ILIAS  trunk Revision v11.0_alpha-3011-gc6b235a2e85
Public Member Functions | Static Public Member Functions | Data Fields | Protected Member Functions | Protected Attributes | Static Protected Attributes | Private Member Functions | Static Private Attributes
ilRbacReview Class Reference

class ilRbacReview Contains Review functions of core Rbac. More...

+ Collaboration diagram for ilRbacReview:

Public Member Functions

 __construct ()
 Constructor @access public. More...
 
 roleExists (string $a_title, int $a_id=0)
 Checks if a role already exists. More...
 
 getParentRoleIds (int $a_endnode_id, bool $a_templates=false)
 Get an array of parent role ids of all parent roles, if last parameter is set true you get also all parent templates. More...
 
 getRoleListByObject (int $a_ref_id, bool $a_templates=false)
 Returns a list of roles in an container. More...
 
 getAssignableRoles (bool $a_templates=false, bool $a_internal_roles=false, string $title_filter='')
 Returns a list of all assignable roles. More...
 
 getAssignableRolesInSubtree (int $ref_id)
 Returns a list of assignable roles in a subtree of the repository. More...
 
 getAssignableChildRoles (int $a_ref_id)
 Get all assignable roles directly under a specific node. More...
 
 getNumberOfAssignedUsers (array $a_roles)
 Get the number of assigned users to roles (not properly deleted user accounts are not counted) More...
 
 assignedUsers (int $a_rol_id)
 get all assigned users to a given role More...
 
 isAssigned (int $a_usr_id, int $a_role_id)
 check if a specific user is assigned to specific role More...
 
 isAssignedToAtLeastOneGivenRole (int $a_usr_id, array $a_role_ids)
 check if a specific user is assigned to at least one of the given role ids. More...
 
 assignedRoles (int $a_usr_id)
 get all assigned roles to a given user More...
 
 assignedGlobalRoles (int $a_usr_id)
 Get assigned global roles for an user. More...
 
 isAssignable (int $a_rol_id, int $a_ref_id)
 Check if its possible to assign users. More...
 
 hasMultipleAssignments (int $a_role_id)
 
 getFoldersAssignedToRole (int $a_rol_id, bool $a_assignable=false)
 Returns an array of objects assigned to a role. More...
 
 getRolesOfObject (int $a_ref_id, bool $a_assignable_only=false)
 Get roles of object. More...
 
 getRolesOfRoleFolder (int $a_ref_id, bool $a_nonassignable=true)
 get all roles of a role folder including linked local roles that are created due to stopped inheritance returns an array with role ids More...
 
 getGlobalRoles ()
 get only 'global' roles More...
 
 getLocalRoles (int $a_ref_id)
 Get local roles of object. More...
 
 getLocalPolicies (int $a_ref_id)
 Get all roles with local policies. More...
 
 getGlobalRolesArray ()
 get only 'global' roles More...
 
 getGlobalAssignableRoles ()
 get only 'global' roles (with flag 'assign_users') More...
 
 isRoleAssignedToObject (int $a_role_id, int $a_parent_id)
 Check if role is assigned to an object. More...
 
 getOperations ()
 get all possible operations More...
 
 getOperation (int $ops_id)
 get one operation by operation id More...
 
 getAllOperationsOfRole (int $a_rol_id, int $a_parent=0)
 get all possible operations of a specific role The ref_id of the role folder (parent object) is necessary to distinguish local roles More...
 
 getActiveOperationsOfRole (int $a_ref_id, int $a_role_id)
 
 getOperationsOfRole (int $a_rol_id, string $a_type, int $a_parent=0)
 get all possible operations of a specific role The ref_id of the role folder (parent object) is necessary to distinguish local roles More...
 
 getRoleOperationsOnObject (int $a_role_id, int $a_ref_id)
 
 getOperationsOnType (int $a_typ_id)
 all possible operations of a type More...
 
 getOperationsOnTypeString (string $a_type)
 all possible operations of a type More...
 
 getOperationsByTypeAndClass (string $a_type, string $a_class)
 Get operations by type and class. More...
 
 getObjectsWithStopedInheritance (int $a_rol_id, array $a_filter=[])
 get all objects in which the inheritance of role with role_id was stopped the function returns all reference ids of objects containing a role folder. More...
 
 isDeleted (int $a_node_id)
 Checks if a rolefolder is set as deleted (negative tree_id) More...
 
 isGlobalRole (int $a_role_id)
 Check if role is a global role. More...
 
 getRolesByFilter (int $a_filter=0, int $a_user_id=0, string $title_filter='')
 
 getTypeId (string $a_type)
 
 isProtected (int $a_ref_id, int $a_role_id)
 ref_id not used yet. More...
 
 isBlockedAtPosition (int $a_role_id, int $a_ref_id)
 
 isBlockedInUpperContext (int $a_role_id, int $a_ref_id)
 Check if role is blocked in upper context. More...
 
 getObjectOfRole (int $a_role_id)
 Get object id of objects a role is assigned to. More...
 
 getObjectReferenceOfRole (int $a_role_id)
 
 isRoleDeleted (int $a_role_id)
 return if role is only attached to deleted role folders More...
 
 getRolesForIDs (array $role_ids, bool $use_templates)
 
 getOperationAssignment ()
 get operation assignments More...
 
 isDeleteable (int $a_role_id, int $a_rolf_id)
 Check if role is deleteable at a specific position. More...
 
 isSystemGeneratedRole (int $a_role_id)
 Check if the role is system generate role or role template. More...
 
 getRoleFolderOfRole (int $a_role_id)
 
 getUserPermissionsOnObject (int $a_user_id, int $a_ref_id)
 Get all user permissions on an object. More...
 
 setAssignedCacheEntry (int $a_role_id, int $a_user_id, bool $a_value)
 set entry of assigned_chache More...
 
 getAssignedCacheEntry (int $a_role_id, int $a_user_id)
 
 clearCaches ()
 Clear assigned users caches. More...
 

Static Public Member Functions

static _getOperationIdsByName (array $operations)
 get ops_id's by name. More...
 
static _getOperationIdByName (string $a_operation)
 get operation id by name of operation More...
 
static lookupCreateOperationIds (array $a_type_arr)
 Lookup operation ids. More...
 
static _getOperationList (string $a_type='')
 get operation list by object type More...
 
static _groupOperationsByClass (array $a_ops_arr)
 
static _getCustomRBACOperationId (string $operation, ?\ilDBInterface $ilDB=null)
 
static _isRBACOperation (int $type_id, int $ops_id, ?\ilDBInterface $ilDB=null)
 

Data Fields

const FILTER_ALL = 1
 
const FILTER_ALL_GLOBAL = 2
 
const FILTER_ALL_LOCAL = 3
 
const FILTER_INTERNAL = 4
 
const FILTER_NOT_INTERNAL = 5
 
const FILTER_TEMPLATES = 6
 

Protected Member Functions

 __getParentRoles (array $a_path, bool $a_templates)
 Note: This function performs faster than the new getParentRoles function, because it uses database indexes whereas getParentRoles needs a full table space scan. More...
 
 __setTemplateFilter (bool $a_templates)
 get roles and templates or only roles; returns string for where clause More...
 
 __setRoleType (array $a_role_list)
 computes role type in role list array: global: roles in ROLE_FOLDER_ID local: assignable roles in other role folders linked: roles with stoppped inheritance template: role templates More...
 
 __setProtectedStatus (array $a_parent_roles, array $a_role_hierarchy, int $a_ref_id)
 

Protected Attributes

ilLogger $log
 
ilDBInterface $db
 

Static Protected Attributes

static array $assigned_users_cache = []
 
static array $is_assigned_cache = []
 

Private Member Functions

 getAssignableRolesGenerator (bool $a_templates=false, bool $a_internal_roles=false, string $title_filter='')
 
 setRoleTypeAndProtection (array $role_list_entry)
 
 buildRoleType (array $role_list_entry)
 
 buildProtectionByStringValue (string $value)
 

Static Private Attributes

static array $_opsCache = null
 

Detailed Description

class ilRbacReview Contains Review functions of core Rbac.

This class offers the possibility to view the contents of the user <-> role (UR) relation and the permission <-> role (PR) relation. For example, from the UA relation the administrator should have the facility to view all user assigned to a given role.

Author
Stefan Meyer meyer.nosp@m.@lei.nosp@m.fos.c.nosp@m.om
Sascha Hofmann sasch.nosp@m.ahof.nosp@m.mann@.nosp@m.gmx..nosp@m.de
Version
$Id$

@phpstan-type RoleListEntry array{obj_id: int, rol_id: int, parent: int, user_id: int, owner: int, title: ?string, desc: string, description: string, create_date: ?string, last_update: ?string, import_id: ?string, tile_image_rid: ?string, role_type: string, offline: ?int, type: string, assign: string, protected: bool, blocked: int, rol_id: int}

Definition at line 33 of file class.ilRbacReview.php.

Constructor & Destructor Documentation

◆ __construct()

ilRbacReview::__construct ( )

Constructor @access public.

Definition at line 55 of file class.ilRbacReview.php.

56 {
57 global $DIC;
58
59 $this->log = ilLoggerFactory::getLogger('ac');
60 $this->db = $DIC->database();
61 }
ilLoggerFactory\getLogger
static getLogger(string $a_component_id)
Get component logger.
Definition: class.ilLoggerFactory.php:89
$DIC
global $DIC
Definition: shib_login.php:26

References $DIC, and ilLoggerFactory\getLogger().

+ Here is the call graph for this function:

Member Function Documentation

◆ __getParentRoles()

ilRbacReview::__getParentRoles ( array  $a_path,
bool  $a_templates 
)
protected

Note: This function performs faster than the new getParentRoles function, because it uses database indexes whereas getParentRoles needs a full table space scan.

