490 lines
19 KiB
Perl
490 lines
19 KiB
Perl
package WebGUI::Operation::User;
|
|
|
|
#-------------------------------------------------------------------
|
|
# WebGUI is Copyright 2001-2005 Plain Black Corporation.
|
|
#-------------------------------------------------------------------
|
|
# Please read the legal notices (docs/legal.txt) and the license
|
|
# (docs/license.txt) that came with this distribution before using
|
|
# this software.
|
|
#-------------------------------------------------------------------
|
|
# http://www.plainblack.com info@plainblack.com
|
|
#-------------------------------------------------------------------
|
|
|
|
use strict qw(vars subs);
|
|
use Tie::CPHash;
|
|
use Tie::IxHash;
|
|
use WebGUI::AdminConsole;
|
|
use WebGUI::DateTime;
|
|
use WebGUI::FormProcessor;
|
|
use WebGUI::Group;
|
|
use WebGUI::Grouping;
|
|
use WebGUI::HTMLForm;
|
|
use WebGUI::Icon;
|
|
use WebGUI::International;
|
|
use WebGUI::Operation::Auth;
|
|
use WebGUI::Paginator;
|
|
use WebGUI::Privilege;
|
|
use WebGUI::Session;
|
|
use WebGUI::SQL;
|
|
use WebGUI::Style;
|
|
use WebGUI::TabForm;
|
|
use WebGUI::URL;
|
|
use WebGUI::User;
|
|
use WebGUI::Utility;
|
|
|
|
|
|
#-------------------------------------------------------------------
|
|
sub _submenu {
|
|
my $workarea = shift;
|
|
my $title = shift;
|
|
$title = WebGUI::International::get($title) if ($title);
|
|
my $help = shift;
|
|
my $ac = WebGUI::AdminConsole->new("users");
|
|
if ($help) {
|
|
$ac->setHelp($help);
|
|
}
|
|
if (WebGUI::Grouping::isInGroup(11)) {
|
|
$ac->addSubmenuItem(WebGUI::URL::page("op=editUser&uid=new"), WebGUI::International::get(169));
|
|
}
|
|
if (WebGUI::Grouping::isInGroup(3)) {
|
|
unless ($session{form}{op} eq "listUsers"
|
|
|| $session{form}{op} eq "deleteUserConfirm") {
|
|
$ac->addSubmenuItem(WebGUI::URL::page("op=editUser&uid=".$session{form}{uid}), WebGUI::International::get(457));
|
|
$ac->addSubmenuItem(WebGUI::URL::page('op=becomeUser&uid='.$session{form}{uid}), WebGUI::International::get(751));
|
|
$ac->addSubmenuItem(WebGUI::URL::page('op=deleteUser&uid='.$session{form}{uid}), WebGUI::International::get(750));
|
|
if ($session{setting}{useKarma}) {
|
|
$ac->addSubmenuItem(WebGUI::URL::page("op=editUserKarma&uid=".$session{form}{uid}), WebGUI::International::get(555));
|
|
}
|
|
}
|
|
$ac->addSubmenuItem(WebGUI::URL::page("op=listUsers"), WebGUI::International::get(456));
|
|
}
|
|
return $ac->render($workarea, $title);
|
|
}
|
|
|
|
|
|
#-------------------------------------------------------------------
|
|
sub doUserSearch {
|
|
my $op = shift;
|
|
my $returnPaginator = shift;
|
|
my $userFilter = shift;
|
|
push(@{$userFilter},0);
|
|
my $selectedStatus;
|
|
if ($session{scratch}{userSearchStatus}) {
|
|
$selectedStatus = "status='".$session{scratch}{userSearchStatus}."'";
|
|
} else {
|
|
$selectedStatus = "status like '%'";
|
|
}
|
|
my $keyword = $session{scratch}{userSearchKeyword};
|
|
if ($session{scratch}{userSearchModifier} eq "startsWith") {
|
|
$keyword .= "%";
|
|
} elsif ($session{scratch}{userSearchModifier} eq "contains") {
|
|
$keyword = "%".$keyword."%";
|
|
} else {
|
|
$keyword = "%".$keyword;
|
|
}
|
|
$keyword = quote($keyword);
|
|
my $sql = "select users.userId, users.username, users.status, users.dateCreated, users.lastUpdated,
|
|
email.fieldData as email from users left join userProfileData email on users.userId=email.userId and email.fieldName='email'
|
|
where $selectedStatus and (users.username like ".$keyword." or email.fieldData like ".$keyword.")
