30 require_once DOL_DOCUMENT_ROOT.
'/core/class/commonobject.class.php';
31 if (!empty($conf->ldap->enabled)) {
32 require_once DOL_DOCUMENT_ROOT.
"/core/class/ldap.class.php";
44 public $element =
'usergroup';
49 public $table_element =
'usergroup';
55 public $ismultientitymanaged = 1;
60 public $picto =
'group';
100 public $members = array();
104 private $_tab_loaded = array();
108 public $fields = array(
109 'rowid'=>array(
'type'=>
'integer',
'label'=>
'TechnicalID',
'enabled'=>1,
'visible'=>-2,
'notnull'=>1,
'index'=>1,
'position'=>1,
'comment'=>
'Id'),
110 'entity' => array(
'type'=>
'integer',
'label'=>
'Entity',
'enabled'=>1,
'visible'=>0,
'notnull'=> 1,
'default'=>1,
'index'=>1,
'position'=>5),
111 'nom'=>array(
'type'=>
'varchar(180)',
'label'=>
'Name',
'enabled'=>1,
'visible'=>1,
'notnull'=>1,
'showoncombobox'=>1,
'index'=>1,
'position'=>10,
'searchall'=>1,
'comment'=>
'Group name'),
112 'note' => array(
'type'=>
'html',
'label'=>
'Description',
'enabled'=>1,
'visible'=>1,
'position'=>20,
'notnull'=>-1,),
113 'datec' => array(
'type'=>
'datetime',
'label'=>
'DateCreation',
'enabled'=>1,
'visible'=>-2,
'position'=>50,
'notnull'=>1,),
114 'tms' => array(
'type'=>
'timestamp',
'label'=>
'DateModification',
'enabled'=>1,
'visible'=>-2,
'position'=>60,
'notnull'=>1,),
115 'model_pdf' =>array(
'type'=>
'varchar(255)',
'label'=>
'ModelPDF',
'enabled'=>1,
'visible'=>0,
'position'=>100),
121 public $fk_element =
'fk_usergroup';
126 protected $childtables = array();
131 protected $childtablesoncascade = array(
'usergroup_rights',
'usergroup_user');
142 $this->nb_rights = 0;
154 public function fetch($id =
'', $groupname =
'', $load_members =
true)
158 dol_syslog(get_class($this).
"::fetch", LOG_DEBUG);
159 if (!empty($groupname)) {
160 $result = $this->
fetchCommon(0,
'',
' AND nom = \''.$this->
db->escape($groupname).
'\'');
165 $this->
name = $this->nom;
174 $this->error = $this->
db->lasterror();
193 $sql =
"SELECT g.rowid, ug.entity as usergroup_entity";
194 $sql .=
" FROM ".$this->db->prefix().
"usergroup as g,";
195 $sql .=
" ".$this->db->prefix().
"usergroup_user as ug";
196 $sql .=
" WHERE ug.fk_usergroup = g.rowid";
197 $sql .=
" AND ug.fk_user = ".((int) $userid);
198 if (
isModEnabled(
'multicompany') && $conf->entity == 1 && $user->admin && !$user->entity) {
199 $sql .=
" AND g.entity IS NOT NULL";
201 $sql .=
" AND g.entity IN (0,".$conf->entity.
")";
203 $sql .=
" ORDER BY g.nom";
205 dol_syslog(get_class($this).
"::listGroupsForUser", LOG_DEBUG);
206 $result = $this->
db->query($sql);
208 while ($obj = $this->
db->fetch_object($result)) {
209 if (!array_key_exists($obj->rowid, $ret)) {
211 $newgroup->fetch($obj->rowid,
'', $load_members);
212 $ret[$obj->rowid] = $newgroup;
215 $ret[$obj->rowid]->usergroup_entity[] = $obj->usergroup_entity;
218 $this->
db->free($result);
222 $this->error = $this->
db->lasterror();
240 $sql =
"SELECT u.rowid";
241 if (!empty($this->
id)) {
242 $sql .=
", ug.entity as usergroup_entity";
244 $sql .=
" FROM ".$this->db->prefix().
