mirror of
https://github.com/Cacti/cacti.git
synced 2026-11-09 05:26:50 +09:00
Ian Berry
587cd4872a
update fix from r3571 so it matches the official patch on the website git-svn-id: svn+ssh://repo.cacti.net/var/data/svnroot/cacti/branches/BRANCH_0_8_6/cacti@3603 860744bd-22fc-0310-8c96-e9fe5004b5ca
177 lines
7.6 KiB
PHP
177 lines
7.6 KiB
PHP
<?php
|
|
/*
|
|
+-------------------------------------------------------------------------+
|
|
| Copyright (C) 2004 Ian Berry |
|
|
| |
|
|
| This program is free software; you can redistribute it and/or |
|
|
| modify it under the terms of the GNU General Public License |
|
|
| as published by the Free Software Foundation; either version 2 |
|
|
| of the License, or (at your option) any later version. |
|
|
| |
|
|
| This program is distributed in the hope that it will be useful, |
|
|
| but WITHOUT ANY WARRANTY; without even the implied warranty of |
|
|
| MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
|
|
| GNU General Public License for more details. |
|
|
+-------------------------------------------------------------------------+
|
|
| cacti: a php-based graphing solution |
|
|
+-------------------------------------------------------------------------+
|
|
| Most of this code has been designed, written and is maintained by |
|
|
| Ian Berry. See about.php for specific developer credit. Any questions |
|
|
| or comments regarding this code should be directed to: |
|
|
| - iberry@raxnet.net |
|
|
+-------------------------------------------------------------------------+
|
|
| - raXnet - http://www.raxnet.net/ |
|
|
+-------------------------------------------------------------------------+
|
|
*/
|
|
|
|
/* user_copy - copies a user account
|
|
@arg $template_user - username of account that should be used as the template
|
|
@arg $new_user - username of the account to be created
|
|
@arg $new_realm - the realm the new account should be a member of */
|
|
function user_copy($template_user, $new_user, $new_realm=0) {
|
|
$user_auth = db_fetch_row("select * from user_auth where username = '$template_user'");
|
|
$user_auth['username'] = $new_user;
|
|
$user_auth['realm'] = $new_realm;
|
|
$old_id = $user_auth['id'];
|
|
$user_auth['id'] = 0;
|
|
|
|
$new_id = sql_save($user_auth, 'user_auth');
|
|
|
|
$user_auth_perms = db_fetch_assoc("select * from user_auth_perms where user_id = '$old_id'");
|
|
foreach ($user_auth_perms as $row) {
|
|
$row['user_id'] = $new_id;
|
|
sql_save($row, 'user_auth_perms', array('user_id', 'item_id', 'type'), false);
|
|
}
|
|
|
|
$user_auth_realm = db_fetch_assoc("select * from user_auth_realm where user_id = '$old_id'");
|
|
foreach ($user_auth_realm as $row) {
|
|
$row['user_id'] = $new_id;
|
|
sql_save($row, 'user_auth_realm', array('realm_id', 'user_id'), false);
|
|
}
|
|
|
|
$settings_graphs = db_fetch_assoc("select * from settings_graphs where user_id = '$old_id'");
|
|
foreach ($settings_graphs as $row) {
|
|
$row['user_id'] = $new_id;
|
|
sql_save($row, 'settings_graphs', array('user_id', 'name'), false);
|
|
}
|
|
|
|
$settings_tree = db_fetch_assoc("select * from settings_tree where user_id = '$old_id'");
|
|
foreach ($settings_tree as $row) {
|
|
$row['user_id'] = $new_id;
|
|
sql_save($row, 'settings_tree', array('user_id', 'graph_tree_item_id'), false);
|
|
}
|
|
}
|
|
|
|
/* get_graph_permissions_sql - creates SQL that reprents the current graph, host and graph
|
|
template policies
|
|
@arg $policy_graphs - (int) the current graph policy
|
|
@arg $policy_hosts - (int) the current host policy
|
|
@arg $policy_graph_templates - (int) the current graph template policy
|
|
@returns - an SQL "where" statement */
|
|
function get_graph_permissions_sql($policy_graphs, $policy_hosts, $policy_graph_templates) {
|
|
$sql = "";
|
|
$sql_or = "";
|
|
$sql_and = "";
|
|
$sql_policy_or = "";
|
|
$sql_policy_and = "";
|
|
|
|
if ($policy_graphs == "1") {
|
|
$sql_policy_and .= "$sql_and(user_auth_perms.type != 1 OR user_auth_perms.type is null)";
|
|
$sql_and = " AND ";
|
|
$sql_null = "is null";
|
|