|
|
and users.userId not in (".quoteAndJoin($userFilter).") order by users.username";
|
|
if ($returnPaginator) {
|
|
my $p = WebGUI::Paginator->new(WebGUI::URL::page("op=".$op));
|
|
$p->setDataByQuery($sql);
|
|
return $p;
|
|
} else {
|
|
my $sth = WebGUI::SQL->read($sql);
|
|
return $sth;
|
|
}
|
|
}
|
|
|
|
|
|
#-------------------------------------------------------------------
|
|
sub getUserSearchForm {
|
|
my $op = shift;
|
|
my $params = shift;
|
|
WebGUI::Session::setScratch("userSearchKeyword",$session{form}{keyword});
|
|
WebGUI::Session::setScratch("userSearchStatus",$session{form}{status});
|
|
WebGUI::Session::setScratch("userSearchModifier",$session{form}{modifier});
|
|
my $output = '<div align="center">';
|
|
my $f = WebGUI::HTMLForm->new(1);
|
|
$f->hidden("op",$op);
|
|
foreach my $key (keys %{$params}) {
|
|
$f->hidden(
|
|
-name=>$key,
|
|
-value=>$params->{$key}
|
|
);
|
|
}
|
|
$f->hidden(
|
|
-name=>"doit",
|
|
-value=>1
|
|
);
|
|
$f->selectList(
|
|
-name=>"modifier",
|
|
-value=>([$session{scratch}{userSearchModifier} || "contains"]),
|
|
-label=>"",
|
|
-options=>{
|
|
startsWith=>WebGUI::International::get("starts with"),
|
|
contains=>WebGUI::International::get("contains"),
|
|
endsWith=>WebGUI::International::get("ends with")
|
|
}
|
|
);
|
|
$f->text(
|
|
-name=>"keyword",
|
|
-label=>"",
|
|
-value=>$session{scratch}{userSearchKeyword},
|
|
-size=>15
|
|
);
|
|
$f->selectList(
|
|
-name => "status",
|
|
-label=>"",
|
|
-value => [$session{scratch}{userSearchStatus} || "users.status like '%'"],
|
|
-options=> {
|
|
"" => WebGUI::International::get(821),
|
|
Active => WebGUI::International::get(817),
|
|
Deactivated => WebGUI::International::get(818),
|
|
Selfdestructed => WebGUI::International::get(819)
|
|
}
|
|
);
|
|
$f->submit(value=>WebGUI::International::get(170));
|
|
$output .= $f->print;
|
|
$output .= '</div>';
|
|
return $output;
|
|
}
|
|
|
|
|
|
#-------------------------------------------------------------------
|
|
sub www_becomeUser {
|
|
return WebGUI::Privilege::adminOnly() unless (WebGUI::Grouping::isInGroup(3));
|
|
WebGUI::Session::end($session{var}{sessionId});
|
|
WebGUI::Session::start($session{form}{uid});
|
|
return "";
|
|
}
|
|
|
|
#-------------------------------------------------------------------
|
|
sub www_deleteGrouping {
|
|
return WebGUI::Privilege::adminOnly() unless (WebGUI::Grouping::isInGroup(3));
|
|
if (($session{user}{userId} eq $session{form}{uid} || $session{form}{uid} eq '3') && $session{form}{gid} eq '3') {
|
|
return _submenu(WebGUI::Privilege::vitalComponent());
|
|
}
|
|
my @users = $session{cgi}->param('uid');
|
|
my @groups = $session{cgi}->param("gid");
|
|
foreach my $user (@users) {
|
|
my $u = WebGUI::User->new($user);
|
|
$u->deleteFromGroups(\@groups);
|
|
}
|
|
if ($session{form}{return} eq "manageUsersInGroup") {
|
|
return WebGUI::Operation::Group::www_manageUsersInGroup();
|
|
}
|
|
return www_editUserGroup();
|
|
}
|
|
|
|
#-------------------------------------------------------------------
|
|
sub www_deleteUser {
|
|
my ($output);
|
|
return WebGUI::Privilege::adminOnly() unless (WebGUI::Grouping::isInGroup(3));
|
|
if ($session{form}{uid} eq '1' || $session{form}{uid} eq '3') {
|
|
return _submenu(WebGUI::Privilege::vitalComponent());
|
|
} else {
|
|
$output .= WebGUI::International::get(167).'<p>';
|
|
$output .= '<div align="center"><a href="'.WebGUI::URL::page('op=deleteUserConfirm&uid='.$session{form}{uid}).