"user as u";
245 if (!empty($this->
id)) {
246 $sql .=
", ".$this->db->prefix().
"usergroup_user as ug";
248 $sql .=
" WHERE 1 = 1";
249 if (!empty($this->
id)) {
250 $sql .=
" AND ug.fk_user = u.rowid";
252 if (!empty($this->
id)) {
253 $sql .=
" AND ug.fk_usergroup = ".((int) $this->
id);
255 if (
isModEnabled(
'multicompany') && $conf->entity == 1 && $user->admin && !$user->entity) {
256 $sql .=
" AND u.entity IS NOT NULL";
258 $sql .=
" AND u.entity IN (0,".$conf->entity.
")";
260 if (!empty($excludefilter)) {
261 $sql .=
' AND ('.$excludefilter.
')';
264 dol_syslog(get_class($this).
"::listUsersForGroup", LOG_DEBUG);
267 while ($obj = $this->
db->fetch_object(
$resql)) {
268 if (!array_key_exists($obj->rowid, $ret)) {
270 $newuser =
new User($this->
db);
271 $newuser->fetch($obj->rowid);
272 $ret[$obj->rowid] = $newuser;
274 $ret[$obj->rowid] = $obj->rowid;
277 if ($mode != 1 && !empty($obj->usergroup_entity)) {
278 $ret[$obj->rowid]->usergroup_entity[] = $obj->usergroup_entity;
286 $this->error = $this->
db->lasterror();
300 public function addrights($rid, $allmodule =
'', $allperms =
'', $entity = 0)
302 global $conf, $user, $langs;
304 $entity = (!empty($entity) ? $entity : $conf->entity);
306 dol_syslog(get_class($this).
"::addrights $rid, $allmodule, $allperms, $entity");
313 $module = $perms = $subperms =
'';
317 $sql =
"SELECT module, perms, subperms";
318 $sql .=
" FROM ".$this->db->prefix().
"rights_def";
319 $sql .=
" WHERE id = ".((int) $rid);
320 $sql .=
" AND entity = ".((int) $entity);
322 $result = $this->
db->query($sql);
324 $obj = $this->
db->fetch_object($result);
326 $module = $obj->module;
327 $perms = $obj->perms;
328 $subperms = $obj->subperms;
336 $whereforadd =
"id=".((int) $rid);
339 $whereforadd .=
" OR (module='".$this->db->escape($module).
"' AND perms='".$this->
db->escape($perms).
"' AND (subperms='lire' OR subperms='read'))";
341 $whereforadd .=
" OR (module='".$this->db->escape($module).
"' AND (perms='lire' OR perms='read') AND subperms IS NULL)";
345 if (!empty($allmodule)) {
346 if ($allmodule ==
'allmodules') {
347 $whereforadd =
'allmodules';
349 $whereforadd =
"module='".$this->db->escape($allmodule).
"'";
350 if (!empty($allperms)) {
351 $whereforadd .=
" AND perms='".$this->db->escape($allperms).
"'";
358 if (!empty($whereforadd)) {
361 $sql .=
" FROM ".$this->db->prefix().
"rights_def";
362 $sql .=
" WHERE entity = ".((int) $entity);
363 if (!empty($whereforadd) && $whereforadd !=
'allmodules') {
364 $sql .=
" AND ".$whereforadd;
367 $result = $this->
db->query($sql);
369 $num = $this->
db->num_rows($result);
372 $obj = $this->
db->fetch_object($result);
375 $sql =
"DELETE FROM ".$this->db->prefix().
"usergroup_rights WHERE fk_usergroup = ".((int) $this->
id).
" AND fk_id=".((int) $nid).
" AND entity = ".((int) $entity);
376 if (!$this->
db->query($sql)) {
379 $sql =
"INSERT INTO ".$this->db->prefix().