Get parent roles in a path. If last parameter is set 'true' it delivers also all templates in the path

Parameters
arrayarray with path_ids
booltrue for role templates (default: false)
Returns
array array with all parent roles (obj_ids)

Definition at line 95 of file class.ilRbacReview.php.

95 : array
96 {
97 $parent_roles = [];
98 $role_hierarchy = [];
99 foreach ($a_path as $ref_id) {
100 $roles = $this->getRoleListByObject($ref_id, $a_templates);
101 foreach ($roles as $role) {
102 $id = (int) $role["obj_id"];
103 $role["parent"] = (int) $ref_id;
104 $parent_roles[$id] = $role;
105
106 if (!array_key_exists($role['obj_id'], $role_hierarchy)) {
107 $role_hierarchy[$id] = $ref_id;
108 }
109 }
110 }
111 return $this->__setProtectedStatus($parent_roles, $role_hierarchy, (int) reset($a_path));
112 }
$id
$id
plugin.php for ilComponentBuildPluginInfoObjectiveTest::testAddPlugins
Definition: plugin.php:23
ilRbacReview\__setProtectedStatus
__setProtectedStatus(array $a_parent_roles, array $a_role_hierarchy, int $a_ref_id)
Definition: class.ilRbacReview.php:1108
ilRbacReview\getRoleListByObject
getRoleListByObject(int $a_ref_id, bool $a_templates=false)
Returns a list of roles in an container.
Definition: class.ilRbacReview.php:140
$ref_id
$ref_id
Definition: ltiauth.php:66

References $id, $ref_id, __setProtectedStatus(), getRoleListByObject(), and ILIAS\Repository\int().

Referenced by getParentRoleIds().

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ __setProtectedStatus()

ilRbacReview::__setProtectedStatus ( array  $a_parent_roles,
array  $a_role_hierarchy,
int  $a_ref_id 
)
protected

Definition at line 1108 of file class.ilRbacReview.php.

1108 : array
1109 {
1110 global $DIC;
1111
1112 $rbacsystem = $DIC->rbac()->system();
1113 $ilUser = $DIC->user();
1114 if (in_array(SYSTEM_ROLE_ID, $this->assignedRoles($ilUser->getId()))) {
1115 $leveladmin = true;
1116 } else {
1117 $leveladmin = false;
1118 }
1119 foreach ($a_role_hierarchy as $role_id => $rolf_id) {
1120 if ($leveladmin == true) {
1121 $a_parent_roles[$role_id]['protected'] = false;
1122 continue;
1123 }
1124
1125 if ($a_parent_roles[$role_id]['protected'] == true) {
1126 $arr_lvl_roles_user = array_intersect(
1127 $this->assignedRoles($ilUser->getId()),
1128 array_keys($a_role_hierarchy, $rolf_id)
1129 );
1130
1131 foreach ($arr_lvl_roles_user as $lvl_role_id) {
1132 // check if role grants 'edit_permission' to parent
1133 $rolf = $a_parent_roles[$role_id]['parent'];
1134 if ($rbacsystem->checkPermission($rolf, $lvl_role_id, 'edit_permission')) {
1135 $a_parent_roles[$role_id]['protected'] = false;
1136 }
1137 }
1138 }
1139 }
1140 return $a_parent_roles;
1141 }
ilRbacReview\assignedRoles
assignedRoles(int $a_usr_id)
get all assigned roles to a given user
Definition: class.ilRbacReview.php:411
SYSTEM_ROLE_ID
const SYSTEM_ROLE_ID
Definition: constants.php:29

References $DIC, and SYSTEM_ROLE_ID.

Referenced by __getParentRoles().

+ Here is the caller graph for this function:

◆ __setRoleType()

ilRbacReview::__setRoleType ( array  $a_role_list)
protected

computes role type in role list array: global: roles in ROLE_FOLDER_ID local: assignable roles in other role folders linked: roles with stoppped inheritance template: role templates

Definition at line 286 of file class.ilRbacReview.php.

286 : array
287 {
288 foreach ($a_role_list as $key => $val) {
289 $a_role_list[$key] = $this->setRoleTypeAndProtection($val);
290 }
291 return $a_role_list;
292 }
ilRbacReview\setRoleTypeAndProtection
setRoleTypeAndProtection(array $role_list_entry)
Definition: class.ilRbacReview.php:294

Referenced by getRoleListByObject().

+ Here is the caller graph for this function:

◆ __setTemplateFilter()

ilRbacReview::__setTemplateFilter ( bool  $a_templates)
protected

get roles and templates or only roles; returns string for where clause

Definition at line 269 of file class.ilRbacReview.php.

269 : string
270 {
271 if ($a_templates) {
272 $where = "WHERE " . $this->db->in('object_data.type', ['role', 'rolt'], false, 'text') . " ";
273 } else {
274 $where = "WHERE " . $this->db->in('object_data.type', ['role'], false, 'text') . " ";
275 }
276 return $where;
277 }

Referenced by getRoleListByObject().

+ Here is the caller graph for this function:

◆ _getCustomRBACOperationId()

static ilRbacReview::_getCustomRBACOperationId ( string  $operation,
?\ilDBInterface  $ilDB = null 
)
static

Definition at line 1422 of file class.ilRbacReview.php.

1422 : ?int
1423 {
1424 if (!$ilDB) {
1425 global $DIC;
1426 $ilDB = $DIC->database();
1427 }
1428
1429 $sql =
1430 "SELECT ops_id" . PHP_EOL
1431 . "FROM rbac_operations" . PHP_EOL
1432 . "WHERE operation = " . $ilDB->quote($operation, "text") . PHP_EOL
1433 ;
1434
1435 $res = $ilDB->query($sql);
1436 if ($ilDB->numRows($res) == 0) {
1437 return null;
1438 }
1439
1440 $row = $ilDB->fetchAssoc($res);
1441 return (int) $row["ops_id"] ?? null;
1442 }
$res
$res
Definition: ltiservices.php:69

References $DIC, $ilDB, and $res.

Referenced by ilAccessCustomRBACOperationAddedObjective\achieve(), ilAccessInitialPermissionGuidelineAppliedObjective\achieve(), ilAccessRbacStandardOperationsAddedObjective\achieve(), ilAccessRolePermissionSetObjective\achieve(), ILIAS\BookingManager\Setup\AccessRBACOperationClonedObjective\achieve(), ILIAS\Wiki\Setup\AccessRBACOperationClonedObjective\achieve(), ilDBUpdateNewObjectType\addCustomRBACOperation(), ilDBUpdateNewObjectType\addRBACOperations(), ilAccessCustomRBACOperationAddedObjective\isApplicable(), ilAccessInitialPermissionGuidelineAppliedObjective\isApplicable(), ilAccessRbacStandardOperationsAddedObjective\isApplicable(), and ilDBUpdateNewObjectType\setRolePermission().

+ Here is the caller graph for this function:

◆ _getOperationIdByName()

static ilRbacReview::_getOperationIdByName ( string  $a_operation)
static

get operation id by name of operation

Definition at line 988 of file class.ilRbacReview.php.

988 : int
989 {
990 global $DIC;
991
992 $ilDB = $DIC->database();
993
994 // Cache operation ids
995 if (!is_array(self::$_opsCache)) {
996 self::$_opsCache = [];
997
998 $q = "SELECT ops_id, operation FROM rbac_operations";
999 $r = $ilDB->query($q);
1000 while ($row = $r->fetchRow(ilDBConstants::FETCHMODE_OBJECT)) {
1001 self::$_opsCache[$row->operation] = (int) $row->ops_id;
1002 }
1003 }
1004
1005 // Get operation ID by name from cache
1006 if (array_key_exists($a_operation, self::$_opsCache)) {
1007 return self::$_opsCache[$a_operation];
1008 }
1009 return 0;
1010 }
$q
$q
Definition: shib_logout.php:23

References $DIC, $ilDB, $q, ilDBConstants\FETCHMODE_OBJECT, and ILIAS\Repository\int().

Referenced by ilRepositoryObjectPlugin\beforeActivation(), ilRbacSystem\checkAccessOfUser(), and ilObjBlog\getRolesWithContributeOrRedact().

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ _getOperationIdsByName()

static ilRbacReview::_getOperationIdsByName ( array  $operations)
static

get ops_id's by name.

Example usage: $rbacadmin->grantPermission($roles,ilRbacReview::_getOperationIdsByName(array('visible','read'),$ref_id));

Parameters
list<string>$operations
Returns
list<int>

Definition at line 965 of file class.ilRbacReview.php.

965 : array
966 {
967 global $DIC;
968
969 $ilDB = $DIC->database();
970 if ($operations === []) {
971 return [];
972 }
973
974 $query = 'SELECT ops_id FROM rbac_operations ' .
975 'WHERE ' . $ilDB->in('operation', $operations, false, 'text');
976
977 $res = $ilDB->query($query);
978 $ops_ids = [];
979 while ($row = $ilDB->fetchObject($res)) {
980 $ops_ids[] = (int) $row->ops_id;
981 }
982 return $ops_ids;
983 }

References $DIC, $ilDB, $res, and ILIAS\Repository\int().

Referenced by ilLTIProviderObjectSettingGUI\checkLocalRole(), and ilECSObjectSettings\handlePermissionUpdate().

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ _getOperationList()

static ilRbacReview::_getOperationList ( string  $a_type = '')
static

get operation list by object type

Returns
list<array{obj_id: int, operation: ?string, desc: ?string, class: ?string, op_order: int}>

Definition at line 1147 of file class.ilRbacReview.php.

