/s3db3.5.10/s3dbcore/element_info.php

https://github.com/drobbins/s3db · PHP · 439 lines · 321 code · 88 blank · 30 comment · 23 complexity · fd95c315c493c53c7f67e3ba678a998b MD5 · raw file 

    

  1. <?php

    2. 

  2. /**

    3. 

  3. 	

    4. 

  4. 	* @author Helena F Deus <helenadeus@gmail.com>

    5. 

  5. 	* @license http://www.gnu.org/copyleft/gpl.html GNU General Public License

    6. 

  6. 	* @package S3DB http://www.s3db.org

    7. 

  7. */

    8. 

  8. 

    9. 

  9. 

    10. 

  10. 

    11. 

  11. function get_rule_info($element_id)

    12. 

  12. 	{

    13. 

  13. 		$db = $_SESSION['db'];

    14. 

  14. 	$sql = "select * from s3db_rule where rule_id='".$element_id."'";

    15. 

  15. 		$db->query($sql, __LINE__, __FILE__);

    16. 

  16. 

    17. 

  17. 		if($db->next_record())

    18. 

  18. 		{

    19. 

  19. 			$rule = Array('entity_id'=>$db->f('entity_id'),

    20. 

  20. 					'rule_id'=>$db->f('rule_id'),

    21. 

  21. 					'project_id'=>$db->f('project_id'),

    22. 

  22. 					'subject'=>$db->f('subject'),	

    23. 

  23. 					'verb'=>$db->f('verb'),	

    24. 

  24. 					'object'=>$db->f('object'),	

    25. 

  25. 					'notes'=>$db->f('notes'),	

    26. 

  26. 					'created_on'=>substr($db->f('created_on'), 0, 19),	

    27. 

  27. 					'created_by'=>$db->f('created_by'),	

    28. 

  28. 					'modified_on'=>$db->f('modified_on'),	

    29. 

  29. 					'modified_by'=>$db->f('modified_by'),

    30. 

  30. 					'permission'=>$db->f('permission'));

    31. 

  31. 		}

    32. 

  32. 		return $rule;

    33. 

  33. 	}

    34. 

  34. 

    35. 

  35. 

    36. 

  36. function get_group_info($account_id)

    37. 

  37. 	{

    38. 

  38. 		$db =$_SESSION['db'];

    39. 

  39. 		$sql = "select account_id, account_lid from s3db_account where account_id ='".$account_id."'";

    40. 

  40. 		$db->query($sql, __LINE__, __FILE__);

    41. 

  41. 		if($db->next_record())

    42. 

  42. 		{

    43. 

  43. 			$group = Array('account_id'=>$db->f('account_id'), 

    44. 

  44. 					'account_lid'=>$db->f('account_lid'));

    45. 

  45. 		}

    46. 

  46. 		return $group;

    47. 

  47. 	}

    48. 

  48. 

    49. 

  49. 

    50. 

  50. 

    51. 

  51. function get_resource_info($id, $iid)

    52. 

  52. 	{

    53. 

  53. 		$db= $_SESSION['db'];

    54. 

  54. 	    $sql ="select * from s3db_resource where resource_id='".$id."' and iid=".$iid."";

    55. 

  55. 		$db->query($sql, __LINE__, __FILE__);

    56. 

  56. 		if($db->next_record())

    57. 

  57. 		{

    58. 

  58. 			$resource = Array('resource_id'=>$db->f('resource_id'),

    59. 

  59. 					 'project_id'=>$db->f('project_id'),

    60. 

  60. 					//'owner'=>$db->f('owner'),

    61. 

  61. 					'uid'=>$db->f('uid'),

    62. 

  62. 					'entity'=>$db->f('entity'),

    63. 

  63. 					'resource_class_id'=>$db->f('resource_class_id'),

    64. 

  64. 					'notes'=>$db->f('notes'),

    65. 

  65. 					'created_on'=>substr($db->f('created_on'), 0, 19),

    66. 

  66. 					'created_by'=>$db->f('created_by'),	

    67. 

  67. 					'modified_on'=>substr($db->f('modified_on'), 0, 19),

    68. 

  68. 					'modified_by'=>$db->f('modified_by'));

    69. 

  69. 		}

    70. 