"usergroup_rights (entity, fk_usergroup, fk_id) VALUES (".((int) $entity).
", ".((int) $this->
id).
", ".((int) $nid).
")";
380 if (!$this->
db->query($sql)) {
392 $langs->load(
"other");
393 $this->context = array(
'audit'=>$langs->trans(
"PermissionsAdd").($rid ?
' (id='.$rid.
')' :
''));
396 $result = $this->
call_trigger(
'USERGROUP_MODIFY', $user);
405 $this->
db->rollback();
423 public function delrights($rid, $allmodule =
'', $allperms =
'', $entity = 0)
425 global $conf, $user, $langs;
430 $entity = (!empty($entity) ? $entity : $conf->entity);
435 $module = $perms = $subperms =
'';
439 $sql =
"SELECT module, perms, subperms";
440 $sql .=
" FROM ".$this->db->prefix().
"rights_def";
441 $sql .=
" WHERE id = ".((int) $rid);
442 $sql .=
" AND entity = ".((int) $entity);
444 $result = $this->
db->query($sql);
446 $obj = $this->
db->fetch_object($result);
448 $module = $obj->module;
449 $perms = $obj->perms;
450 $subperms = $obj->subperms;
458 $wherefordel =
"id = ".((int) $rid);
460 if ($subperms ==
'lire' || $subperms ==
'read') {
461 $wherefordel .=
" OR (module='".$this->db->escape($module).
"' AND perms='".$this->
db->escape($perms).
"' AND subperms IS NOT NULL)";
463 if ($perms ==
'lire' || $perms ==
'read') {
464 $wherefordel .=
" OR (module='".$this->db->escape($module).
"')";
472 if (!empty($allmodule)) {
473 if ($allmodule ==
'allmodules') {
474 $wherefordel =
'allmodules';
476 $wherefordel =
"module='".$this->db->escape($allmodule).
"'";
477 if (!empty($allperms)) {
478 $wherefordel .=
" AND perms='".$this->db->escape($allperms).
"'";
485 if (!empty($wherefordel)) {
488 $sql .=
" FROM ".$this->db->prefix().
"rights_def";
489 $sql .=
" WHERE entity = ".((int) $entity);
490 if (!empty($wherefordel) && $wherefordel !=
'allmodules') {
491 $sql .=
" AND ".$wherefordel;
494 $result = $this->
db->query($sql);
496 $num = $this->
db->num_rows($result);
501 $obj = $this->
db->fetch_object($result);
506 $sql =
"DELETE FROM ".$this->db->prefix().
"usergroup_rights";
507 $sql .=
" WHERE fk_usergroup = $this->id AND fk_id=".((int) $nid);
508 $sql .=
" AND entity = ".((int) $entity);
509 if (!$this->
db->query($sql)) {
521 $langs->load(
"other");
522 $this->context = array(
'audit'=>$langs->trans(
"PermissionsDelete").($rid ?
' (id='.$rid.
')' :
''));
525 $result = $this->
call_trigger(
'USERGROUP_MODIFY', $user);
534 $this->
db->rollback();
553 if ($moduletag && isset($this->_tab_loaded[$moduletag]) && $this->_tab_loaded[$moduletag]) {
558 if (!empty($this->all_permissions_are_loaded)) {
566 $sql =
"SELECT r.module, r.perms, r.subperms ";
567 $sql .=
" FROM ".$this->db->prefix().
"usergroup_rights as u, ".$this->
db->prefix().
"rights_def as r";
568 $sql .=
" WHERE r.id = u.fk_id";
569 $sql .=
" AND r.entity = ".((int) $conf->entity);
570 $sql .=
" AND u.entity = ".((int) $conf->entity);
571 $sql .=
" AND u.fk_usergroup = ".((int) $this->
id);
572 $sql .=
" AND r.perms IS NOT NULL";
574 $sql .=
" AND r.module = '".$this->db->escape($moduletag).