1147 : array
1148 {
1149 global $DIC;
1150
1151 $ilDB = $DIC->database();
1152 $arr = [];
1153 if ($a_type) {
1154 $query = sprintf(
1155 'SELECT * FROM rbac_operations ' .
1156 'JOIN rbac_ta ON rbac_operations.ops_id = rbac_ta.ops_id ' .
1157 'JOIN object_data ON rbac_ta.typ_id = object_data.obj_id ' .
1158 'WHERE object_data.title = %s ' .
1159 'AND object_data.type = %s ' .
1160 'ORDER BY op_order ASC',
1161 $ilDB->quote($a_type, 'text'),
1162 $ilDB->quote('typ', 'text')
1163 );
1164 } else {
1165 $query = 'SELECT * FROM rbac_operations ORDER BY op_order ASC';
1166 }
1167 $res = $ilDB->query($query);
1168 while ($row = $ilDB->fetchAssoc($res)) {
1169 $arr[] = [
1170 "ops_id" => (int) $row['ops_id'],
1171 "operation" => $row['operation'],
1172 "desc" => $row['description'],
1173 "class" => $row['class'],
1174 "order" => (int) $row['op_order']
1175 ];
1176 }
1177 return $arr;
1178 }

References $DIC, $ilDB, $res, and ILIAS\Repository\int().

Referenced by ilSettingsPermissionGUI\__construct(), ilObjTypeDefinitionGUI\editObject(), ilObjectPermissionStatusGUI\getAccessPermissionTableData(), ilObjectPermissionStatusGUI\getAssignedValidRoles(), and ilObjTypeDefinitionGUI\viewObject().

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ _groupOperationsByClass()

static ilRbacReview::_groupOperationsByClass ( array  $a_ops_arr)
static
Returns
array<string, list<array{ops_id: int, name: ?string}>>

Definition at line 1183 of file class.ilRbacReview.php.

1183 : array
1184 {
1185 $arr = [];
1186 foreach ($a_ops_arr as $ops) {
1187 $arr[$ops['class']][] = ['ops_id' => (int) $ops['ops_id'],
1188 'name' => $ops['operation']
1189 ];
1190 }
1191 return $arr;
1192 }

References ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ _isRBACOperation()

static ilRbacReview::_isRBACOperation ( int  $type_id,
int  $ops_id,
?\ilDBInterface  $ilDB = null 
)
static

Definition at line 1444 of file class.ilRbacReview.php.

1444 : bool
1445 {
1446 if (!$ilDB) {
1447 global $DIC;
1448 $ilDB = $DIC->database();
1449 }
1450
1451 $sql =
1452 "SELECT typ_id" . PHP_EOL
1453 . "FROM rbac_ta" . PHP_EOL
1454 . "WHERE typ_id = " . $ilDB->quote($type_id, "integer") . PHP_EOL
1455 . "AND ops_id = " . $ilDB->quote($ops_id, "integer") . PHP_EOL
1456 ;
1457
1458 return (bool) $ilDB->numRows($ilDB->query($sql));
1459 }

References $DIC, and $ilDB.

Referenced by ilAccessRbacStandardOperationsAddedObjective\achieve(), ilTreeAdminNodeAddedObjective\achieve(), and ilAccessRbacStandardOperationsAddedObjective\isApplicable().

+ Here is the caller graph for this function:

◆ assignedGlobalRoles()

ilRbacReview::assignedGlobalRoles ( int  $a_usr_id)

Get assigned global roles for an user.

Returns
list<int>

Definition at line 427 of file class.ilRbacReview.php.

427 : array
428 {
429 $query = "SELECT ua.rol_id FROM rbac_ua ua " .
430 "JOIN rbac_fa fa ON ua.rol_id = fa.rol_id " .
431 "WHERE usr_id = " . $this->db->quote($a_usr_id, 'integer') . ' ' .
432 "AND parent = " . $this->db->quote(ROLE_FOLDER_ID, ilDBConstants::T_INTEGER) . " " .
433 "AND assign = 'y' ";
434
435 $res = $this->db->query($query);
436 $role_arr = [];
437 while ($row = $this->db->fetchObject($res)) {
438 $role_arr[] = (int) $row->rol_id;
439 }
440
441 return $role_arr;
442 }
ROLE_FOLDER_ID
const ROLE_FOLDER_ID
Definition: constants.php:34

References $res, ILIAS\Repository\int(), ROLE_FOLDER_ID, and ilDBConstants\T_INTEGER.

Referenced by ilObjLTIConsumer\determineLTIRole().

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ assignedRoles()

ilRbacReview::assignedRoles ( int  $a_usr_id)

get all assigned roles to a given user

Returns
list<int> all roles (id) the user is assigned to

Definition at line 411 of file class.ilRbacReview.php.

411 : array
412 {
413 $query = "SELECT rol_id FROM rbac_ua WHERE usr_id = " . $this->db->quote($a_usr_id, 'integer');
414
415 $res = $this->db->query($query);
416 $role_arr = [];
417 while ($row = $this->db->fetchObject($res)) {
418 $role_arr[] = (int) $row->rol_id;
419 }
420 return $role_arr;
421 }

References $res, and ILIAS\Repository\int().

Referenced by ilObjLTIConsumer\determineLTIRole(), ilCalendarShared\getSharedCalendarsForUser(), and ilCalendarShared\isSharedWithUser().

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ assignedUsers()

ilRbacReview::assignedUsers ( int  $a_rol_id)

get all assigned users to a given role

Returns
list<int> all users (id) assigned to role

Definition at line 349 of file class.ilRbacReview.php.

349 : array
350 {
351 if (isset(self::$assigned_users_cache[$a_rol_id])) {
352 return self::$assigned_users_cache[$a_rol_id];
353 }
354
355 $result_arr = [];
356 $query = "SELECT usr_id FROM rbac_ua WHERE rol_id= " . $this->db->quote($a_rol_id, 'integer');
357 $res = $this->db->query($query);
358 while ($row = $this->db->fetchAssoc($res)) {
359 $result_arr[] = (int) $row["usr_id"];
360 }
361 self::$assigned_users_cache[$a_rol_id] = $result_arr;
362 return $result_arr;
363 }

References $res, and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ buildProtectionByStringValue()

ilRbacReview::buildProtectionByStringValue ( string  $value)
private

Definition at line 318 of file class.ilRbacReview.php.

318 : bool
319 {
320 if ($value === 'y') {
321 return true;
322 }
323 return false;
324 }

◆ buildRoleType()

ilRbacReview::buildRoleType ( array  $role_list_entry)
private

Definition at line 301 of file class.ilRbacReview.php.

301 : string
302 {
303 if ($role_list_entry['type'] === 'rolt') {
304 return 'template';
305 }
306
307 if ($role_list_entry['assign'] !== 'y') {
308 return 'linked';
309 }
310
311 if ($role_list_entry['parent'] === ROLE_FOLDER_ID) {
312 return 'global';
313 }
314
315 return 'local';
316 }

References ROLE_FOLDER_ID.

◆ clearCaches()

ilRbacReview::clearCaches ( )

Clear assigned users caches.

Definition at line 1416 of file class.ilRbacReview.php.

1416 : void
1417 {
1418 self::$is_assigned_cache = [];
1419 self::$assigned_users_cache = [];
1420 }

◆ getActiveOperationsOfRole()

ilRbacReview::getActiveOperationsOfRole ( int  $a_ref_id,
int  $a_role_id 
)
Returns
list<int>

Definition at line 693 of file class.ilRbacReview.php.

693 : array
694 {
695 $query = 'SELECT * FROM rbac_pa ' .
696 'WHERE ref_id = ' . $this->db->quote($a_ref_id, 'integer') . ' ' .
697 'AND rol_id = ' . $this->db->quote($a_role_id, 'integer') . ' ';
698
699 $res = $this->db->query($query);
700 while ($row = $res->fetchRow(ilDBConstants::FETCHMODE_ASSOC)) {
701 return array_map(
702 intval(...),
703 $row['ops_id'] === ':' ? [] : unserialize($row['ops_id'], ['allowed_classes' => false])
704 );
705 }
706 return [];
707 }

References $res, and ilDBConstants\FETCHMODE_ASSOC.

◆ getAllOperationsOfRole()

ilRbacReview::getAllOperationsOfRole ( int  $a_rol_id,
int  $a_parent = 0 
)

get all possible operations of a specific role The ref_id of the role folder (parent object) is necessary to distinguish local roles

Returns
array<string, list<int>>

Definition at line 673 of file class.ilRbacReview.php.

673 : array
674 {
675 if (!$a_parent) {
676 $a_parent = ROLE_FOLDER_ID;
677 }
678 $query = "SELECT ops_id,type FROM rbac_templates " .
679 "WHERE rol_id = " . $this->db->quote($a_rol_id, 'integer') . " " .
680 "AND parent = " . $this->db->quote($a_parent, 'integer');
681 $res = $this->db->query($query);
682
683 $ops_arr = [];
684 while ($row = $this->db->fetchObject($res)) {
685 $ops_arr[$row->type][] = (int) $row->ops_id;
686 }
687 return $ops_arr;
688 }

References $res, ILIAS\Repository\int(), and ROLE_FOLDER_ID.

+ Here is the call graph for this function:

◆ getAssignableChildRoles()

ilRbacReview::getAssignableChildRoles ( int  $a_ref_id)

Get all assignable roles directly under a specific node.

Definition at line 246 of file class.ilRbacReview.php.