}elseif ($policy_graphs == "2") {
|
|
$sql_policy_or .= "$sql_or(user_auth_perms.type = 1 OR user_auth_perms.type is not null)";
|
|
$sql_or = " OR ";
|
|
$sql_null = "is not null";
|
|
}
|
|
|
|
if ($policy_hosts == "1") {
|
|
$sql_policy_and .= "$sql_and((user_auth_perms.type != 3) OR (user_auth_perms.type is null))";
|
|
$sql_and = " AND ";
|
|
}elseif ($policy_hosts == "2") {
|
|
$sql_policy_or .= "$sql_or((user_auth_perms.type = 3) OR (user_auth_perms.type is not null))";
|
|
$sql_or = " OR ";
|
|
}
|
|
|
|
if ($policy_graph_templates == "1") {
|
|
$sql_policy_and .= "$sql_and((user_auth_perms.type != 4) OR (user_auth_perms.type is null))";
|
|
$sql_and = " AND ";
|
|
}elseif ($policy_graph_templates == "2") {
|
|
$sql_policy_or .= "$sql_or((user_auth_perms.type = 4) OR (user_auth_perms.type is not null))";
|
|
$sql_or = " OR ";
|
|
}
|
|
|
|
$sql_and = "";
|
|
|
|
if (!empty($sql_policy_or)) {
|
|
$sql_and = "AND ";
|
|
$sql .= $sql_policy_or;
|
|
}
|
|
|
|
if (!empty($sql_policy_and)) {
|
|
$sql .= "$sql_and$sql_policy_and";
|
|
}
|
|
|
|
if (empty($sql)) {
|
|
return "";
|
|
}else{
|
|
return "(" . $sql . ")";
|
|
}
|
|
}
|
|
|
|
/* is_graph_allowed - determines whether the current user is allowed to view a certain graph
|
|
@arg $local_graph_id - (int) the ID of the graph to check permissions for
|
|
@returns - (bool) whether the current user is allowed the view the specified graph or not */
|
|
function is_graph_allowed($local_graph_id) {
|
|
$current_user = db_fetch_row("select policy_graphs,policy_hosts,policy_graph_templates from user_auth where id=" . $_SESSION["sess_user_id"]);
|
|
|
|
/* get policy information for the sql where clause */
|
|
$sql_where = get_graph_permissions_sql($current_user["policy_graphs"], $current_user["policy_hosts"], $current_user["policy_graph_templates"]);
|
|
|
|
$graphs = db_fetch_assoc("select
|
|
graph_templates_graph.local_graph_id
|
|
from (graph_templates_graph,graph_local)
|
|
left join host on (host.id=graph_local.host_id)
|
|
left join graph_templates on (graph_templates.id=graph_local.graph_template_id)
|
|
left join user_auth_perms on ((graph_templates_graph.local_graph_id=user_auth_perms.item_id and user_auth_perms.type=1 and user_auth_perms.user_id=" . $_SESSION["sess_user_id"] . ") OR (host.id=user_auth_perms.item_id and user_auth_perms.type=3 and user_auth_perms.user_id=" . $_SESSION["sess_user_id"] . ") OR (graph_templates.id=user_auth_perms.item_id and user_auth_perms.type=4 and user_auth_perms.user_id=" . $_SESSION["sess_user_id"] . "))
|
|
where graph_templates_graph.local_graph_id=graph_local.id
|
|
" . (empty($sql_where) ? "" : "and $sql_where") . "
|
|
and graph_templates_graph.local_graph_id=$local_graph_id
|
|
group by graph_templates_graph.local_graph_id");
|
|
|
|
if (sizeof($graphs) > 0) {
|
|
return true;
|
|
}else{
|
|
return false;
|
|
}
|
|
}
|
|
|
|
/* is_tree_allowed - determines whether the current user is allowed to view a certain graph tree
|
|
@arg $tree_id - (int) the ID of the graph tree to check permissions for
|
|
@returns - (bool) whether the current user is allowed the view the specified graph tree or not */
|
|
function is_tree_allowed($tree_id) {
|
|
$current_user = db_fetch_row("select policy_trees from user_auth where id=" . $_SESSION["sess_user_id"]);
|
|
|
|
$trees = db_fetch_assoc("select
|
|
user_id
|
|
from user_auth_perms
|
|
where user_id=" . $_SESSION["sess_user_id"] . "
|
|
and type=2
|
|
and item_id=$tree_id");
|
|
|
|
/* policy == allow AND matches = DENY */
|
|
if ((sizeof($trees) > 0) && ($current_user["policy_trees"] == "1")) {
|
|
return false;
|
|
/* policy == deny AND matches = ALLOW */
|
|
}elseif ((sizeof($trees) > 0) && ($current_user["policy_trees"] == "2")) {
|
|
return true;
|
|
/* policy == allow AND no matches = ALLOW */
|
|
}elseif ((sizeof($trees) == 0) && ($current_user["policy_trees"] == "1")) {
|
|
return true;
|
|
/* policy == deny AND no matches = DENY */
|
|
}elseif ((sizeof($trees) == 0) && ($current_user["policy_trees"] == "2")) {
|
|
return false;
|
|
}
|
|
}
|
|
|
|
?>
|