"'";
577 dol_syslog(get_class($this).
'::getrights', LOG_DEBUG);
583 $obj = $this->
db->fetch_object(
$resql);
586 $module = $obj->module;
587 $perms = $obj->perms;
588 $subperms = $obj->subperms;
591 if (!isset($this->rights)) {
592 $this->rights =
new stdClass();
594 if (!isset($this->rights->$module) || !is_object($this->rights->$module)) {
595 $this->rights->$module =
new stdClass();
598 if (!isset($this->rights->$module->$perms) || !is_object($this->rights->$module->$perms)) {
599 $this->rights->$module->$perms =
new stdClass();
601 if (empty($this->rights->$module->$perms->$subperms)) {
604 $this->rights->$module->$perms->$subperms = 1;
606 if (empty($this->rights->$module->$perms)) {
609 $this->rights->$module->$perms = 1;
619 if ($moduletag ==
'') {
622 $this->all_permissions_are_loaded = 1;
625 $this->_tab_loaded[$moduletag] = 1;
637 public function delete(
User $user)
653 if (!empty($this->
name)) {
654 $this->nom = $this->name;
657 if (!isset($this->entity)) {
658 $this->entity = $conf->entity;
674 if (!empty($this->
name)) {
675 $this->nom = $this->name;
705 $langs->load(
'users');
720 public function getNomUrl($withpicto = 0, $option =
'', $notooltip = 0, $morecss =
'', $save_lastsearch_value = -1)
722 global $langs, $conf, $db, $hookmanager;
723 global $dolibarr_main_authentication, $dolibarr_main_demo;
726 if (!empty($conf->global->MAIN_OPTIMIZEFORTEXTBROWSER) && $withpicto) {
730 $result =
''; $label =
'';
732 $label .=
'<div class="centpercent">';
733 $label .=
img_picto(
'',
'group').
' <u>'.$langs->trans(
"Group").
'</u><br>';
734 $label .=
'<b>'.$langs->trans(
'Name').
':</b> '.$this->name;
735 $label .=
'<br><b>'.$langs->trans(
"Description").
':</b> '.$this->note;
738 if ($option ==
'permissions') {
739 $url = DOL_URL_ROOT.
'/user/group/perms.php?id='.$this->id;
741 $url = DOL_URL_ROOT.
'/user/group/card.php?id='.$this->id;
744 if ($option !=
'nolink') {
746 $add_save_lastsearch_values = ($save_lastsearch_value == 1 ? 1 : 0);
747 if ($save_lastsearch_value == -1 && preg_match(
'/list\.php/', $_SERVER[
"PHP_SELF"])) {
748 $add_save_lastsearch_values = 1;
750 if ($add_save_lastsearch_values) {
751 $url .=
'&save_lastsearch_values=1';
756 if (empty($notooltip)) {
757 if (!empty($conf->global->MAIN_OPTIMIZEFORTEXTBROWSER)) {
758 $langs->load(
"users");
759 $label = $langs->trans(
"ShowGroup");
760 $linkclose .=
' alt="'.dol_escape_htmltag($label, 1, 1).
'"';
762 $linkclose .=
' title="'.dol_escape_htmltag($label, 1, 1).
'"';
763 $linkclose .=
' class="classfortooltip'.($morecss ?
' '.$morecss :
'').
'"';
766 $linkstart =
'<a href="'.$url.
'"';
767 $linkstart .= $linkclose.
'>';
770 $result = $linkstart;
772 $result .=
img_object(($notooltip ?
'' : $label), ($this->picto ? $this->picto :
'generic'), ($notooltip ? (($withpicto != 2) ?
'class="paddingright"' :
'') :
'class="'.(($withpicto != 2) ?
'paddingright ' :
'').