246 : array
247 {
248 $query = "SELECT fa.*, rd.* " .
249 "FROM object_data rd " .
250 "JOIN rbac_fa fa ON rd.obj_id = fa.rol_id " .
251 "WHERE fa.assign = 'y' " .
252 "AND fa.parent = " . $this->db->quote($a_ref_id, 'integer') . " ";
253
254 $res = $this->db->query($query);
255 $roles_data = [];
256 while ($row = $this->db->fetchAssoc($res)) {
257 $row['rol_id'] = (int) $row['rol_id'];
258 $row['obj_id'] = (int) $row['obj_id'];
259
260 $roles_data[] = $row;
261 }
262
263 return $roles_data;
264 }

References $res, and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ getAssignableRoles()

ilRbacReview::getAssignableRoles ( bool  $a_templates = false,
bool  $a_internal_roles = false,
string  $title_filter = '' 
)

Returns a list of all assignable roles.

Returns
list<RoleListEntry>

Definition at line 168 of file class.ilRbacReview.php.

172 : array {
173 return iterator_to_array(
174 $this->getAssignableRolesGenerator(
175 $a_templates,
176 $a_internal_roles,
177 $title_filter
178 )
179 );
180 }
ilRbacReview\getAssignableRolesGenerator
getAssignableRolesGenerator(bool $a_templates=false, bool $a_internal_roles=false, string $title_filter='')
Definition: class.ilRbacReview.php:185

◆ getAssignableRolesGenerator()

ilRbacReview::getAssignableRolesGenerator ( bool  $a_templates = false,
bool  $a_internal_roles = false,
string  $title_filter = '' 
)
private
Returns
Generator<RoleListEntry>

Definition at line 185 of file class.ilRbacReview.php.

189 : Generator {
190 $where = $this->__setTemplateFilter($a_templates);
191 $query = "SELECT * FROM object_data " .
192 "JOIN rbac_fa ON obj_id = rol_id " .
193 $where .
194 "AND rbac_fa.assign = 'y' ";
195
196 if (strlen($title_filter)) {
197 $query .= (' AND ' . $this->db->like(
198 'title',
199 'text',
200 $title_filter . '%'
201 ));
202 }
203 $res = $this->db->query($query);
204
205 while ($row = $this->db->fetchAssoc($res)) {
206 $row["description"] = (string) $row["description"];
207 $row["desc"] = $row["description"];
208 $row["user_id"] = (int) $row["owner"];
209 $row['obj_id'] = (int) $row['obj_id'];
210 $row['parent'] = (int) $row['parent'];
211 yield $this->setRoleTypeAndProtection($row);
212 }
213 }
ilRbacReview\__setTemplateFilter
__setTemplateFilter(bool $a_templates)
get roles and templates or only roles; returns string for where clause
Definition: class.ilRbacReview.php:269

◆ getAssignableRolesInSubtree()

ilRbacReview::getAssignableRolesInSubtree ( int  $ref_id)

Returns a list of assignable roles in a subtree of the repository.

Todo:
move tree to construct. Currently this is not possible due to init sequence
Returns
list<int>

Definition at line 220 of file class.ilRbacReview.php.

220 : array
221 {
222 global $DIC;
223
224 $tree = $DIC->repositoryTree();
225 $query = 'SELECT rol_id FROM rbac_fa fa ' .
226 'JOIN tree t1 ON t1.child = fa.parent ' .
227 'JOIN object_data obd ON fa.rol_id = obd.obj_id ' .
228 'WHERE assign = ' . $this->db->quote('y', 'text') . ' ' .
229 'AND obd.type = ' . $this->db->quote('role', 'text') . ' ' .
230 'AND t1.child IN (' .
231 $tree->getSubTreeQuery($ref_id, ['child']) . ' ' .
232 ') ';
233
234 $res = $this->db->query($query);
235
236 $role_list = [];
237 while ($row = $res->fetchRow(ilDBConstants::FETCHMODE_OBJECT)) {
238 $role_list[] = (int) $row->rol_id;
239 }
240 return $role_list;
241 }

References $DIC, $ref_id, $res, ilDBConstants\FETCHMODE_OBJECT, and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ getAssignedCacheEntry()

ilRbacReview::getAssignedCacheEntry ( int  $a_role_id,
int  $a_user_id 
)

Definition at line 1408 of file class.ilRbacReview.php.

1408 : bool
1409 {
1410 return self::$is_assigned_cache[$a_role_id][$a_user_id];
1411 }

◆ getFoldersAssignedToRole()

ilRbacReview::getFoldersAssignedToRole ( int  $a_rol_id,
bool  $a_assignable = false 
)

Returns an array of objects assigned to a role.

A role with stopped inheritance may be assigned to more than one objects. To get only the original location of a role, set the second parameter to true @access public

Parameters
introle id
boolget only rolefolders where role is assignable (true)
Returns
list<int> reference IDs of role folders

Definition at line 481 of file class.ilRbacReview.php.

481 : array
482 {
483 $where = '';
484 if ($a_assignable) {
485 $where = " AND assign ='y'";
486 }
487
488 $query = "SELECT DISTINCT parent FROM rbac_fa " .
489 "WHERE rol_id = " . $this->db->quote($a_rol_id, 'integer') . " " . $where . " ";
490
491 $res = $this->db->query($query);
492 $folders = [];
493 while ($row = $this->db->fetchObject($res)) {
494 $folders[] = (int) $row->parent;
495 }
496 return $folders;
497 }

References $res, and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ getGlobalAssignableRoles()

ilRbacReview::getGlobalAssignableRoles ( )

get only 'global' roles (with flag 'assign_users')

Returns
list<array{obj_id: int, role_type: string}>

Definition at line 606 of file class.ilRbacReview.php.

606 : array
607 {
608 $ga = [];
609 foreach ($this->getGlobalRoles() as $role_id) {
610 if (ilObjRole::_getAssignUsersStatus($role_id)) {
611 $ga[] = [
612 'obj_id' => $role_id,
613 'role_type' => 'global'
614 ];
615 }
616 }
617 return $ga;
618 }
ilObjRole\_getAssignUsersStatus
static _getAssignUsersStatus(int $a_role_id)
Definition: class.ilObjRole.php:141
ilRbacReview\getGlobalRoles
getGlobalRoles()
get only 'global' roles
Definition: class.ilRbacReview.php:554

References ilObjRole\_getAssignUsersStatus().

+ Here is the call graph for this function:

◆ getGlobalRoles()

ilRbacReview::getGlobalRoles ( )

get only 'global' roles

Returns
list<int> Array with rol_ids
Todo:
refactor rolf => DONE

Definition at line 554 of file class.ilRbacReview.php.

554 : array
555 {
556 return $this->getRolesOfRoleFolder(ROLE_FOLDER_ID, false);
557 }
ilRbacReview\getRolesOfRoleFolder
getRolesOfRoleFolder(int $a_ref_id, bool $a_nonassignable=true)
get all roles of a role folder including linked local roles that are created due to stopped inheritan...
Definition: class.ilRbacReview.php:529

References ROLE_FOLDER_ID.

◆ getGlobalRolesArray()

ilRbacReview::getGlobalRolesArray ( )

get only 'global' roles

Returns
list<array{obj_id: int, role_type: string}>

Definition at line 591 of file class.ilRbacReview.php.

591 : array
592 {
593 $ga = [];
594 foreach ($this->getRolesOfRoleFolder(ROLE_FOLDER_ID, false) as $role_id) {
595 $ga[] = ['obj_id' => $role_id,
596 'role_type' => 'global'
597 ];
598 }
599 return $ga;
600 }

References ROLE_FOLDER_ID.

◆ getLocalPolicies()

ilRbacReview::getLocalPolicies ( int  $a_ref_id)

Get all roles with local policies.

Returns
list<int>

Definition at line 578 of file class.ilRbacReview.php.

578 : array
579 {
580 $lroles = [];
581 foreach ($this->getRolesOfRoleFolder($a_ref_id) as $role_id) {
582 $lroles[] = $role_id;
583 }
584 return $lroles;
585 }

◆ getLocalRoles()

ilRbacReview::getLocalRoles ( int  $a_ref_id)

Get local roles of object.

Returns
list<int>

Definition at line 563 of file class.ilRbacReview.php.

563 : array
564 {
565 $lroles = [];
566 foreach ($this->getRolesOfRoleFolder($a_ref_id) as $role_id) {
567 if ($this->isAssignable($role_id, $a_ref_id)) {
568 $lroles[] = $role_id;
569 }
570 }
571 return $lroles;
572 }
ilRbacReview\isAssignable
isAssignable(int $a_rol_id, int $a_ref_id)
Check if its possible to assign users.
Definition: class.ilRbacReview.php:447

◆ getNumberOfAssignedUsers()

ilRbacReview::getNumberOfAssignedUsers ( array  $a_roles)

Get the number of assigned users to roles (not properly deleted user accounts are not counted)

Parameters
int[]$a_roles

Definition at line 330 of file class.ilRbacReview.php.

330 : int
331 {
332 $query = 'select count(distinct(ua.usr_id)) as num from rbac_ua ua ' .
333 'join object_data on ua.usr_id = obj_id ' .
334 'join usr_data ud on ua.usr_id = ud.usr_id ' .
335 'where ' . $this->db->in('rol_id', $a_roles, false, 'integer');
336
337 $res = $this->db->query($query);
338 if ($res->numRows() > 0) {
339 $row = $res->fetchRow(\ilDBConstants::FETCHMODE_OBJECT);
340 return isset($row->num) && is_numeric($row->num) ? (int) $row->num : 0;
341 }
342 return 0;
343 }

References $res, ilDBConstants\FETCHMODE_OBJECT, and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ getObjectOfRole()

ilRbacReview::getObjectOfRole ( int  $a_role_id)

Get object id of objects a role is assigned to.

Todo:
refactor rolf (due to performance reasons the new version does not check for deleted roles only in object reference)

Definition at line 1198 of file class.ilRbacReview.php.