  70. 		return $resource;

    71. 

  71. 	}

    72. 

  72. 

    73. 

  73. function find_rule_id($subject, $verb, $object, $project_id, $db)

    74. 

  74. 	{

    75. 

  75. 		

    76. 

  76. 		if($db=='') $db = $_SESSION['db'];

    77. 

  77. 	

    78. 

  78. 		

    79. 

  79. 		if ($GLOBALS['s3db_info']['server']['db']['db_type'] == 'mysql')

    80. 

  80. 		$sql = "select rule_id from s3db_rule where subject = '".$subject."' and verb='".$verb."' and object='".$object."' and permission regexp '(".$project_id."$|".$project_id."_)'";

    81. 

  81. 		else

    82. 

  82. 		$sql = "select rule_id from s3db_rule where subject = '".$subject."' and verb='".$verb."' and object='".$object."' and permission ~~ '%".$project_id."\\\_%'";

    83. 

  83. 

    84. 

  84. 	#echo $sql;

    85. 

  85. 		$db->query($sql, __LINE__, __FILE__);

    86. 

  86. 		if($db->next_record())

    87. 

  87. 			return $db->f('rule_id');

    88. 

  88. 		

    89. 

  89. 		

    90. 

  90. 		

    91. 

  91. 

    92. 

  92. 	}

    93. 

  93. 

    94. 

  94. function find_statement_id($rule_id, $UID, $project_id)

    95. 

  95. 

    96. 

  96. {

    97. 

  97. 

    98. 

  98. $db = $_SESSION['db'];

    99. 

  99. 

    100. 

  100. $sql = "select statement_id from s3db_statement where rule_id='".$rule_id."' and resource_id='".$UID."'";

    101. 

  101. 

    102. 

  102. #echo $sql.'<BR>';

    103. 

  103. $db->query($sql, __LINE__, __FILE__);

    104. 

  104. 

    105. 

  105. while($db->next_record())

    106. 

  106. 		{

    107. 

  107. 		$statement_id[] = $db->f('statement_id');

    108. 

  108. 

    109. 

  109. 		}

    110. 

  110. 	#echo $statement_id;

    111. 

  111. 	return $statement_id;

    112. 

  112. 

    113. 

  113. 

    114. 

  114. }

    115. 

  115. 

    116. 

  116. 

    117. 

  117. function find_owner_project_id($element, $element_id, $db)

    118. 

  118. 

    119. 

  119. {

    120. 

  120. 	if ($db=='') $db = $_SESSION['db'];

    121. 

  121.     

    122. 

  122. 

    123. 

  123. 		$sql = "select project_id from s3db_".$element." where ".$element."_id='".$element_id."'";

    124. 

  124. 		

    125. 

  125. 		$db->query($sql, __LINE__, __FILE__);

    126. 

  126. 		

    127. 

  127. 		if($db->next_record())

    128. 

  128. 			return $db->f('project_id');

    129. 

  129. 	

    130. 

  130. 

    131. 

  131. 

    132. 

  132. 

    133. 

  133. 

    134. 

  134. 

    135. 

  135. }

    136. 

  136. 

    137. 

  137. function get_statement_info_by_rule($rule_id, $UID, $project_id)

    138. 

  138. 	{

    139. 

  139. 		$db= $_SESSION['db'];

    140. 

  140. 		$sql ="select * from s3db_statement where rule_id='".$rule_id."' and resource_id='".$UID."'";

    141. 

  141. 		#$sql ="select * from s3db_statement where rule_id=".$rule_id." and resource_id=".$UID."";

    142. 

  142. 		

    143. 

  143. 		#echo $sql;

    144. 

  144. 		$db->query($sql, __LINE__, __FILE__);

    145. 

  145. 		while($db->next_record())

    146. 

  146. 		{

    147. 

  147. 			$statement = Array('statement_id'=>$db->f('statement_id'),

    148. 

  148. 					 'project_id'=>$db->f('project_id'),

    149. 

  149. 					'resource_id'=>$db->f('resource_id'),

    150. 

  150. 					'rule_id'=>$db->f('rule_id'),

    151. 

  151. 					'value'=>$db->f('value'),

    152. 

  152. 					'notes'=>$db->f('notes'),

    153. 