|
|
'">'.WebGUI::International::get(44).'</a>';
|
|
$output .= ' <a href="'.WebGUI::URL::page('op=listUsers').'">'.
|
|
WebGUI::International::get(45).'</a></div>';
|
|
return _submenu($output,'42',"user delete");
|
|
}
|
|
}
|
|
|
|
#-------------------------------------------------------------------
|
|
sub www_deleteUserConfirm {
|
|
return WebGUI::Privilege::adminOnly() unless (WebGUI::Grouping::isInGroup(3));
|
|
my ($u);
|
|
if ($session{form}{uid} eq '1' || $session{form}{uid} eq '') {
|
|
return WebGUI::AdminConsole->new("users")->render(WebGUI::Privilege::vitalComponent());
|
|
} else {
|
|
$u = WebGUI::User->new($session{form}{uid});
|
|
$u->delete;
|
|
return www_listUsers();
|
|
}
|
|
}
|
|
|
|
#-------------------------------------------------------------------
|
|
sub www_editUser {
|
|
return WebGUI::Privilege::adminOnly() unless (WebGUI::Grouping::isInGroup(11));
|
|
my $error = shift;
|
|
my $i18n = WebGUI::International->new("WebGUI");
|
|
my %tabs;
|
|
tie %tabs, 'Tie::IxHash';
|
|
%tabs = (
|
|
"account"=> { label=>$i18n->get("account")},
|
|
"profile"=> { label=>$i18n->get("profile")},
|
|
"groups"=> { label=>$i18n->get('89')},
|
|
);
|
|
my $tabform = WebGUI::TabForm->new(\%tabs);
|
|
$tabform->formHeader({extras=>'autocomplete="off"'});
|
|
my $u = WebGUI::User->new(($session{form}{uid} eq 'new') ? '' : $session{form}{uid});
|
|
WebGUI::Style::setScript($session{config}{extrasURL}."/swapLayers.js", {language=>"JavaScript"});
|
|
$tabform->getTab("account")->raw('<script language="JavaScript" > var active="'.$u->authMethod.'"; </script>');
|
|
$tabform->hidden({name=>"op",value=>"editUserSave"});
|
|
$tabform->hidden({name=>"uid",value=>$session{form}{uid}});
|
|
$tabform->getTab("account")->raw('<tr><td width="170"> </td><td> </td></tr>');
|
|
$tabform->getTab("account")->readOnly($session{form}{uid},$i18n->get(378));
|
|
$tabform->getTab("account")->readOnly($u->karma,$i18n->get(537)) if ($session{setting}{useKarma});
|
|
$tabform->getTab("account")->readOnly(epochToHuman($u->dateCreated,"%z"),$i18n->get(453));
|
|
$tabform->getTab("account")->readOnly(epochToHuman($u->lastUpdated,"%z"),$i18n->get(454));
|
|
$tabform->getTab("account")->text(
|
|
-name=>"username",
|
|
-label=>$i18n->get(50),
|
|
-value=>$session{form}{username}|| $u->username
|
|
);
|
|
my %status;
|
|
tie %status, 'Tie::IxHash';
|
|
%status = (
|
|
Active =>$i18n->get(817),
|
|
Deactivated =>$i18n->get(818),
|
|
Selfdestructed =>$i18n->get(819)
|
|
);
|
|
if ($u->userId eq $session{user}{userId}) {
|
|
$tabform->getTab("account")->hidden("status",$u->status);
|
|
} else {
|
|
$tabform->getTab("account")->selectList("status",\%status,$i18n->get(816),[$u->status]);
|
|
}
|
|
my $options;
|
|
foreach (@{$session{config}{authMethods}}) {
|
|
$options->{$_} = $_;
|
|
}
|
|
$tabform->getTab("account")->selectList(
|
|
-name=>"authMethod",
|
|
-options=>$options,
|
|
-label=>$i18n->get(164),
|
|
-value=>[$u->authMethod],
|
|
-extras=>"onChange=\"active=operateHidden(this.options[this.selectedIndex].value,active)\""
|
|
);
|
|
my $jscript = '<script language="JavaScript">';