1198 : int
1199 {
1200 // internal cache
1201 static $obj_cache = [];
1202
1203 if (isset($obj_cache[$a_role_id]) && $obj_cache[$a_role_id]) {
1204 return $obj_cache[$a_role_id];
1205 }
1206
1207 $query = 'SELECT obr.obj_id FROM rbac_fa rfa ' .
1208 'JOIN object_reference obr ON rfa.parent = obr.ref_id ' .
1209 'WHERE assign = ' . $this->db->quote('y', 'text') . ' ' .
1210 'AND rol_id = ' . $this->db->quote($a_role_id, 'integer') . ' ' .
1211 'AND deleted IS NULL';
1212
1213 $res = $this->db->query($query);
1214 $obj_cache[$a_role_id] = 0;
1215 while ($row = $this->db->fetchObject($res)) {
1216 $obj_cache[$a_role_id] = (int) $row->obj_id;
1217 }
1218 return $obj_cache[$a_role_id];
1219 }

References $res, and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ getObjectReferenceOfRole()

ilRbacReview::getObjectReferenceOfRole ( int  $a_role_id)

Definition at line 1221 of file class.ilRbacReview.php.

1221 : int
1222 {
1223 $query = 'SELECT parent p_ref FROM rbac_fa ' .
1224 'WHERE rol_id = ' . $this->db->quote($a_role_id, 'integer') . ' ' .
1225 'AND assign = ' . $this->db->quote('y', 'text');
1226
1227 $res = $this->db->query($query);
1228 while ($row = $res->fetchRow(ilDBConstants::FETCHMODE_OBJECT)) {
1229 return (int) $row->p_ref;
1230 }
1231 return 0;
1232 }

References $res, and ilDBConstants\FETCHMODE_OBJECT.

◆ getObjectsWithStopedInheritance()

ilRbacReview::getObjectsWithStopedInheritance ( int  $a_rol_id,
array  $a_filter = [] 
)

get all objects in which the inheritance of role with role_id was stopped the function returns all reference ids of objects containing a role folder.

Returns
list<int>

Definition at line 821 of file class.ilRbacReview.php.

821 : array
822 {
823 $query = 'SELECT parent p FROM rbac_fa ' .
824 'WHERE assign = ' . $this->db->quote('n', 'text') . ' ' .
825 'AND rol_id = ' . $this->db->quote($a_rol_id, 'integer') . ' ';
826
827 if ($a_filter !== []) {
828 $query .= ('AND ' . $this->db->in('parent', (array) $a_filter, false, 'integer'));
829 }
830
831 $res = $this->db->query($query);
832 $parent = [];
833 while ($row = $res->fetchRow(ilDBConstants::FETCHMODE_OBJECT)) {
834 $parent[] = (int) $row->p;
835 }
836 return $parent;
837 }

References $res, ilDBConstants\FETCHMODE_OBJECT, and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ getOperation()

ilRbacReview::getOperation ( int  $ops_id)

get one operation by operation id

Returns
array{}|array{ops_id: int, operation: ?string, description: ?string}

Definition at line 654 of file class.ilRbacReview.php.

654 : array
655 {
656 $query = 'SELECT * FROM rbac_operations WHERE ops_id = ' . $this->db->quote($ops_id, 'integer');
657 $res = $this->db->query($query);
658 $ops = [];
659 while ($row = $this->db->fetchObject($res)) {
660 $ops = ['ops_id' => (int) $row->ops_id,
661 'operation' => $row->operation,
662 'description' => $row->description
663 ];
664 }
665 return $ops;
666 }

References $res, and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ getOperationAssignment()

ilRbacReview::getOperationAssignment ( )

get operation assignments

Returns
list<array{typ_id: int, type: ?string, ops_id: int, operation: ?string}>

Definition at line 1276 of file class.ilRbacReview.php.

1276 : array
1277 {
1278 global $DIC;
1279
1280 $this->db = $DIC['ilDB'];
1281
1282 $query = 'SELECT ta.typ_id, obj.title, ops.ops_id, ops.operation FROM rbac_ta ta ' .
1283 'JOIN object_data obj ON obj.obj_id = ta.typ_id ' .
1284 'JOIN rbac_operations ops ON ops.ops_id = ta.ops_id ';
1285 $res = $this->db->query($query);
1286
1287 $counter = 0;
1288 $info = [];
1289 while ($row = $this->db->fetchObject($res)) {
1290 $info[$counter]['typ_id'] = (int) $row->typ_id;
1291 $info[$counter]['type'] = $row->title;
1292 $info[$counter]['ops_id'] = (int) $row->ops_id;
1293 $info[$counter]['operation'] = $row->operation;
1294 $counter++;
1295 }
1296
1297 return array_values($info);
1298 }
$info
$info
Definition: entry_point.php:21
$counter
$counter
Definition: shib_logout.php:170

References $counter, $DIC, $info, $res, and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ getOperations()

ilRbacReview::getOperations ( )

get all possible operations

Returns
list<array{ops_id: int, operation: ?string, description: ?string}>

Definition at line 636 of file class.ilRbacReview.php.

636 : array
637 {
638 $query = 'SELECT * FROM rbac_operations ORDER BY ops_id ';
639 $res = $this->db->query($query);
640 $ops = [];
641 while ($row = $this->db->fetchObject($res)) {
642 $ops[] = ['ops_id' => (int) $row->ops_id,
643 'operation' => $row->operation,
644 'description' => $row->description
645 ];
646 }
647 return $ops;
648 }

References $res, and ILIAS\Repository\int().

Referenced by ILIAS\AccessControl\Log\Table\__construct().

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ getOperationsByTypeAndClass()

ilRbacReview::getOperationsByTypeAndClass ( string  $a_type,
string  $a_class 
)

Get operations by type and class.

Returns
list<int>

Definition at line 792 of file class.ilRbacReview.php.

792 : array
793 {
794 if ($a_class != 'create') {
795 $condition = "AND class != " . $this->db->quote('create', 'text');
796 } else {
797 $condition = "AND class = " . $this->db->quote('create', 'text');
798 }
799
800 $query = "SELECT ro.ops_id FROM rbac_operations ro " .
801 "JOIN rbac_ta rt ON ro.ops_id = rt.ops_id " .
802 "JOIN object_data od ON rt.typ_id = od.obj_id " .
803 "WHERE type = " . $this->db->quote('typ', 'text') . " " .
804 "AND title = " . $this->db->quote($a_type, 'text') . " " .
805 $condition . " " .
806 "ORDER BY op_order ";
807
808 $res = $this->db->query($query);
809 $ops = [];
810 while ($row = $res->fetchRow(ilDBConstants::FETCHMODE_OBJECT)) {
811 $ops[] = (int) $row->ops_id;
812 }
813 return $ops;
814 }

References $res, ilDBConstants\FETCHMODE_OBJECT, and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ getOperationsOfRole()

ilRbacReview::getOperationsOfRole ( int  $a_rol_id,
string  $a_type,
int  $a_parent = 0 
)

get all possible operations of a specific role The ref_id of the role folder (parent object) is necessary to distinguish local roles

Returns
list<int>

Definition at line 714 of file class.ilRbacReview.php.

714 : array
715 {
716 $ops_arr = [];
717 // if no rolefolder id is given, assume global role folder as target
718 if ($a_parent == 0) {
719 $a_parent = ROLE_FOLDER_ID;
720 }
721
722 $query = "SELECT ops_id FROM rbac_templates " .
723 "WHERE type =" . $this->db->quote($a_type, 'text') . " " .
724 "AND rol_id = " . $this->db->quote($a_rol_id, 'integer') . " " .
725 "AND parent = " . $this->db->quote($a_parent, 'integer');
726 $res = $this->db->query($query);
727 while ($row = $this->db->fetchObject($res)) {
728 $ops_arr[] = $row->ops_id;
729 }
730 return $ops_arr;
731 }

References $res, and ROLE_FOLDER_ID.

◆ getOperationsOnType()

ilRbacReview::getOperationsOnType ( int  $a_typ_id)

all possible operations of a type

Returns
list<int>

Definition at line 760 of file class.ilRbacReview.php.

760 : array
761 {
762 $query = 'SELECT ta.ops_id FROM rbac_ta ta JOIN rbac_operations o ON ta.ops_id = o.ops_id ' .
763 'WHERE typ_id = ' . $this->db->quote($a_typ_id, 'integer') . ' ' .
764 'ORDER BY op_order';
765
766 $res = $this->db->query($query);
767 $ops_id = [];
768 while ($row = $this->db->fetchObject($res)) {
769 $ops_id[] = (int) $row->ops_id;
770 }
771 return $ops_id;
772 }

References $res, and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ getOperationsOnTypeString()

ilRbacReview::getOperationsOnTypeString ( string  $a_type)

all possible operations of a type

Returns
list<int>

Definition at line 778 of file class.ilRbacReview.php.

778 : array
779 {
780 $query = "SELECT * FROM object_data WHERE type = 'typ' AND title = " . $this->db->quote($a_type, 'text') . " ";
781 $res = $this->db->query($query);
782 while ($row = $res->fetchRow(ilDBConstants::FETCHMODE_OBJECT)) {
783 return $this->getOperationsOnType((int) $row->obj_id);
784 }
785 return [];
786 }
ilRbacReview\getOperationsOnType
getOperationsOnType(int $a_typ_id)
all possible operations of a type
Definition: class.ilRbacReview.php:760

References $res, and ilDBConstants\FETCHMODE_OBJECT.

◆ getParentRoleIds()

ilRbacReview::getParentRoleIds ( int  $a_endnode_id,
bool  $a_templates = false 
)

Get an array of parent role ids of all parent roles, if last parameter is set true you get also all parent templates.