'classfortooltip"'), 0, 0, $notooltip ? 0 : 1);
774 if ($withpicto != 2) {
775 $result .= $this->name;
780 $hookmanager->initHooks(array(
'groupdao'));
781 $parameters = array(
'id'=>$this->
id,
'getnomurl' => &$result);
782 $reshook = $hookmanager->executeHooks(
'getNomUrl', $parameters, $this, $action);
784 $result = $hookmanager->resPrint;
786 $result .= $hookmanager->resPrint;
809 $dn = $conf->global->LDAP_KEY_GROUPS.
"=".$info[$conf->global->LDAP_KEY_GROUPS].
",".$conf->global->LDAP_GROUP_DN;
812 $dn = $conf->global->LDAP_GROUP_DN;
815 $dn = $conf->global->LDAP_KEY_GROUPS.
"=".$info[$conf->global->LDAP_KEY_GROUPS];
836 $info[
"objectclass"] = explode(
',', $conf->global->LDAP_GROUP_OBJECT_CLASS);
839 if ($this->
name && !empty($conf->global->LDAP_GROUP_FIELD_FULLNAME)) {
840 $info[$conf->global->LDAP_GROUP_FIELD_FULLNAME] = $this->name;
843 if ($this->note && !empty($conf->global->LDAP_GROUP_FIELD_DESCRIPTION)) {
846 if (!empty($conf->global->LDAP_GROUP_FIELD_GROUPMEMBERS)) {
847 $valueofldapfield = array();
848 foreach ($this->members as $key => $val) {
849 $muser =
new User($this->
db);
850 $muser->fetch($val->id);
851 $info2 = $muser->_load_ldap_info();
852 $valueofldapfield[] = $muser->_load_ldap_dn($info2);
854 $info[$conf->global->LDAP_GROUP_FIELD_GROUPMEMBERS] = (!empty($valueofldapfield) ? $valueofldapfield :
'');
856 if (!empty($conf->global->LDAP_GROUP_FIELD_GROUPID)) {
857 $info[$conf->global->LDAP_GROUP_FIELD_GROUPID] = $this->id;
872 global $conf, $user, $langs;
876 $this->
ref =
'SPECIMEN';
879 $this->
name =
'DOLIBARR GROUP SPECIMEN';
880 $this->note =
'This is a note';
881 $this->datec = time();
882 $this->datem = time();
885 $this->members = array(
901 public function generateDocument($modele, $outputlangs, $hidedetails = 0, $hidedesc = 0, $hideref = 0, $moreparams =
null)
903 global $conf, $user, $langs;
905 $langs->load(
"user");
909 if (!empty($conf->global->USERGROUP_ADDON_PDF)) {
910 $modele = $conf->global->USERGROUP_ADDON_PDF;
916 $modelpath =
"core/modules/usergroup/doc/";
918 return $this->
commonGenerateDocument($modelpath, $modele, $outputlangs, $hidedetails, $hidedesc, $hideref, $moreparams);
930 $return =
'<div class="box-flex-item box-flex-grow-zero">';
931 $return .=
'<div class="info-box info-box-sm">';
932 $return .=
'<span class="info-box-icon bg-infobox-action">';
934 $return .=
'</span>';
935 $return .=
'<div class="info-box-content">';
936 $return .=
'<span class="info-box-ref">'.(method_exists($this,
'getNomUrl') ? $this->
getNomUrl() : $this->ref).
'</span>';
937 if (property_exists($this,
'members')) {
938 $return .=
'<br><span class="info-box-status opacitymedium">'.(!empty($this->members)? $this->members : 0).
' '.$langs->trans(
'Users').
'</span>';
940 if (property_exists($this,
'nb_rights')) {
941 $return .=
'<br><div class="info-box-status margintoponly opacitymedium">'.$langs->trans(
'NbOfPermissions').
' : '.$this->nb_rights.