|
|
foreach (@{$session{config}{authMethods}}) {
|
|
my $authInstance = WebGUI::Operation::Auth::getInstance($_,$u->userId);
|
|
$tabform->getTab("account")->raw('<tr id="'.$_.'"><td colspan="2" align="center"><table>'.$authInstance->editUserForm.'<tr><td width="170"> </td><td> </td></tr></table></td></tr>');
|
|
$jscript .= "document.getElementById(\"$_\").style.display='".(($_ eq $u->authMethod)?"":"none")."';";
|
|
}
|
|
$jscript .= "</script>";
|
|
$tabform->getTab("account")->raw($jscript);
|
|
my $a = WebGUI::SQL->read("select * from userProfileField,userProfileCategory
|
|
where userProfileField.profileCategoryId=userProfileCategory.profileCategoryId
|
|
order by userProfileCategory.sequenceNumber,userProfileField.sequenceNumber");
|
|
my $previousCategory;
|
|
while(my %data = $a->hash) {
|
|
my $category = eval $data{categoryName};
|
|
if ($category ne $previousCategory) {
|
|
$tabform->getTab("profile")->raw('<tr><td colspan="2" class="tableHeader">'.$category.'</td></tr>');
|
|
}
|
|
my $values = eval $data{dataValues};
|
|
my $method = $data{dataType};
|
|
my $label = eval $data{fieldLabel};
|
|
my $default;
|
|
if ($method eq "selectList" || $method eq "checkList" || $method eq "radioList") {
|
|
my $orderedValues = {};
|
|
tie %{$orderedValues}, 'Tie::IxHash';
|
|
foreach my $ov (sort keys %{$values}) {
|
|
$orderedValues->{$ov} = $values->{$ov};
|
|
}
|
|
if ($session{form}{$data{fieldName}}) {
|
|
$default = [$session{form}{$data{fieldName}}];
|
|
} elsif (defined $u->profileField($data{fieldName}) && (defined($values->{$u->profileField($data{fieldName})}))) {
|
|
$default = [$u->profileField($data{fieldName})];
|
|
} else {
|
|
$default = eval $data{dataDefault};
|
|
}
|
|
$tabform->getTab("profile")->$method(
|
|
-name=>$data{fieldName},
|
|
-options=>$orderedValues,
|
|
-label=>$label,
|
|
-value=>$default
|
|
);
|
|
} elsif ($method) {
|
|
if ($session{form}{$data{fieldName}}) {
|
|
$default = $session{form}{$data{fieldName}};
|
|
} elsif (defined $u->profileField($data{fieldName})) {
|
|
$default = $u->profileField($data{fieldName});
|
|
} else {
|
|
$default = eval $data{dataDefault};
|
|
}
|
|
$tabform->getTab("profile")->$method(
|
|
-name=>$data{fieldName},
|
|
-label=>$label,
|
|
-value=>$default
|
|
);
|
|
}
|
|
$previousCategory = $category;
|
|
}
|
|
$a->finish;
|
|
my @groupsToAdd = $session{cgi}->param("groupsToAdd");
|
|
my @exclude = WebGUI::SQL->buildArray("select groupId from groupings where userId=".quote($u->userId));
|
|
@exclude = (@exclude,"1","2","7");
|
|
$tabform->getTab("groups")->group(
|
|
-name=>"groupsToAdd",
|
|
-label=>$i18n->get("groups to add"),
|
|
-excludeGroups=>\@exclude,
|
|
-size=>15,
|
|
-multiple=>1,
|
|
-value=>\@groupsToAdd
|
|
);
|
|
my @include;
|
|
foreach my $group (@exclude) {
|
|
unless (
|
|
$group eq "1" || $group eq "2" || $group eq "7" # can't remove user from magic groups
|
|
|| ($session{user}{userId} eq $u->userId && $group eq 3) # cannot remove self from admin
|
|
|| ($u->userId eq "3" && $group eq "3") # admin user cannot be remove from admin
|
|
) {
