|
Server : Apache System : Linux srv.rainic.com 4.18.0-553.47.1.el8_10.x86_64 #1 SMP Wed Apr 2 05:45:37 EDT 2025 x86_64 User : rainic ( 1014) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /home/akaindir/public_html/crm/modules/Users/actions/ |
Upload File : |
<?php
/*+***********************************************************************************
* The contents of this file are subject to the vtiger CRM Public License Version 1.0
* ("License"); You may not use this file except in compliance with the License
* The Original Code is: vtiger CRM Open Source
* The Initial Developer of the Original Code is vtiger.
* Portions created by vtiger are Copyright (C) vtiger.
* All Rights Reserved.
*************************************************************************************/
class Users_Save_Action extends Vtiger_Save_Action {
public function checkPermission(Vtiger_Request $request) {
$moduleName = $request->getModule();
$record = $request->get('record');
$recordModel = Vtiger_Record_Model::getInstanceById($record, $moduleName);
$currentUserModel = Users_Record_Model::getCurrentUserModel();
// Check for operation access.
$allowed = Users_Privileges_Model::isPermitted($moduleName, 'Save', $record);
if ($allowed) {
// Deny access if not administrator or account-owner or self
if(!$currentUserModel->isAdminUser()) {
if (empty($record)) {
$allowed = false;
} else if (($currentUserModel->get('id') != $recordModel->getId())) {
$allowed = false;
}
}
}
if(!$allowed) {
throw new AppException('LBL_PERMISSION_DENIED');
}
}
/**
* Function to get the record model based on the request parameters
* @param Vtiger_Request $request
* @return Vtiger_Record_Model or Module specific Record Model instance
*/
public function getRecordModelFromRequest(Vtiger_Request $request) {
$moduleName = $request->getModule();
$recordId = $request->get('record');
$currentUserModel = Users_Record_Model::getCurrentUserModel();
if(!empty($recordId)) {
$recordModel = Vtiger_Record_Model::getInstanceById($recordId, $moduleName);
$modelData = $recordModel->getData();
$recordModel->set('id', $recordId);
$sharedType = $request->get('sharedtype');
if(!empty($sharedType))
$recordModel->set('calendarsharedtype', $request->get('sharedtype'));
$recordModel->set('mode', 'edit');
} else {
$recordModel = Vtiger_Record_Model::getCleanInstance($moduleName);
$modelData = $recordModel->getData();
$recordModel->set('mode', '');
}
foreach ($modelData as $fieldName => $value) {
$requestFieldExists = $request->has($fieldName);
if(!$requestFieldExists){
continue;
}
$fieldValue = $request->get($fieldName, null);
if ($fieldName === 'is_admin' && (!$currentUserModel->isAdminUser() || !$fieldValue)) {
$fieldValue = 'off';
}
//to not update is_owner from ui
if ($fieldName == 'is_owner') {
$fieldValue = null;
}
if($fieldValue !== null) {
if(!is_array($fieldValue)) {
$fieldValue = trim($fieldValue);
}
$recordModel->set($fieldName, $fieldValue);
}
}
$homePageComponents = $recordModel->getHomePageComponents();
$selectedHomePageComponents = $request->get('homepage_components', array());
foreach ($homePageComponents as $key => $value) {
if(in_array($key, $selectedHomePageComponents)) {
$request->setGlobal($key, $key);
} else {
$request->setGlobal($key, '');
}
}
if($request->has('tagcloudview')) {
// Tag cloud save
$tagCloud = $request->get('tagcloudview');
if($tagCloud == "on") {
$recordModel->set('tagcloud', 0);
} else {
$recordModel->set('tagcloud', 1);
}
}
return $recordModel;
}
public function process(Vtiger_Request $request) {
$result = Vtiger_Util_Helper::transformUploadedFiles($_FILES, true);
$_FILES = $result['imagename'];
$recordId = $request->get('record');
if (!$recordId) {
$module = $request->getModule();
$userName = $request->get('user_name');
$userModuleModel = Users_Module_Model::getCleanInstance($module);
$status = $userModuleModel->checkDuplicateUser($userName);
if ($status == true) {
throw new AppException(vtranslate('LBL_DUPLICATE_USER_EXISTS', $module));
}
}
$recordModel = $this->saveRecord($request);
if ($request->get('relationOperation')) {
$parentRecordModel = Vtiger_Record_Model::getInstanceById($request->get('sourceRecord'), $request->get('sourceModule'));
$loadUrl = $parentRecordModel->getDetailViewUrl();
} else if ($request->get('isPreference')) {
$loadUrl = $recordModel->getPreferenceDetailViewUrl();
} else if ($request->get('returnmodule') && $request->get('returnview')){
$loadUrl = 'index.php?'.$request->getReturnURL();
} else if($request->get('mode') == 'Calendar'){
$loadUrl = $recordModel->getCalendarSettingsDetailViewUrl();
}else {
$loadUrl = $recordModel->getDetailViewUrl();
}
header("Location: $loadUrl");
}
}