|
Server : Apache System : Linux srv.rainic.com 4.18.0-553.47.1.el8_10.x86_64 #1 SMP Wed Apr 2 05:45:37 EDT 2025 x86_64 User : rainic ( 1014) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory : /home/akaindir/www/crm/modules/Users/models/ |
Upload File : |
<?php
/*+***********************************************************************************
* The contents of this file are subject to the vtiger CRM Public License Version 1.0
* ("License"); You may not use this file except in compliance with the License
* The Original Code is: vtiger CRM Open Source
* The Initial Developer of the Original Code is vtiger.
* Portions created by vtiger are Copyright (C) vtiger.
* All Rights Reserved.
*************************************************************************************/
/**
* User Privileges Model Class
*/
class Users_Privileges_Model extends Users_Record_Model {
/**
* Function to get the Global Read Permission for the user
* @return <Number> 0/1
*/
protected function getGlobalReadPermission() {
$profileGlobalPermissions = $this->get('profile_global_permission');
return $profileGlobalPermissions[Settings_Profiles_Module_Model::GLOBAL_ACTION_VIEW];
}
/**
* Function to get the Global Write Permission for the user
* @return <Number> 0/1
*/
protected function getGlobalWritePermission() {
$profileGlobalPermissions = $this->get('profile_global_permission');
return $profileGlobalPermissions[Settings_Profiles_Module_Model::GLOBAL_ACTION_EDIT];
}
/**
* Function to check if the user has Global Read Permission
* @return <Boolean> true/false
*/
public function hasGlobalReadPermission() {
return ($this->isAdminUser() ||
$this->getGlobalReadPermission() === Settings_Profiles_Module_Model::IS_PERMITTED_VALUE ||
$this->getGlobalWritePermission() === Settings_Profiles_Module_Model::IS_PERMITTED_VALUE);
}
/**
* Function to check if the user has Global Write Permission
* @return <Boolean> true/false
*/
public function hasGlobalWritePermission() {
return ($this->isAdminUser() || $this->getGlobalWritePermission() === Settings_Profiles_Module_Model::IS_PERMITTED_VALUE);
}
public function hasGlobalPermission($actionId) {
if($actionId == Settings_Profiles_Module_Model::GLOBAL_ACTION_VIEW) {
return $this->hasGlobalReadPermission();
}
if($actionId == Settings_Profiles_Module_Model::GLOBAL_ACTION_EDIT) {
return $this->hasGlobalWritePermission();
}
return false;
}
/**
* Function to check whether the user has access to a given module by tabid
* @param <Number> $tabId
* @return <Boolean> true/false
*/
public function hasModulePermission($tabId) {
$profileTabsPermissions = $this->get('profile_tabs_permission');
$moduleModel = Vtiger_Module_Model::getInstance($tabId);
return (($this->isAdminUser() || $profileTabsPermissions[$tabId] === 0) && $moduleModel->isActive());
}
/**
* Function to check whether the user has access to the specified action/operation on a given module by tabid
* @param <Number> $tabId
* @param <String/Number> $action
* @return <Boolean> true/false
*/
public function hasModuleActionPermission($tabId, $action) {
if(!is_a($action, 'Vtiger_Action_Model')) {
$action = Vtiger_Action_Model::getInstance($action);
}
$actionId = $action->getId();
$profileTabsPermissions = $this->get('profile_action_permission');
$moduleModel = Vtiger_Module_Model::getInstance($tabId);
return (($this->isAdminUser() || $profileTabsPermissions[$tabId][$actionId] === Settings_Profiles_Module_Model::IS_PERMITTED_VALUE)
&& $moduleModel->isActive());
}
/**
* Static Function to get the instance of the User Privileges model from the given list of key-value array
* @param <Array> $valueMap
* @return Users_Privilege_Model object
*/
public static function getInstance($valueMap) {
$instance = new self();
foreach ($valueMap as $key => $value) {
$instance->$key = $value;
}
$instance->setData($valueMap);
return $instance;
}
/**
* Static Function to get the instance of the User Privileges model, given the User id
* @param <Number> $userId
* @return Users_Privilege_Model object
*/
public static function getInstanceById($userId, $module = NULL) {
if (empty($userId))
return null;
$acl = Vtiger_AccessControl::loadUserPrivileges($userId);
require("user_privileges/sharing_privileges_$userId.php");
$valueMap = array();
$valueMap['id'] = $userId;
$valueMap['is_admin'] = (bool) $acl->is_admin;
$valueMap['roleid'] = $acl->current_user_roles;
$valueMap['parent_role_seq'] = $acl->current_user_parent_role_seq;
$valueMap['profiles'] = $acl->current_user_profiles;
$valueMap['profile_global_permission'] = $acl->profileGlobalPermission;
$valueMap['profile_tabs_permission'] = $acl->profileTabsPermission;
$valueMap['profile_action_permission'] = $acl->profileActionPermission;
$valueMap['groups'] = $acl->current_user_groups;
$valueMap['subordinate_roles'] = $acl->subordinate_roles;
$valueMap['parent_roles'] = $acl->parent_roles;
$valueMap['subordinate_roles_users'] = $acl->subordinate_roles_users;
$valueMap['defaultOrgSharingPermission'] = $defaultOrgSharingPermission;
$valueMap['related_module_share'] = $related_module_share;
if(is_array($acl->user_info)) {
$valueMap = array_merge($valueMap, $acl->user_info);
}
return self::getInstance($valueMap);
}
/**
* Static function to get the User Privileges Model for the current user
* @return Users_Privilege_Model object
*/
public static function getCurrentUserPrivilegesModel() {
//TODO : Remove the global dependency
$currentUser = vglobal('current_user');
$currentUserId = $currentUser->id;
return self::getInstanceById($currentUserId);
}
/**
* Function to check permission for a Module/Action/Record
* @param <String> $moduleName
* @param <String> $actionName
* @param <Number> $record
* @return Boolean
*/
public static function isPermitted($moduleName, $actionName, $record=false) {
$permission = isPermitted($moduleName, $actionName, $record);
if($permission == 'yes') {
return true;
}
return false;
}
/**
* Function returns non admin access control check query
* @param <String> $module
* @return <String>
*/
public static function getNonAdminAccessControlQuery($module) {
$currentUser = vglobal('current_user');
return getNonAdminAccessControlQuery($module, $currentUser);
}
/**
* Function to check permission for current user to change username
* @param <integer> $targetUserId
* @return boolean
*
* ::Rules::
* 1. Admin can only change the username
* 2. Admin shouldn't change other admin's username
* 3. Only account owner can change other admin's username
* 4. No one can change account owner's username
*/
public static function isPermittedToChangeUsername($targetUserId) {
$recordModel = parent::getInstanceFromPreferenceFile($targetUserId);
$currentUserModel = parent::getCurrentUserModel();
if(is_int($targetUserId)) {
$targetUserId = strval($targetUserId);
}
if($currentUserModel->isAdminUser() && !$recordModel->isAccountOwner()) {
if($targetUserId === $currentUserModel->getId() || !$recordModel->isAdminUser() || $currentUserModel->isAccountOwner()) {
return true;
}
}
return false;
}
}