|
|
push(@include,$group);
|
|
}
|
|
}
|
|
push (@include, "0");
|
|
my @groupsToDelete = $session{cgi}->param("groupsToDelete");
|
|
$tabform->getTab("groups")->selectList(
|
|
-name=>"groupsToDelete",
|
|
-options=>WebGUI::SQL->buildHashRef("select groupId, groupName from groups
|
|
where groupId in (".quoteAndJoin(\@include).") and showInForms=1 order by groupName"),
|
|
-label=>$i18n->get("groups to delete"),
|
|
-multiple=>1,
|
|
-size=>15,
|
|
-value=>\@groupsToDelete
|
|
);
|
|
return _submenu($error.$tabform->print,'168',"user add/edit");
|
|
}
|
|
|
|
#-------------------------------------------------------------------
|
|
sub www_editUserSave {
|
|
my $isAdmin = WebGUI::Grouping::isInGroup(3);
|
|
my $isSecondary;
|
|
unless ($isAdmin) {
|
|
$isSecondary = (WebGUI::Grouping::isInGroup(11) && $session{form}{uid} eq "new");
|
|
}
|
|
return WebGUI::Privilege::adminOnly() unless ($isAdmin || $isSecondary);
|
|
my ($uid) = WebGUI::SQL->quickArray("select userId from users where username=".quote($session{form}{username}));
|
|
my $error;
|
|
if (($uid eq $session{form}{uid} || $uid eq "") && $session{form}{username} ne '') {
|
|
my $u = WebGUI::User->new($session{form}{uid});
|
|
$session{form}{uid} = $u->userId unless ($isSecondary);
|
|
$u->username($session{form}{username});
|
|
$u->authMethod($session{form}{authMethod});
|
|
$u->status($session{form}{status});
|
|
foreach (@{$session{config}{authMethods}}) {
|
|
my $authInstance = WebGUI::Operation::Auth::getInstance($_,$u->userId);
|
|
$authInstance->editUserFormSave;
|
|
}
|
|
my %field;
|
|
tie %field, 'Tie::CPHash';
|
|
my $a = WebGUI::SQL->read("select fieldName,dataType from userProfileField");
|
|
while (%field = $a->hash) {
|
|
$u->profileField($field{fieldName},WebGUI::FormProcessor::process($field{fieldName},$field{dataType}));
|
|
}
|
|
$a->finish;
|
|
my @groups = $session{cgi}->param("groupsToAdd");
|
|
$u->addToGroups(\@groups);
|
|
@groups = $session{cgi}->param("groupsToDelete");
|
|
$u->deleteFromGroups(\@groups);
|
|
} else {
|
|
$error = '<ul><li>'.WebGUI::International::get(77).' '.$session{form}{username}.'Too or '.$session{form}{username}.'02</ul>';
|
|
}
|
|
if ($isSecondary) {
|
|
return _submenu(WebGUI::International::get(978));
|
|
} else {
|
|
return www_editUser($error);
|
|
}
|
|
}
|
|
|
|
#-------------------------------------------------------------------
|
|
sub www_editUserKarma {
|
|
return WebGUI::Privilege::adminOnly() unless (WebGUI::Grouping::isInGroup(3));
|
|
my ($output, $f, $a, %user, %data, $method, $values, $category, $label, $default, $previousCategory);
|
|
$f = WebGUI::HTMLForm->new;
|
|
$f->hidden(
|
|
-name => "op",
|
|
-value => "editUserKarmaSave",
|
|
);
|
|
$f->hidden(
|
|
-name => "uid",
|
|
-value => $session{form}{uid},
|
|
);
|
|
$f->integer(
|
|
-name => "amount",
|
|
-label => WebGUI::International::get(556),
|
|
-hoverHelp => WebGUI::International::get('556 description'),
|
|
);
|
|
$f->text(
|
|
-name => "description",
|
|
-label => WebGUI::International::get(557),
|
|
-hoverHelp => WebGUI::International::get('557 description'),