  153. 					'created_on'=>$db->f('created_on'),

    154. 

  154. 					'created_by'=>$db->f('created_by'),	

    155. 

  155. 					'modified_on'=>$db->f('modified_on'),

    156. 

  156. 					'modified_by'=>$db->f('modified_by'),

    157. 

  157. 					'mime_type'=>$db->f('mime_type'),

    158. 

  158. 					'file_name'=>$db->f('file_name'));

    159. 

  159. 					}

    160. 

  160. 		return $statement;

    161. 

  161. 	}

    162. 

  162. 

    163. 

  163. function get_statement_info($S)

    164. 

  164. 	{

    165. 

  165. 		extract($S);

    166. 

  166. 		#echo '<pre>';print_r($S);

    167. 

  167. 		#$db= $_SESSION['db'];

    168. 

  168. 		$sql ="select r.subject, r.verb, r.object, s.statement_id, s.project_id, s.resource_id, s.rule_id, s.value, s.file_name, s.notes, s.created_on, s.created_by, s.modified_by, s.modified_on from s3db_rule as r, s3db_statement as s where r.rule_id = s.rule_id and s.statement_id='".$statement_id."'";

    169. 

  169. 		$db->query($sql, __LINE__, __FILE__);

    170. 

  170. 		if($db->next_record())

    171. 

  171. 		{

    172. 

  172. 			$statement = Array('statement_id'=>$db->f('statement_id'),

    173. 

  173. 					 'project_id'=>$db->f('project_id'),

    174. 

  174. 					 'resource_id'=>$db->f('resource_id'),

    175. 

  175. 					'rule_id'=>$db->f('rule_id'),

    176. 

  176. 					//'owner'=>$db->f('owner'),

    177. 

  177. 					'subject'=>$db->f('subject'),

    178. 

  178. 					'verb'=>$db->f('verb'),

    179. 

  179. 					'object'=>$db->f('object'),

    180. 

  180. 					'value'=>$db->f('value'),

    181. 

  181. 					'file_name'=>$db->f('file_name'),

    182. 

  182. 					'notes'=>$db->f('notes'),

    183. 

  183. 					'created_on'=>$db->f('created_on'),

    184. 

  184. 					'created_by'=>$db->f('created_by'),	

    185. 

  185. 					'modified_on'=>$db->f('modified_on'),

    186. 

  186. 					'modified_by'=>$db->f('modified_by'));

    187. 

  187. 		}

    188. 

  188. 		return $statement;

    189. 

  189. 	}

    190. 

  190. 	

    191. 

  191. 

    192. 

  192. 	function get_statement_info_editstat($id)

    193. 

  193. 	{

    194. 

  194. 		$db= $_SESSION['db'];

    195. 

  195. 		$sql ="select r.subject, r.verb, r.object, s.statement_id, s.project_id, s.resource_id, s.rule_id, s.value, s.file_name, s.notes, s.created_on, s.created_by, s.modified_by, s.modified_on from s3db_rule as r, s3db_statement as s where r.rule_id = s.rule_id and s.statement_id='".$id."'";

    196. 

  196. 		//$sql ="select * from s3db_statement where statement_id='".$id."'";

    197. 

  197. 		$db->query($sql, __LINE__, __FILE__);

    198. 

  198. 		if($db->next_record())

    199. 

  199. 		{

    200. 

  200. 			$statement = Array('statement_id'=>$db->f('statement_id'),

    201. 

  201. 					 'project_id'=>$db->f('project_id'),

    202. 

  202. 					'rule_id'=>$db->f('rule_id'),

    203. 

  203. 					'resource_id'=>$db->f('resource_id'),

    204. 

  204. 					'subject'=>$db->f('subject'),

    205. 

  205. 					'verb'=>$db->f('verb'),

    206. 

  206. 					'object'=>$db->f('object'),

    207. 

  207. 					'value'=>$db->f('value'),

    208. 

  208. 					'file_name'=>$db->f('file_name'),

    209. 

  209. 					'notes'=>$db->f('notes'),

    210. 

  210. 					'created_on'=>$db->f('created_on'),

    211. 

  211. 					'created_by'=>$db->f('created_by'),	

    212. 

  212. 					'modified_on'=>$db->f('modified_on'),

    213. 

  213. 					'modified_by'=>$db->f('modified_by'));

    214. 

  214. 		}

    215. 

  215. 		return $statement;

    216. 

  216. 	}	

    217. 

  217. 

    218. 

  218. 

    219. 

  219. function get_statement_info_from_ID($statement_id, $project_id)

    220. 

  220. 	{

    221. 

  221. 		$db= $_SESSION['db'];

    222. 

  222. 		$sql ="select * from s3db_statement where rule_id='".$rule_id."' and resource_id='".$UID."'";

    223. 

  223. 		#$sql ="select * from s3db_statement where rule_id=".$rule_id." and resource_id=".$UID."";

    224. 

  224. 		$db->query($sql, __LINE__, __FILE__);

    225. 

  225. 		while($db->next_record())

    226. 

  226. 		{

    227. 

  227. 			$statement = Array('statement_id'=>$db->f('statement_id'),

    228. 

  228. 					 'project_id'=>$db->f('project_id'),

    229. 

  229. 					'resource_id'=>$db->f('resource_id'),

    230. 

  230. 					'rule_id'=>$db->f('rule_id'),

    231. 

  231. 					'value'=>$db->f('value'),

    232. 

  232. 					'notes'=>$db->f('notes'),

    233. 

  233. 					'created_on'=>$db->f('created_on'),

    234. 

  234. 					'created_by'=>$db->f('created_by'),	

    235. 

  235. 					'modified_on'=>$db->f('modified_on'),

    236. 

  236. 					'modified_by'=>$db->f('modified_by'),

    237. 

  237. 					'mime_type'=>$db->f('mime_type'),

    238. 

  238. 					'file_name'=>$db->f('file_name'));

    239. 

  239. 					}

    240. 

  240. 		return $statement;

    241. 

  241. 	}

    242. 

  242. 

    243. 

  243. function find_object_info($object, $project_id)

    244. 

  244. 

    245. 

  245. {

    246. 

  246. 		$shared_rules = list_shared_rules ($project_id, '', $object);

    247. 

  247. 		

    248. 

  248. 		#echo '<pre>'.$object;print_r($shared_rules);

    249. 

  249. 		#When looking at the shared rules, find which one hve UID as object, those are the ones that are reosurces

    250. 

  250. 		

    251. 

  251. 		if ($object == $shared_rules[0]['subject'])

    252. 

  252. 			return $shared_rules[0];

    253. 

  253. 

    254. 

  254. }

    255. 

  255. function get_user_short_info($id)

    256. 

  256. 	{

    257. 

  257. 		$db= $_SESSION['db'];

    258. 

  258. 		$sql ="select * from s3db_account where account_id='".$id."'";

    259. 

  259. 		$db->query($sql, __LINE__, __FILE__);

    260. 

  260. 		if($db->next_record())

    261. 

  261. 		{

    262. 

  262. 			$user = Array('account_id'=>$db->f('account_id'),

    263. 

  263. 					'account_lid'=>$db->f('account_lid'),

    264. 

  264. 					'account_uname'=>$db->f('account_uname'),

    265. 

  265. 					'account_group'=>$db->f('account_group'));

    266. 

  266. 		}

    267. 

  267. 		return $user;

    268. 

  268. 	}

    269. 

  269. 

    270. 

  270. function find_login_id($account_id, $db)

    271. 

  271. {

    272. 

  272. 	$sql = "select account_lid from s3db_account where s3db_account.account_id='".$account_id."'";

    273. 

  273. 

    274. 

  274. 	if($db->next_record())

    275. 

  275. 			{

    276. 

  276. 				$login_id = $db->f('account_lid');

    277. 

  277. 			}

    278. 

  278. 	return $login_id;

    279. 

  279. }

    280. 

  280. 

    281. 

  281. function get_user_info($account_id)

    282. 

  282. 	{

    283. 

  283. 		

    284. 

  284. 		$db = $_SESSION['db'];

    285. 

  285. 		

    286. 

  286. 		$sql = "select * from s3db_account where s3db_account.account_id='".$account_id."'";

    287. 

  287. 		

    288. 

  288. 		$db->query($sql, __LINE__, __FILE__);

    289. 

  289. 		

    290. 

  290. 		//$user = '';	

    291. 

  291. 	    if($db->next_record())

    292. 

  292. 		{

    293. 

  293. 			$account = Array('account_id'=>$db->f('account_id'),

    294. 

  294. 				      'account_lid'=>$db->f('account_lid'),	

    295. 

  295. 				      'account_pwd'=>$db->f('account_pwd'),	

    296. 

  296. 				      'account_uname'=>$db->f('account_uname'),

    297. 

  297. 					  'account_group'=>$db->f('account_group'),	

    298. 

  298. 				      'account_email'=>$db->f('account_email'),	

    299. 

  299. 				      'account_phone'=>$db->f('account_phone'),	

    300. 

  300. 				      'account_type'=>$db->f('account_type'),	

    301. 

  301. 				      'account_addr_id'=>$db->f('account_addr_id'),	

    302. 

  302. 				      'account_status'=>$db->f('account_status'));

    303. 

  303. 			

    304. 

  304. 			

    305. 

  305. 			if($account['account_addr_id'] > 0)

    306. 

  306. 			{	

    307. 

  307. 				$sql = "select * from s3db_addr where addr_id='".$account['account_addr_id']."'";

    308. 

  308. 				$db->query($sql, __LINE__, __FILE__);

    309. 

  309. 				if($db->next_record())

    310. 

  310. 				{

    311. 

  311. 					$addr = Array ('addr1'=>$db->f('addr1'),	

    312. 

  312. 				      			'addr2'=>$db->f('addr2'),	

    313. 

  313. 				      			'city'=>$db->f('city'),	

    314. 

  314. 				      			'state'=>$db->f('state'),	

    315. 

  315. 				     			'postal_code'=>$db->f('postal_code'),	

    316. 

  316. 				      			'country'=>$db->f('country'));

    317. 

  317. 				}

    318. 

  318. 			}

    319. 

  319. 			if(!is_array($addr))

    320. 

  320. 			{

    321. 

  321. 				$addr = Array('addr1'=>'', 

    322. 

  322. 					      'addr2'=>'',	

    323. 

  323. 					      'city'=>'',	

    324. 

  324. 					      'state'=>'',	

    325. 

  325. 					      'postal_code'=>'',	

    326. 

  326. 					      'country'=>'');	

    327. 

  327. 			}

    328. 

  328. 		

    329. 

  329. 		} 

    330. 

  330. 		

    331. 

  331. 		$user = array_merge($account, $addr);

    332. 

  332. 		

    333. 

  333. 		//print_r($user);

    334. 

  334. 		return $user;	 

    335. 

  335. 	}

    336. 

  336. 	

    337. 

  337. 

    338. 

  338. 	function get_project_info($project_id)

    339. 

  339. 	{

    340. 

  340. 		$db = $_SESSION['db'];

    341. 

  341. 		$sql = "select * from s3db_project where project_id='".$project_id."'";

    342. 

  342. 		$db->query($sql, __LINE__, __FILE__);

    343. 

  343. 		if($db->next_record())

    344. 

  344. 		{

    345. 

  345. 			$project_info=Array('project_id'=>$db->f('project_id'),

    346. 

  346. 					   'project_name'=>$db->f('project_name'),

    347. 

  347. 					   'project_owner'=>$db->f('project_owner'),

    348. 

  348. 					   'project_description'=>$db->f('project_description'),

    349. 

  349. 					   'project_status'=>$db->f('project_status'),

    350. 

  350. 					   'created_on'=>$db->f('created_on'),

    351. 

  351. 					   'created_by'=>$db->f('created_by'),

    352. 

  352. 					   'modified_on'=>$db->f('modified_on'),

    353. 

  353. 					   'modified_by'=>$db->f('modified_by'));

    354. 

  354. 

    355. 

  355. 		} 

    356. 

  356. 		return $project_info;

    357. 

  357. 	}

    358. 

  358. 	

    359. 

  359. 

    360. 

  360. 	

    361. 

  361. 	function get_project_resources($project_id)

    362. 

  362.         {

    363. 

  363.                 $db = $_SESSION['db'];

    364. 

  364.              

    365. 

  365. 				if ($GLOBALS['s3db_info']['server']['db']['db_type']=='mysql')

    366. 

  366. 				$sql = "select distinct entity, resource_id from s3db_resource where iid='0' and project_id='".$project_id."' order by entity";

    367. 

  367. 				else

    368. 

  368. 				$sql = "select distinct on (entity) entity, resource_id from s3db_resource where iid='0' and project_id='".$project_id."' order by entity";

    369. 

  369.                

    370. 

  370. 				$db->query($sql, __LINE__, __FILE__);

    371. 

  371. 				 while($db->next_record())

    372. 

  372.                 {

    373. 

  373.                         $resources[] = Array('resource_id'=>$db->f('resource_id'),

    374. 

  374. 						'entity'=>$db->f('entity'));

    375. 

  375. 

    376. 

  376.                 }

    377. 

  377. 				

    378. 

  378. 				

    379. 

  379. 				

    380. 

  380. 		

    381. 

  381. 

    382. 

  382. 				//echo $sql;

    383. 

  383.                 

    384. 

  384.                

    385. 

  385.                 //print_r($resources);

    386. 

  386.                 return $resources;

    387. 

  387.         }

    388. 

  388. 

    389. 

  389. 	function get_project_rules($P)

    390. 

  390. 	{

    391. 

  391. 		extract ($P);

    392. 

  392. 		

    393. 

  393. 		if ($GLOBALS['s3db_info']['server']['db']['db_type'] == 'mysql')

    394. 

  394. 		$regexp = "regexp '(".$project_id."$|".$project_id."_)'";

    395. 

  395. 		else

    396. 

  396. 		$regexp = "~~ '%".$project_id."\\\_%'";

    397. 

  397. 		

    398. 

  398. 		#$db = $_SESSION['db'];

    399. 

  399. 		

    400. 

  400. 		

    401. 

  401. 		//$sql = "select * from s3db_rule where object !='UID' and rule_id in (select distinct rule_id from s3db_statement) order by rule_id";

    402. 

  402. 		//$sql = "select * from s3db_rule where rule_id in (select distinct rule_id from s3db_statement) order by rule_id";

    403. 

  403. 		$sql = "select * from s3db_rule where permission ".$regexp."";

    404. 

  404. 		//echo $sql;

    405. 

  405. 		$db->query($sql, __LINE__, __FILE__);

    406. 

  406. 		while($db->next_record())

    407. 

  407. 		{

    408. 

  408. 			$rules[] = Array('rule_id'=>$db->f('rule_id'),

    409. 

  409. 					//'owner'=>$db->f('owner'),

    410. 

  410. 					'resource_id'=>$db->f('resource_id'),

    411. 

  411. 					'subject'=>$db->f('subject'),

    412. 

  412. 					'verb'=>$db->f('verb'),

    413. 

  413. 					'object'=>$db->f('object'),

    414. 

  414. 					'notes'=>$db->f('notes'),

    415. 

  415. 					'created_on'=>$db->f('created_on'),

    416. 

  416. 					'created_by'=>$db->f('created_by'),

    417. 

  417. 					'modified_on'=>$db->f('modified_on'),

    418. 

  418. 					'modified_by'=>$db->f('modified_by'));

    419. 

  419. 		}

    420. 

  420. 		//echo count($rules);		

    421. 

  421. 		return $rules;		

    422. 

  422. 	}	

    423. 

  423. 	

    424. 

  424. function find_involved_projects()

    425. 

  425. 	{

    426. 

  426. 		$db = $_SESSION['db'];

    427. 

  427. 		$sql = "select acl_project_id, acl_rights from s3db_project_acl where acl_account='".$_SESSION['user']['account_id']."' and acl_rights !=0";

    428. 

  428. 		//echo $sql;

    429. 

  429. 		$db->query($sql, __LINE__, __FILE__);

    430. 

  430. 		while($db->next_record())

    431. 

  431. 		{

    432. 

  432. 			$involved_projects[] = Array('project_id'=>$db->f('acl_project_id'),

    433. 

  433. 						   'rights'=>$db->f('acl_rights'));

    434. 

  434. 		}

    435. 

  435. 		return $involved_projects;

    436. 

  436. 	}

    437. 

  437. 			

    438. 

  438. 	

    439. 

  439. ?>
    440.