Parameters
intref_id of an object which is end node
booltrue for role templates (default: false)
Returns
array array(role_ids => role_data)
Todo:
move tree to construct. Currently this is not possible due to init sequence

Definition at line 122 of file class.ilRbacReview.php.

122 : array
123 {
124 global $DIC;
125
126 $tree = $DIC->repositoryTree();
127
128 $pathIds = $tree->getPathId($a_endnode_id);
129
130 // add system folder since it may not in the path
131 //$pathIds[0] = SYSTEM_FOLDER_ID;
132 $pathIds[0] = ROLE_FOLDER_ID;
133 return $this->__getParentRoles($pathIds, $a_templates);
134 }
ilRbacReview\__getParentRoles
__getParentRoles(array $a_path, bool $a_templates)
Note: This function performs faster than the new getParentRoles function, because it uses database in...
Definition: class.ilRbacReview.php:95

References $DIC, __getParentRoles(), and ROLE_FOLDER_ID.

Referenced by ilObjLTIConsumer\determineLTIRole().

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ getRoleFolderOfRole()

ilRbacReview::getRoleFolderOfRole ( int  $a_role_id)

Definition at line 1353 of file class.ilRbacReview.php.

1353 : int
1354 {
1355 if (ilObject::_lookupType($a_role_id) == 'role') {
1356 $and = ('AND assign = ' . $this->db->quote('y', 'text'));
1357 } else {
1358 $and = '';
1359 }
1360
1361 $query = 'SELECT * FROM rbac_fa ' .
1362 'WHERE rol_id = ' . $this->db->quote($a_role_id, 'integer') . ' ' .
1363 $and;
1364 $res = $this->db->query($query);
1365 while ($row = $res->fetchRow(ilDBConstants::FETCHMODE_OBJECT)) {
1366 return (int) $row->parent;
1367 }
1368 return 0;
1369 }
ilObject\_lookupType
static _lookupType(int $id, bool $reference=false)
Definition: class.ilObject.php:1101

References $res, ilObject\_lookupType(), and ilDBConstants\FETCHMODE_OBJECT.

+ Here is the call graph for this function:

◆ getRoleListByObject()

ilRbacReview::getRoleListByObject ( int  $a_ref_id,
bool  $a_templates = false 
)

Returns a list of roles in an container.

Returns
list<RoleListEntry>

Definition at line 140 of file class.ilRbacReview.php.

140 : array
141 {
142 $role_list = [];
143 $where = $this->__setTemplateFilter($a_templates);
144
145 $query = "SELECT * FROM object_data " .
146 "JOIN rbac_fa ON obj_id = rol_id " .
147 $where .
148 "AND object_data.obj_id = rbac_fa.rol_id " .
149 "AND rbac_fa.parent = " . $this->db->quote($a_ref_id, 'integer') . " ";
150
151 $res = $this->db->query($query);
152 while ($row = $this->db->fetchAssoc($res)) {
153 $row["desc"] = $row["description"];
154 $row["user_id"] = (int) $row["owner"];
155 $row['obj_id'] = (int) $row['obj_id'];
156 $row['rol_id'] = (int) $row['rol_id'];
157 $row['parent'] = (int) $row['parent'];
158 $role_list[] = $row;
159 }
160
161 return $this->__setRoleType($role_list);
162 }
ilRbacReview\__setRoleType
__setRoleType(array $a_role_list)
computes role type in role list array: global: roles in ROLE_FOLDER_ID local: assignable roles in oth...
Definition: class.ilRbacReview.php:286

References $res, __setRoleType(), __setTemplateFilter(), and ILIAS\Repository\int().

Referenced by __getParentRoles().

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ getRoleOperationsOnObject()

ilRbacReview::getRoleOperationsOnObject ( int  $a_role_id,
int  $a_ref_id 
)
Returns
list<int>

Definition at line 736 of file class.ilRbacReview.php.

736 : array
737 {
738 $query = "SELECT ops_id FROM rbac_pa " .
739 "WHERE rol_id = " . $this->db->quote($a_role_id, 'integer') . " " .
740 "AND ref_id = " . $this->db->quote($a_ref_id, 'integer') . " ";
741
742 $res = $this->db->query($query);
743 $ops = [];
744 while ($row = $this->db->fetchObject($res)) {
745 if ($row->ops_id !== ':') {
746 $ops = array_map(
747 intval(...),
748 unserialize($row->ops_id, ['allowed_classes' => false])
749 );
750 }
751 }
752
753 return $ops;
754 }

References $res.

◆ getRolesByFilter()

ilRbacReview::getRolesByFilter ( int  $a_filter = 0,
int  $a_user_id = 0,
string  $title_filter = '' 
)
Returns
Generator<RoleListEntry>

Definition at line 872 of file class.ilRbacReview.php.

872 : Generator
873 {
874 $assign = "y";
875 switch ($a_filter) {
876 case self::FILTER_ALL:
877 return yield from $this->getAssignableRolesGenerator(true, true, $title_filter);
878
879 case self::FILTER_ALL_GLOBAL:
880 $where = 'WHERE ' . $this->db->in('rbac_fa.rol_id', $this->getGlobalRoles(), false, 'integer') . ' ';
881 break;
882
883 case self::FILTER_ALL_LOCAL:
884 case self::FILTER_INTERNAL:
885 case self::FILTER_NOT_INTERNAL:
886 $where = 'WHERE ' . $this->db->in('rbac_fa.rol_id', $this->getGlobalRoles(), true, 'integer');
887 break;
888
889 case self::FILTER_TEMPLATES:
890 $where = "WHERE object_data.type = 'rolt'";
891 $assign = "n";
892 break;
893
894 case 0:
895 default:
896 if (!$a_user_id) {
897 return;
898 }
899
900 $where = 'WHERE ' . $this->db->in(
901 'rbac_fa.rol_id',
902 $this->assignedRoles($a_user_id),
903 false,
904 'integer'
905 ) . ' ';
906 break;
907 }
908
909 $query = "SELECT * FROM object_data " .
910 "JOIN rbac_fa ON obj_id = rol_id " .
911 $where .
912 "AND rbac_fa.assign = " . $this->db->quote($assign, 'text') . " ";
913
914 if (strlen($title_filter)) {
915 $query .= (' AND ' . $this->db->like(
916 'title',
917 'text',
918 '%' . $title_filter . '%'
919 ));
920 }
921
922 $res = $this->db->query($query);
923 while ($row = $this->db->fetchAssoc($res)) {
924 $row['title'] = $row['title'] ?? '';
925 $prefix = str_starts_with($row['title'], "il_");
926
927 // all (assignable) internal local roles only
928 if ($a_filter == 4 && !$prefix) {
929 continue;
930 }
931
932 // all (assignable) non internal local roles only
933 if ($a_filter == 5 && $prefix) {
934 continue;
935 }
936
937 $row['description'] = $row['description'] ?? '';
938 $row["desc"] = $row["description"];
939 $row["user_id"] = (int) $row["owner"];
940 $row['obj_id'] = (int) $row['obj_id'];
941 $row['rol_id'] = (int) $row['rol_id'];
942 $row['parent'] = (int) $row['parent'];
943
944 yield $this->setRoleTypeAndProtection($row);
945 }
946 }

References $res, ILIAS\ResourceStorage\Flavour\Machine\DefaultMachines\from(), and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ getRolesForIDs()

ilRbacReview::getRolesForIDs ( array  $role_ids,
bool  $use_templates 
)

Definition at line 1253 of file class.ilRbacReview.php.

1253 : array
1254 {
1255 $where = $this->__setTemplateFilter($use_templates);
1256 $query = "SELECT * FROM object_data " .
1257 "JOIN rbac_fa ON object_data.obj_id = rbac_fa.rol_id " .
1258 $where .
1259 "AND rbac_fa.assign = 'y' " .
1260 'AND ' . $this->db->in('object_data.obj_id', $role_ids, false, 'integer');
1261
1262 $res = $this->db->query($query);
1263 $role_list = [];
1264 while ($row = $this->db->fetchAssoc($res)) {
1265 $row["desc"] = $row["description"];
1266 $row["user_id"] = (int) $row["owner"];
1267 $role_list[] = $row;
1268 }
1269 return $this->__setRoleType($role_list);
1270 }

References $res, and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ getRolesOfObject()

ilRbacReview::getRolesOfObject ( int  $a_ref_id,
bool  $a_assignable_only = false 
)

Get roles of object.

Returns
list<int>

Definition at line 503 of file class.ilRbacReview.php.

503 : array
504 {
505 $and = '';
506 if ($a_assignable_only === true) {
507 $and = 'AND assign = ' . $this->db->quote('y', 'text');
508 }
509 $query = "SELECT rol_id FROM rbac_fa " .
510 "WHERE parent = " . $this->db->quote($a_ref_id, 'integer') . " " .
511 $and;
512
513 $res = $this->db->query($query);
514
515 $role_ids = [];
516 while ($row = $this->db->fetchObject($res)) {
517 $role_ids[] = (int) $row->rol_id;
518 }
519 return $role_ids;
520 }

References $res, and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ getRolesOfRoleFolder()

ilRbacReview::getRolesOfRoleFolder ( int  $a_ref_id,
bool  $a_nonassignable = true 
)

get all roles of a role folder including linked local roles that are created due to stopped inheritance returns an array with role ids

Returns
list<int> Array with rol_ids
Deprecated:
since version 4.5.0
Todo:
refactor rolf => RENAME

Definition at line 529 of file class.ilRbacReview.php.