|
|
);
|
|
$f->submit;
|
|
$output .= $f->print;
|
|
return _submenu($output,'558',"edit user karma");
|
|
}
|
|
|
|
#-------------------------------------------------------------------
|
|
sub www_editUserKarmaSave {
|
|
return WebGUI::Privilege::adminOnly() unless (WebGUI::Grouping::isInGroup(3));
|
|
my ($u);
|
|
$u = WebGUI::User->new($session{form}{uid});
|
|
$u->karma($session{form}{amount},$session{user}{username}." (".$session{user}{userId}.")",$session{form}{description});
|
|
return www_editUser();
|
|
}
|
|
|
|
#-------------------------------------------------------------------
|
|
sub www_listUsers {
|
|
unless (WebGUI::Grouping::isInGroup(3)) {
|
|
if (WebGUI::Grouping::isInGroup(11)) {
|
|
$session{form}{uid} = "new";
|
|
return www_editUser();
|
|
}
|
|
return WebGUI::Privilege::adminOnly();
|
|
}
|
|
my %status;
|
|
my $output = getUserSearchForm("listUsers");
|
|
my ($userCount) = WebGUI::SQL->quickArray("select count(*) from users");
|
|
return _submenu($output) unless ($session{form}{doit} || $userCount<250 || $session{form}{pn} > 1);
|
|
tie %status, 'Tie::IxHash';
|
|
%status = (
|
|
Active => WebGUI::International::get(817),
|
|
Deactivated => WebGUI::International::get(818),
|
|
Selfdestructed => WebGUI::International::get(819)
|
|
);
|
|
$output .= '<table border=1 cellpadding=5 cellspacing=0 align="center">';
|
|
$output .= '<tr>
|
|
<td class="tableHeader">'.WebGUI::International::get(816).'</td>
|
|
<td class="tableHeader">'.WebGUI::International::get(50).'</td>
|
|
<td class="tableHeader">'.WebGUI::International::get(56).'</td>
|
|
<td class="tableHeader">'.WebGUI::International::get(453).'</td>
|
|
<td class="tableHeader">'.WebGUI::International::get(454).'</td>
|
|
<td class="tableHeader">'.WebGUI::International::get(429).'</td>
|
|
<td class="tableHeader">'.WebGUI::International::get(434).'</td>
|
|
</tr>';
|
|
my $p = doUserSearch("listUsers",1);
|
|
foreach my $data (@{$p->getPageData}) {
|
|
$output .= '<tr class="tableData">';
|
|
$output .= '<td>'.$status{$data->{status}}.'</td>';
|
|
$output .= '<td><a href="'.WebGUI::URL::page('op=editUser&uid='.$data->{userId})
|
|
.'">'.$data->{username}.'</a></td>';
|
|
$output .= '<td class="tableData">'.$data->{email}.'</td>';
|
|
$output .= '<td class="tableData">'.epochToHuman($data->{dateCreated},"%z").'</td>';
|
|
$output .= '<td class="tableData">'.epochToHuman($data->{lastUpdated},"%z").'</td>';
|
|
my ($lastLoginStatus, $lastLogin) = WebGUI::SQL->quickArray("select status,timeStamp from userLoginLog where
|
|
userId=".quote($data->{userId})." order by timeStamp DESC");
|
|
if ($lastLogin) {
|
|
$output .= '<td class="tableData">'.epochToHuman($lastLogin).'</td>';
|
|
} else {
|
|
$output .= '<td class="tableData"> - </td>';
|
|
}
|
|
if ($lastLoginStatus) {
|
|
$output .= '<td class="tableData">'.$lastLoginStatus.'</td>';
|
|
} else {
|
|
$output .= '<td class="tableData"> - </td>';
|
|
}
|
|
$output .= '</tr>';
|
|
}
|
|
$output .= '</table>';
|
|
$output .= $p->getBarTraditional;
|
|
return _submenu($output,undef,"users manage");
|
|
}
|
|
|
|
1;
|
|
|