rbac_delete_local_policies_info')
            );
        } else {
            $del = new ilRadioOption(
                $this->lng->txt('rbac_delete_local_policies'),
                ilObjRole::MODE_UNPROTECTED_DELETE_LOCAL_POLICIES,
                $this->lng->txt('rbac_unprotected_delete_local_policies_info')
            );
        }
        $rad->addOption($del);

        $form->addItem($rad);
        $this->tpl->setContent($form->getHTML());
    }

Here is the call graph for this function:

Here is the caller graph for this function:

showDefaultPermissionSettings()

ilObjRoleGUI::showDefaultPermissionSettings ( )

protected

check if default permissions are shown or not

Returns

Definition at line 216 of file class.ilObjRoleGUI.php.

References $DIC, ilObjectGUI\$objDefinition, and getContainerType().

Referenced by executeCommand(), and getTabs().

    {
        global $DIC;

        $objDefinition = $DIC['objDefinition'];

        return $objDefinition->isContainer($this->getContainerType())
            || $objDefinition->isAdministrationObject($this->getContainerType());
    }

Here is the call graph for this function:

Here is the caller graph for this function:

updateObject()

ilObjRoleGUI::updateObject

(

)

Save role settings.

Returns

Definition at line 452 of file class.ilObjRoleGUI.php.

References $DIC, checkDuplicate(), initFormRoleProperties(), loadRoleProperties(), and ilUtil\sendFailure().

    {
        global $DIC;

        $rbacadmin = $DIC['rbacadmin'];

        $this->initFormRoleProperties(self::MODE_GLOBAL_UPDATE);
        if ($this->form->checkInput() and !$this->checkDuplicate($this->object->getId())) {
            include_once './Services/AccessControl/classes/class.ilObjRole.php';
            $this->loadRoleProperties($this->object);
            $this->object->update();
            $rbacadmin->setProtected(
                $this->obj_ref_id,
                $this->object->getId(),
                $this->form->getInput('pro') ? 'y' : 'n'
            );
            ilUtil::sendSuccess($this->lng->txt("saved_successfully"), true);
            $this->ctrl->redirect($this, 'edit');
        }

        ilUtil::sendFailure($this->lng->txt('err_check_input'));
        $this->form->setValuesByPost();
        $this->tpl->setContent($this->form->getHTML());
        return false;
    }

Here is the call graph for this function:

userassignmentObject()

ilObjRoleGUI::userassignmentObject

(

)

display user assignment panel

Definition at line 1005 of file class.ilObjRoleGUI.php.

References $DIC, $ilUser, ilObjectGUI\$lng, ilObjectGUI\$rbacreview, ilObjectGUI\$rbacsystem, ilSecuritySettings\_getInstance(), checkAccess(), ilRepositorySearchGUI\fillAutoCompleteToolbar(), and SYSTEM_ROLE_ID.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacsystem = $DIC['rbacsystem'];
        $lng = $DIC['lng'];
        $ilUser = $DIC['ilUser'];

        if (!$this->checkAccess('edit_userassignment', 'edit_permission')) {
            $this->ilias->raiseError($this->lng->txt("msg_no_perm_assign_user_to_role"), $this->ilias->error_obj->MESSAGE);
        }

        $this->tabs_gui->setTabActive('user_assignment');

        $this->tpl->addBlockFile('ADM_CONTENT', 'adm_content', 'tpl.rbac_ua.html', 'Services/AccessControl');

        include_once './Services/UIComponent/Toolbar/classes/class.ilToolbarGUI.php';
        $tb = new ilToolbarGUI();

        // protected admin role
        include_once './Services/PrivacySecurity/classes/class.ilSecuritySettings.php';
        if (
            $this->object->getId() != SYSTEM_ROLE_ID ||
                (
                    $rbacreview->isAssigned($ilUser->getId(), SYSTEM_ROLE_ID) ||
                    !ilSecuritySettings::_getInstance()->isAdminRoleProtected()
                )
        ) {


            // add member
            include_once './Services/Search/classes/class.ilRepositorySearchGUI.php';
            ilRepositorySearchGUI::fillAutoCompleteToolbar(
                $this,
                $tb,
                [
                    'auto_complete_name' => $lng->txt('user'),
                    'submit_name' => $lng->txt('add')
                ]
            );

            $tb->addSpacer();

            $tb->addButton(
                $this->lng->txt('search_user'),
                $this->ctrl->getLinkTargetByClass('ilRepositorySearchGUI', 'start')
            );
            $tb->addSpacer();
        }

        $tb->addButton(
            $this->lng->txt('role_mailto'),
            $this->ctrl->getLinkTarget($this, 'mailToRole')
        );
        $this->tpl->setVariable('BUTTONS_UA', $tb->getHTML());


        include_once './Services/PrivacySecurity/classes/class.ilSecuritySettings.php';
        $role_assignment_editable = true;
        if (
                $this->object->getId() == SYSTEM_ROLE_ID &&
                !ilSecuritySettings::_getInstance()->checkAdminRoleAccessible($ilUser->getId())) {
            $role_assignment_editable = false;
        }

        include_once './Services/AccessControl/classes/class.ilAssignedUsersTableGUI.php';
        $ut = new ilAssignedUsersTableGUI($this, 'userassignment', $this->object->getId(), $role_assignment_editable);

        $this->tpl->setVariable('TABLE_UA', $ut->getHTML());

        return true;
    }

Here is the call graph for this function:

Field Documentation

$container_type

ilObjRoleGUI::$container_type = ''

protected

Definition at line 49 of file class.ilObjRoleGUI.php.

Referenced by getContainerType().

$ctrl

ilObjRoleGUI::$ctrl

Definition at line 52 of file class.ilObjRoleGUI.php.

$obj_obj_id

ilObjRoleGUI::$obj_obj_id = 0

protected

Definition at line 47 of file class.ilObjRoleGUI.php.

Referenced by getParentObjId().

$obj_obj_type

ilObjRoleGUI::$obj_obj_type = ''

protected

Definition at line 48 of file class.ilObjRoleGUI.php.

Referenced by getParentType().

$obj_ref_id

ilObjRoleGUI::$obj_ref_id = 0

protected

Definition at line 46 of file class.ilObjRoleGUI.php.

Referenced by addUserObject(), adoptPermSaveObject(), changeExistingObjectsObject(), editObject(), ensureRoleAccessForContext(), executeCommand(), getParentRefId(), permObject(), permSaveObject(), and saveObject().

$type

ilObjRoleGUI::$type

Definition at line 43 of file class.ilObjRoleGUI.php.

MODE_GLOBAL_CREATE

const ilObjRoleGUI::MODE_GLOBAL_CREATE = 2

Definition at line 34 of file class.ilObjRoleGUI.php.

MODE_GLOBAL_UPDATE

const ilObjRoleGUI::MODE_GLOBAL_UPDATE = 1

Definition at line 33 of file class.ilObjRoleGUI.php.

MODE_LOCAL_CREATE

const ilObjRoleGUI::MODE_LOCAL_CREATE = 4

Definition at line 36 of file class.ilObjRoleGUI.php.

MODE_LOCAL_UPDATE

const ilObjRoleGUI::MODE_LOCAL_UPDATE = 3

Definition at line 35 of file class.ilObjRoleGUI.php.

---

The documentation for this class was generated from the following file:

• Services/AccessControl/classes/class.ilObjRoleGUI.php