529 : array
530 {
531 $and = '';
532 if ($a_nonassignable === false) {
533 $and = " AND assign='y'";
534 }
535
536 $query = "SELECT rol_id FROM rbac_fa " .
537 "WHERE parent = " . $this->db->quote($a_ref_id, 'integer') . " " .
538 $and;
539
540 $res = $this->db->query($query);
541 $rol_id = [];
542 while ($row = $this->db->fetchObject($res)) {
543 $rol_id[] = (int) $row->rol_id;
544 }
545
546 return $rol_id;
547 }

References $res, and ILIAS\Repository\int().

Referenced by ilObjSessionGUI\getDefaultMemberRole(), and ilObjSessionGUI\getLocalRoles().

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ getTypeId()

ilRbacReview::getTypeId ( string  $a_type)

Definition at line 948 of file class.ilRbacReview.php.

948 : int
949 {
950 $q = "SELECT obj_id FROM object_data " .
951 "WHERE title=" . $this->db->quote($a_type, 'text') . " AND type='typ'";
952 $r = $this->db->query($q);
953 while ($row = $r->fetchRow(ilDBConstants::FETCHMODE_OBJECT)) {
954 return (int) $row->obj_id;
955 }
956 return 0;
957 }

References $q, and ilDBConstants\FETCHMODE_OBJECT.

◆ getUserPermissionsOnObject()

ilRbacReview::getUserPermissionsOnObject ( int  $a_user_id,
int  $a_ref_id 
)

Get all user permissions on an object.

Returns
list<string>

Definition at line 1375 of file class.ilRbacReview.php.

1375 : array
1376 {
1377 $query = "SELECT ops_id FROM rbac_pa JOIN rbac_ua " .
1378 "ON (rbac_pa.rol_id = rbac_ua.rol_id) " .
1379 "WHERE rbac_ua.usr_id = " . $this->db->quote($a_user_id, 'integer') . " " .
1380 "AND rbac_pa.ref_id = " . $this->db->quote($a_ref_id, 'integer') . " ";
1381
1382 $res = $this->db->query($query);
1383 $all_ops = [];
1384 while ($row = $this->db->fetchObject($res)) {
1385 $ops = unserialize($row->ops_id, ['allowed_classes' => false]);
1386 $all_ops = array_merge($all_ops, $ops);
1387 }
1388 $all_ops = array_unique($all_ops);
1389
1390 $set = $this->db->query("SELECT operation FROM rbac_operations " .
1391 " WHERE " . $this->db->in("ops_id", $all_ops, false, "integer"));
1392 $perms = [];
1393 while ($rec = $this->db->fetchAssoc($set)) {
1394 $perms[] = $rec["operation"];
1395 }
1396
1397 return array_values(array_filter($perms));
1398 }

References $res.

◆ hasMultipleAssignments()

ilRbacReview::hasMultipleAssignments ( int  $a_role_id)

Definition at line 464 of file class.ilRbacReview.php.

464 : bool
465 {
466 $query = "SELECT * FROM rbac_fa WHERE rol_id = " . $this->db->quote($a_role_id, 'integer') . ' ' .
467 "AND assign = " . $this->db->quote('y', 'text');
468 $res = $this->db->query($query);
469 return $res->numRows() > 1;
470 }

References $res.

◆ isAssignable()

ilRbacReview::isAssignable ( int  $a_rol_id,
int  $a_ref_id 
)

Check if its possible to assign users.

Definition at line 447 of file class.ilRbacReview.php.

447 : bool
448 {
449 // exclude system role from rbac
450 if ($a_rol_id == SYSTEM_ROLE_ID) {
451 return true;
452 }
453
454 $query = "SELECT * FROM rbac_fa " .
455 "WHERE rol_id = " . $this->db->quote($a_rol_id, 'integer') . " " .
456 "AND parent = " . $this->db->quote($a_ref_id, 'integer') . " ";
457 $res = $this->db->query($query);
458 while ($row = $this->db->fetchObject($res)) {
459 return $row->assign == 'y';
460 }
461 return false;
462 }

References $res, and SYSTEM_ROLE_ID.

Referenced by ilRecommendedContentRoleConfigGUI\listItems().

+ Here is the caller graph for this function:

◆ isAssigned()

ilRbacReview::isAssigned ( int  $a_usr_id,
int  $a_role_id 
)

check if a specific user is assigned to specific role

Definition at line 368 of file class.ilRbacReview.php.

368 : bool
369 {
370 if (isset(self::$is_assigned_cache[$a_role_id][$a_usr_id])) {
371 return self::$is_assigned_cache[$a_role_id][$a_usr_id];
372 }
373 // Quickly determine if user is assigned to a role
374 $this->db->setLimit(1, 0);
375 $query = "SELECT usr_id FROM rbac_ua WHERE " .
376 "rol_id= " . $this->db->quote($a_role_id, 'integer') . " " .
377 "AND usr_id= " . $this->db->quote($a_usr_id, ilDBConstants::T_INTEGER);
378 $res = $this->db->query($query);
379 $is_assigned = $res->numRows() == 1;
380 self::$is_assigned_cache[$a_role_id][$a_usr_id] = $is_assigned;
381 return $is_assigned;
382 }

References $res, and ilDBConstants\T_INTEGER.

◆ isAssignedToAtLeastOneGivenRole()

ilRbacReview::isAssignedToAtLeastOneGivenRole ( int  $a_usr_id,
array  $a_role_ids 
)

check if a specific user is assigned to at least one of the given role ids.

This function is used to quickly check whether a user is member of a course or a group.

Parameters
intusr_id
int[]role_ids

Definition at line 392 of file class.ilRbacReview.php.

392 : bool
393 {
394 global $DIC;
395
396 $this->db = $DIC['ilDB'];
397
398 $this->db->setLimit(1, 0);
399 $query = "SELECT usr_id FROM rbac_ua WHERE " .
400 $this->db->in('rol_id', $a_role_ids, false, 'integer') .
401 " AND usr_id= " . $this->db->quote($a_usr_id, ilDBConstants::T_INTEGER);
402 $res = $this->db->query($query);
403
404 return $this->db->numRows($res) == 1;
405 }

References $DIC, $res, and ilDBConstants\T_INTEGER.

◆ isBlockedAtPosition()

ilRbacReview::isBlockedAtPosition ( int  $a_role_id,
int  $a_ref_id 
)

Definition at line 1063 of file class.ilRbacReview.php.

1063 : bool
1064 {
1065 $query = 'SELECT blocked from rbac_fa ' .
1066 'WHERE rol_id = ' . $this->db->quote($a_role_id, 'integer') . ' ' .
1067 'AND parent = ' . $this->db->quote($a_ref_id, 'integer');
1068 $res = $this->db->query($query);
1069 while ($row = $res->fetchRow(ilDBConstants::FETCHMODE_OBJECT)) {
1070 return (bool) $row->blocked;
1071 }
1072 return false;
1073 }

References $res, and ilDBConstants\FETCHMODE_OBJECT.

◆ isBlockedInUpperContext()

ilRbacReview::isBlockedInUpperContext ( int  $a_role_id,
int  $a_ref_id 
)

Check if role is blocked in upper context.

Todo:
move tree to construct. Currently this is not possible due to init sequence

Definition at line 1079 of file class.ilRbacReview.php.

1079 : bool
1080 {
1081 global $DIC;
1082
1083 $tree = $DIC['tree'];
1084
1085 if ($this->isBlockedAtPosition($a_role_id, $a_ref_id)) {
1086 return false;
1087 }
1088 $query = 'SELECT parent from rbac_fa ' .
1089 'WHERE rol_id = ' . $this->db->quote($a_role_id, 'integer') . ' ' .
1090 'AND blocked = ' . $this->db->quote(1, 'integer');
1091 $res = $this->db->query($query);
1092
1093 $parent_ids = [];
1094 while ($row = $res->fetchRow(ilDBConstants::FETCHMODE_OBJECT)) {
1095 $parent_ids[] = (int) $row->parent;
1096 }
1097
1098 foreach ($parent_ids as $parent_id) {
1099 if ($tree->isGrandChild($parent_id, $a_ref_id)) {
1100 return true;
1101 }
1102 }
1103 return false;
1104 }
ilRbacReview\isBlockedAtPosition
isBlockedAtPosition(int $a_role_id, int $a_ref_id)
Definition: class.ilRbacReview.php:1063

References $DIC, $res, ilDBConstants\FETCHMODE_OBJECT, and ILIAS\Repository\int().

+ Here is the call graph for this function:

◆ isDeleteable()

ilRbacReview::isDeleteable ( int  $a_role_id,
int  $a_rolf_id 
)

Check if role is deleteable at a specific position.

Definition at line 1303 of file class.ilRbacReview.php.

1303 : bool
1304 {
1305 if (!$this->isAssignable($a_role_id, $a_rolf_id)) {
1306 return false;
1307 }
1308 if ($a_role_id == SYSTEM_ROLE_ID or $a_role_id == ANONYMOUS_ROLE_ID) {
1309 return false;
1310 }
1311 if (str_starts_with(ilObject::_lookupTitle($a_role_id), 'il_')) {
1312 return false;
1313 }
1314 return true;
1315 }
ilObject\_lookupTitle
static _lookupTitle(int $obj_id)
Definition: class.ilObject.php:847
ANONYMOUS_ROLE_ID
const ANONYMOUS_ROLE_ID
Definition: constants.php:28

References ilObject\_lookupTitle(), ANONYMOUS_ROLE_ID, and SYSTEM_ROLE_ID.

+ Here is the call graph for this function:

◆ isDeleted()

ilRbacReview::isDeleted ( int  $a_node_id)

Checks if a rolefolder is set as deleted (negative tree_id)

Todo:
delete this method

Definition at line 843 of file class.ilRbacReview.php.