'</div>';
Parent class of all other business classes (invoices, contracts, proposals, orders,...
commonGenerateDocument($modelspath, $modele, $outputlangs, $hidedetails, $hidedesc, $hideref, $moreparams=null)
Common function for all objects extending CommonObject for generating documents.
fetchCommon($id, $ref=null, $morewhere='')
Load object in memory from the database.
createCommon(User $user, $notrigger=false)
Create object into database.
deleteCommon(User $user, $notrigger=false, $forcechilddeletion=0)
Delete object in database.
updateCommon(User $user, $notrigger=false)
Update object into database.
call_trigger($triggerName, $user)
Call trigger based on this instance.
Class to manage user groups.
getNomUrl($withpicto=0, $option='', $notooltip=0, $morecss='', $save_lastsearch_value=-1)
Return a link to the user card (with optionaly the picto) Use this->id,this->lastname,...
listUsersForGroup($excludefilter='', $mode=0)
Return array of User objects for group this->id (or all if this->id not defined)
_load_ldap_info()
Initialize the info array (array of LDAP values) that will be used to call LDAP functions.
_load_ldap_dn($info, $mode=0)
Retourne chaine DN complete dans l'annuaire LDAP pour l'objet.
LibStatut($status, $mode=0)
Renvoi le libelle d'un statut donne.
delrights($rid, $allmodule='', $allperms='', $entity=0)
Remove a permission from group.
generateDocument($modele, $outputlangs, $hidedetails=0, $hidedesc=0, $hideref=0, $moreparams=null)
Create a document onto disk according to template module.
listGroupsForUser($userid, $load_members=true)
Return array of groups objects for a particular user.
fetch($id='', $groupname='', $load_members=true)
Charge un objet group avec toutes ses caracteristiques (except ->members array)
addrights($rid, $allmodule='', $allperms='', $entity=0)
Add a permission to a group.
initAsSpecimen()
Initialise an instance with random values.
create($notrigger=0)
Create group into database.
getKanbanView($option='')
Return clicable link of object (with eventually picto)
getrights($moduletag='')
Charge dans l'objet group, la liste des permissions auquels le groupe a droit.
getLibStatut($mode=0)
Return label of status of user (active, inactive)
__construct($db)
Constructor de la classe.
update($notrigger=0)
Update group into database.
Class to manage Dolibarr users.
if(isModEnabled('facture') &&!empty($user->rights->facture->lire)) if((isModEnabled('fournisseur') &&empty($conf->global->MAIN_USE_NEW_SUPPLIERMOD) && $user->hasRight("fournisseur", "facture", "lire"))||(isModEnabled('supplier_invoice') && $user->hasRight("supplier_invoice", "lire"))) if(isModEnabled('don') &&!empty($user->rights->don->lire)) if(isModEnabled('tax') &&!empty($user->rights->tax->charges->lire)) if(isModEnabled('facture') &&isModEnabled('commande') && $user->hasRight("commande", "lire") &&empty($conf->global->WORKFLOW_DISABLE_CREATE_INVOICE_FROM_ORDER)) $resql
Social contributions to pay.
dol_string_nohtmltag($stringtoclean, $removelinefeed=1, $pagecodeto='UTF-8', $strip_tags=0, $removedoublespaces=1)
Clean a string from all HTML tags and entities.
dol_print_error($db='', $error='', $errors=null)
Displays error message system with all the information to facilitate the diagnosis and the escalation...
img_object($titlealt, $picto, $moreatt='', $pictoisfullpath=false, $srconly=0, $notitle=0)
Show a picto called object_picto (generic function)
dol_strlen($string, $stringencoding='UTF-8')
Make a strlen call.
dol_now($mode='auto')
Return date for now.
img_picto($titlealt, $picto, $moreatt='', $pictoisfullpath=false, $srconly=0, $notitle=0, $alt='', $morecss='', $marginleftonlyshort=2)
Show picto whatever it's its name (generic function)
isModEnabled($module)
Is Dolibarr module enabled.
dol_syslog($message, $level=LOG_INFO, $ident=0, $suffixinfilename='', $restricttologhandler='', $logcontext=null)
Write log message into outputs.
$conf db name
Only used if Module[ID]Name translation string is not found.
$conf db
API class for accounts.