843 : bool
844 {
845 $q = "SELECT tree FROM tree WHERE child =" . $this->db->quote($a_node_id, ilDBConstants::T_INTEGER) . " ";
846 $r = $this->db->query($q);
847 $row = $r->fetchRow(ilDBConstants::FETCHMODE_OBJECT);
848
849 if (!$row) {
850 $message = sprintf(
851 '%s::isDeleted(): Role folder with ref_id %s not found!',
852 get_class($this),
853 $a_node_id
854 );
855 $this->log->warning($message);
856 return true;
857 }
858 return $row->tree < 0;
859 }
$message
$message
Definition: xapiexit.php:31

References $message, $q, ilDBConstants\FETCHMODE_OBJECT, and ilDBConstants\T_INTEGER.

◆ isGlobalRole()

ilRbacReview::isGlobalRole ( int  $a_role_id)

Check if role is a global role.

Definition at line 864 of file class.ilRbacReview.php.

864 : bool
865 {
866 return in_array($a_role_id, $this->getGlobalRoles());
867 }

◆ isProtected()

ilRbacReview::isProtected ( int  $a_ref_id,
int  $a_role_id 
)

ref_id not used yet.

Protected permission acts 'global' for each role,

Definition at line 1050 of file class.ilRbacReview.php.

1050 : bool
1051 {
1052 $query = 'SELECT protected FROM rbac_fa ' .
1053 'WHERE rol_id = ' . $this->db->quote($a_role_id, ilDBConstants::T_INTEGER);
1054 $res = $this->db->query($query);
1055 while ($row = $res->fetchRow(ilDBConstants::FETCHMODE_OBJECT)) {
1056 if ($row->protected === 'y') {
1057 return true;
1058 }
1059 }
1060 return false;
1061 }

References $res, ilDBConstants\FETCHMODE_OBJECT, and ilDBConstants\T_INTEGER.

◆ isRoleAssignedToObject()

ilRbacReview::isRoleAssignedToObject ( int  $a_role_id,
int  $a_parent_id 
)

Check if role is assigned to an object.

Definition at line 623 of file class.ilRbacReview.php.

623 : bool
624 {
625 $query = 'SELECT * FROM rbac_fa ' .
626 'WHERE rol_id = ' . $this->db->quote($a_role_id, 'integer') . ' ' .
627 'AND parent = ' . $this->db->quote($a_parent_id, 'integer');
628 $res = $this->db->query($query);
629 return (bool) $res->numRows();
630 }

References $res.

◆ isRoleDeleted()

ilRbacReview::isRoleDeleted ( int  $a_role_id)

return if role is only attached to deleted role folders

Definition at line 1237 of file class.ilRbacReview.php.

1237 : bool
1238 {
1239 $rolf_list = $this->getFoldersAssignedToRole($a_role_id, false);
1240 $deleted = true;
1241 if ($rolf_list !== []) {
1242 foreach ($rolf_list as $rolf) {
1243 // only list roles that are not set to status "deleted"
1244 if (!$this->isDeleted($rolf)) {
1245 $deleted = false;
1246 break;
1247 }
1248 }
1249 }
1250 return $deleted;
1251 }
ilRbacReview\isDeleted
isDeleted(int $a_node_id)
Checks if a rolefolder is set as deleted (negative tree_id)
Definition: class.ilRbacReview.php:843
ilRbacReview\getFoldersAssignedToRole
getFoldersAssignedToRole(int $a_rol_id, bool $a_assignable=false)
Returns an array of objects assigned to a role.
Definition: class.ilRbacReview.php:481

◆ isSystemGeneratedRole()

ilRbacReview::isSystemGeneratedRole ( int  $a_role_id)

Check if the role is system generate role or role template.

Definition at line 1320 of file class.ilRbacReview.php.

1320 : bool
1321 {
1322 $title = ilObject::_lookupTitle($a_role_id);
1323 return substr($title, 0, 3) == 'il_';
1324 }

References ilObject\_lookupTitle().

+ Here is the call graph for this function:

◆ lookupCreateOperationIds()

static ilRbacReview::lookupCreateOperationIds ( array  $a_type_arr)
static

Lookup operation ids.

Parameters
list<string>$a_type_arr e.g array('cat','crs','grp'). The operation name (e.g. 'create_cat') is generated automatically
Returns
array<string, int> Array with operation ids

Definition at line 1017 of file class.ilRbacReview.php.

1017 : array
1018 {
1019 global $DIC;
1020
1021 $ilDB = $DIC->database();
1022
1023 $operations = [];
1024 foreach ($a_type_arr as $type) {
1025 $operations[] = ('create_' . $type);
1026 }
1027
1028 if ($operations === []) {
1029 return [];
1030 }
1031
1032 $query = 'SELECT ops_id, operation FROM rbac_operations ' .
1033 'WHERE ' . $ilDB->in('operation', $operations, false, 'text');
1034
1035 $res = $ilDB->query($query);
1036
1037 $ops_ids = [];
1038 while ($row = $ilDB->fetchObject($res)) {
1039 $type_arr = explode('_', $row->operation);
1040 $type = $type_arr[1];
1041
1042 $ops_ids[$type] = (int) $row->ops_id;
1043 }
1044 return $ops_ids;
1045 }

References $DIC, $ilDB, $res, and ILIAS\Repository\int().

Referenced by ilObjectXMLWriter\appendOperations(), ilObjectRolePermissionTableGUI\parse(), ilObjectRoleTemplatePermissionTableGUI\parse(), and ilPermissionGUI\savePermissions().

+ Here is the call graph for this function:
+ Here is the caller graph for this function:

◆ roleExists()

ilRbacReview::roleExists ( string  $a_title,
int  $a_id = 0 
)

Checks if a role already exists.

Role title should be unique @access public

Parameters
stringrole title
?intobj_id of role to exclude in the check. Commonly this is the current role you want to edit
Returns
bool

Definition at line 70 of file class.ilRbacReview.php.

70 : ?int
71 {
72 $clause = ($a_id) ? " AND obj_id != " . $this->db->quote($a_id, ilDBConstants::T_TEXT) . " " : "";
73
74 $q = "SELECT DISTINCT(obj_id) obj_id FROM object_data " .
75 "WHERE title =" . $this->db->quote($a_title, ilDBConstants::T_TEXT) . " " .
76 "AND type IN('role','rolt')" .
77 $clause . " ";
78 $r = $this->db->query($q);
79 while ($row = $r->fetchRow(ilDBConstants::FETCHMODE_OBJECT)) {
80 return (int) $row->obj_id;
81 }
82 return null;
83 }

References $q, ilDBConstants\FETCHMODE_OBJECT, and ilDBConstants\T_TEXT.

◆ setAssignedCacheEntry()

ilRbacReview::setAssignedCacheEntry ( int  $a_role_id,
int  $a_user_id,
bool  $a_value 
)

set entry of assigned_chache

Definition at line 1403 of file class.ilRbacReview.php.

1403 : void
1404 {
1405 self::$is_assigned_cache[$a_role_id][$a_user_id] = $a_value;
1406 }

◆ setRoleTypeAndProtection()

ilRbacReview::setRoleTypeAndProtection ( array  $role_list_entry)
private

Definition at line 294 of file class.ilRbacReview.php.

294 : array
295 {
296 $role_list_entry['role_type'] = $this->buildRoleType($role_list_entry);
297 $role_list_entry['protected'] = $this->buildProtectionByStringValue($role_list_entry['protected']);
298 return $role_list_entry;
299 }
ilRbacReview\buildRoleType
buildRoleType(array $role_list_entry)
Definition: class.ilRbacReview.php:301
ilRbacReview\buildProtectionByStringValue
buildProtectionByStringValue(string $value)
Definition: class.ilRbacReview.php:318

Field Documentation

◆ $_opsCache

array ilRbacReview::$_opsCache = null
staticprivate

Definition at line 43 of file class.ilRbacReview.php.

◆ $assigned_users_cache

array ilRbacReview::$assigned_users_cache = []
staticprotected

Definition at line 45 of file class.ilRbacReview.php.

◆ $db

ilDBInterface ilRbacReview::$db
protected

Definition at line 49 of file class.ilRbacReview.php.

◆ $is_assigned_cache

array ilRbacReview::$is_assigned_cache = []
staticprotected

Definition at line 46 of file class.ilRbacReview.php.

◆ $log

ilLogger ilRbacReview::$log
protected

Definition at line 48 of file class.ilRbacReview.php.

◆ FILTER_ALL

const ilRbacReview::FILTER_ALL = 1

Definition at line 35 of file class.ilRbacReview.php.

Referenced by ilRoleTableGUI\initFilter(), and ilRoleTableGUI\parse().

◆ FILTER_ALL_GLOBAL

const ilRbacReview::FILTER_ALL_GLOBAL = 2

Definition at line 36 of file class.ilRbacReview.php.

Referenced by ilRoleTableGUI\initFilter().

◆ FILTER_ALL_LOCAL

const ilRbacReview::FILTER_ALL_LOCAL = 3

Definition at line 37 of file class.ilRbacReview.php.

Referenced by ilRoleTableGUI\initFilter().

◆ FILTER_INTERNAL

const ilRbacReview::FILTER_INTERNAL = 4

Definition at line 38 of file class.ilRbacReview.php.

Referenced by ilRoleTableGUI\initFilter().

◆ FILTER_NOT_INTERNAL

const ilRbacReview::FILTER_NOT_INTERNAL = 5

Definition at line 39 of file class.ilRbacReview.php.

Referenced by ilRoleTableGUI\initFilter().

◆ FILTER_TEMPLATES

const ilRbacReview::FILTER_TEMPLATES = 6

Definition at line 40 of file class.ilRbacReview.php.

Referenced by ilRoleTableGUI\initFilter().

The documentation for this class was generated from the following file: