lib/plugins/acl/admin.php

   1 <?php
   2 /**
   3  * ACL administration functions
   4  *
   5  * @license    GPL 2 (http://www.gnu.org/licenses/gpl.html)
   6  * @author     Andreas Gohr <andi@splitbrain.org>
   7  * @author     Anika Henke <anika@selfthinker.org> (concepts)
   8  * @author     Frank Schubert <frank@schokilade.de> (old version)
   9  */
  10 // must be run within Dokuwiki
  11 if(!defined('DOKU_INC')) die();
  12
  13 if(!defined('DOKU_PLUGIN')) define('DOKU_PLUGIN',DOKU_INC.'lib/plugins/');
  14 require_once(DOKU_PLUGIN.'admin.php');
  15
  16 /**
  17  * All DokuWiki plugins to extend the admin function
  18  * need to inherit from this class
  19  */
  20 class admin_plugin_acl extends DokuWiki_Admin_Plugin {
  21     var $acl = null;
  22     var $ns  = null;
  23     var $who = '';
  24     var $usersgroups = array();
  25     var $specials = array();
  26
  27     /**
  28      * return some info
  29      */
  30     function getInfo(){
  31         return array(
  32             'author' => 'Andreas Gohr',
  33             'email'  => 'andi@splitbrain.org',
  34             'date'   => '2010-01-17',
  35             'name'   => 'ACL Manager',
  36             'desc'   => 'Manage Page Access Control Lists',
  37             'url'    => 'http://dokuwiki.org/plugin:acl',
  38         );
  39     }
  40
  41     /**
  42      * return prompt for admin menu
  43      */
  44     function getMenuText($language) {
  45         return $this->getLang('admin_acl');
  46     }
  47
  48     /**
  49      * return sort order for position in admin menu
  50      */
  51     function getMenuSort() {
  52         return 1;
  53     }
  54
  55     /**
  56      * handle user request
  57      *
  58      * Initializes internal vars and handles modifications
  59      *
  60      * @author Andreas Gohr <andi@splitbrain.org>
  61      */
  62     function handle() {
  63         global $AUTH_ACL;
  64         global $ID;
  65         global $auth;
  66
  67         // fresh 1:1 copy without replacements
  68         $AUTH_ACL = file(DOKU_CONF.'acl.auth.php');
  69
  70
  71         // namespace given?
  72         if($_REQUEST['ns'] == '*'){
  73             $this->ns = '*';
  74         }else{
  75             $this->ns = cleanID($_REQUEST['ns']);
  76         }
  77
  78         // user or group choosen?
  79         $who = trim($_REQUEST['acl_w']);
  80         if($_REQUEST['acl_t'] == '__g__' && $who){
  81             $this->who = '@'.ltrim($auth->cleanGroup($who),'@');
  82         }elseif($_REQUEST['acl_t'] == '__u__' && $who){
  83             $this->who = ltrim($auth->cleanUser($who),'@');
  84         }elseif($_REQUEST['acl_t'] &&
  85                 $_REQUEST['acl_t'] != '__u__' &&
  86                 $_REQUEST['acl_t'] != '__g__'){
  87             $this->who = $_REQUEST['acl_t'];
  88         }elseif($who){
  89             $this->who = $who;
  90         }
  91
  92         // handle modifications
  93         if(isset($_REQUEST['cmd']) && checkSecurityToken()){
  94
  95             // scope for modifications
  96             if($this->ns){
  97                 if($this->ns == '*'){
  98                     $scope = '*';
  99                 }else{
 100                     $scope = $this->ns.':*';
 101                 }
 102             }else{
 103                 $scope = $ID;
 104             }
 105
 106             if(isset($_REQUEST['cmd']['save']) && $scope && $this->who && isset($_REQUEST['acl'])){
 107                 // handle additions or single modifications
 108                 $this->_acl_del($scope, $this->who);
 109                 $this->_acl_add($scope, $this->who, (int) $_REQUEST['acl']);
 110             }elseif(isset($_REQUEST['cmd']['del']) && $scope && $this->who){
 111                 // handle single deletions
 112                 $this->_acl_del($scope, $this->who);
 113             }elseif(isset($_REQUEST['cmd']['update'])){
 114                 // handle update of the whole file
 115                 foreach((array) $_REQUEST['del'] as $where => $names){
 116                     // remove all rules marked for deletion
 117                     foreach($names as $who)
 118                         unset($_REQUEST['acl'][$where][$who]);
 119                 }
 120                 // prepare lines
 121                 $lines = array();
 122                 // keep header
 123                 foreach($AUTH_ACL as $line){
 124                     if($line{0} == '#'){
 125                         $lines[] = $line;
 126                     }else{
 127                         break;
 128                     }
 129                 }
 130                 // re-add all rules
 131                 foreach((array) $_REQUEST['acl'] as $where => $opt){
 132                     foreach($opt as $who => $perm){
 133                         $who = auth_nameencode($who,true);
 134                         $lines[] = "$where\t$who\t$perm\n";
 135                     }
 136                 }
 137                 // save it
 138                 io_saveFile(DOKU_CONF.'acl.auth.php', join('',$lines));
 139             }
 140
 141             // reload ACL config
 142             $AUTH_ACL = file(DOKU_CONF.'acl.auth.php');
 143         }
 144
 145         // initialize ACL array
 146         $this->_init_acl_config();
 147     }
 148
 149     /**
 150      * ACL Output function
 151      *
 152      * print a table with all significant permissions for the
 153      * current id
 154      *
 155      * @author  Frank Schubert <frank@schokilade.de>
 156      * @author  Andreas Gohr <andi@splitbrain.org>
 157      */
 158     function html() {
 159         global $ID;
 160
 161         echo '<div id="acl_manager">'.NL;
 162         echo '<h1>'.$this->getLang('admin_acl').'</h1>'.NL;
 163         echo '<div class="level1">'.NL;
 164
 165         echo '<div id="acl__tree">'.NL;
 166         $this->_html_explorer($_REQUEST['ns']);
 167         echo '</div>'.NL;
 168
 169         echo '<div id="acl__detail">'.NL;
 170         $this->_html_detail();
 171         echo '</div>'.NL;
 172         echo '</div>'.NL;
 173
 174         echo '<div class="clearer"></div>';
 175         echo '<h2>'.$this->getLang('current').'</h2>'.NL;
 176         echo '<div class="level2">'.NL;
 177         $this->_html_table();
 178         echo '</div>'.NL;
 179
 180         echo '<div class="footnotes"><div class="fn">'.NL;
 181         echo '<sup><a id="fn__1" class="fn_bot" name="fn__1" href="#fnt__1">1)</a></sup>'.NL;
 182         echo $this->getLang('p_include');
 183         echo '</div></div>';
 184
 185         echo '</div>'.NL;
 186     }
 187
 188     /**
 189      * returns array with set options for building links
 190      *
 191      * @author Andreas Gohr <andi@splitbrain.org>
 192      */
 193     function _get_opts($addopts=null){
 194         global $ID;
 195         $opts = array(
 196                     'do'=>'admin',
 197                     'page'=>'acl',
 198                 );
 199         if($this->ns) $opts['ns'] = $this->ns;
 200         if($this->who) $opts['acl_w'] = $this->who;
 201
 202         if(is_null($addopts)) return $opts;
 203         return array_merge($opts, $addopts);
 204     }
 205
 206     /**
 207      * Display a tree menu to select a page or namespace
 208      *
 209      * @author Andreas Gohr <andi@splitbrain.org>
 210      */
 211     function _html_explorer(){
 212         require_once(DOKU_INC.'inc/search.php');
 213         global $conf;
 214         global $ID;
 215         global $lang;
 216
 217         $dir = $conf['datadir'];
 218         $ns  = $this->ns;
 219         if(empty($ns)){
 220             $ns = dirname(str_replace(':','/',$ID));
 221             if($ns == '.') $ns ='';
 222         }elseif($ns == '*'){
 223             $ns ='';
 224         }
 225         $ns  = utf8_encodeFN(str_replace(':','/',$ns));
 226
 227         $data = $this->_get_tree($ns);
 228
 229         // wrap a list with the root level around the other namespaces
 230         $item = array( 'level' => 0, 'id' => '*', 'type' => 'd',
 231                    'open' =>'true', 'label' => '['.$lang['mediaroot'].']');
 232
 233         echo '<ul class="acltree">';
 234         echo $this->_html_li_acl($item);
 235         echo '<div class="li">';
 236         echo $this->_html_list_acl($item);
 237         echo '</div>';
 238         echo html_buildlist($data,'acl',
 239                             array($this,'_html_list_acl'),
 240                             array($this,'_html_li_acl'));
 241         echo '</li>';
 242         echo '</ul>';
 243
 244     }
 245
 246     /**
 247      * get a combined list of media and page files
 248      *
 249      * @param string $folder an already converted filesystem folder of the current namespace
 250      * @param string $limit  limit the search to this folder
 251      */
 252     function _get_tree($folder,$limit=''){
 253         global $conf;
 254
 255         // read tree structure from pages and media
 256         $data = array();
 257         search($data,$conf['datadir'],'search_index',array('ns' => $folder),$limit);
 258         $media = array();
 259         search($media,$conf['mediadir'],'search_index',array('ns' => $folder, 'nofiles' => true),$limit);
 260         $data = array_merge($data,$media);
 261         unset($media);
 262
 263         // combine by sorting and removing duplicates
 264         usort($data,array($this,'_tree_sort'));
 265         $count = count($data);
 266         if($count>0) for($i=1; $i<$count; $i++){
 267             if($data[$i]['type'] == 'f') break; // namespaces come first, we're done
 268             if($data[$i-1]['id'] == $data[$i]['id']) unset($data[$i]);
 269         }
 270         return $data;
 271     }
 272
 273     /**
 274      * usort callback
 275      *
 276      * Sorts the combined trees of media and page files
 277      */
 278     function _tree_sort($a,$b){
 279         if($a['type'] == 'd' && $b['type'] == 'f'){
 280             return -1;
 281         }elseif($a['type'] == 'f' && $b['type'] == 'd'){
 282             return 1;
 283         }else{
 284             return strcmp($a['id'],$b['id']);
 285         }
 286     }
 287
 288     /**
 289      * Display the current ACL for selected where/who combination with
 290      * selectors and modification form
 291      *
 292      * @author Andreas Gohr <andi@splitbrain.org>
 293      */
 294     function _html_detail(){
 295         global $conf;
 296         global $ID;
 297
 298         echo '<form action="'.wl().'" method="post" accept-charset="utf-8"><div class="no">'.NL;
 299
 300         echo '<div id="acl__user">';
 301         echo $this->getLang('acl_perms').' ';
 302         $inl =  $this->_html_select();
 303         echo '<input type="text" name="acl_w" class="edit" value="'.(($inl)?'':hsc(ltrim($this->who,'@'))).'" />'.NL;
 304         echo '<input type="submit" value="'.$this->getLang('btn_select').'" class="button" />'.NL;
 305         echo '</div>'.NL;
 306
 307         echo '<div id="acl__info">';
 308         $this->_html_info();
 309         echo '</div>';
 310
 311         echo '<input type="hidden" name="ns" value="'.hsc($this->ns).'" />'.NL;
 312         echo '<input type="hidden" name="id" value="'.hsc($ID).'" />'.NL;
 313         echo '<input type="hidden" name="do" value="admin" />'.NL;
 314         echo '<input type="hidden" name="page" value="acl" />'.NL;
 315         echo '<input type="hidden" name="sectok" value="'.getSecurityToken().'" />'.NL;
 316         echo '</div></form>'.NL;
 317     }
 318
 319     /**
 320      * Print infos and editor
 321      */
 322     function _html_info(){
 323         global $ID;
 324
 325         if($this->who){
 326             $current = $this->_get_exact_perm();
 327
 328             // explain current permissions
 329             $this->_html_explain($current);
 330             // load editor
 331             $this->_html_acleditor($current);
 332         }else{
 333             echo '<p>';
 334             if($this->ns){
 335                 printf($this->getLang('p_choose_ns'),hsc($this->ns));
 336             }else{
 337                 printf($this->getLang('p_choose_id'),hsc($ID));
 338             }
 339             echo '</p>';
 340
 341             echo $this->locale_xhtml('help');
 342         }
 343     }
 344
 345     /**
 346      * Display the ACL editor
 347      *
 348      * @author Andreas Gohr <andi@splitbrain.org>
 349      */
 350     function _html_acleditor($current){
 351         global $lang;
 352
 353         echo '<fieldset>';
 354         if(is_null($current)){
 355             echo '<legend>'.$this->getLang('acl_new').'</legend>';
 356         }else{
 357             echo '<legend>'.$this->getLang('acl_mod').'</legend>';
 358         }
 359
 360
 361         echo $this->_html_checkboxes($current,empty($this->ns),'acl');
 362
 363         if(is_null($current)){
 364             echo '<input type="submit" name="cmd[save]" class="button" value="'.$lang['btn_save'].'" />'.NL;
 365         }else{
 366             echo '<input type="submit" name="cmd[save]" class="button" value="'.$lang['btn_update'].'" />'.NL;
 367             echo '<input type="submit" name="cmd[del]" class="button" value="'.$lang['btn_delete'].'" />'.NL;
 368         }
 369
 370         echo '</fieldset>';
 371     }
 372
 373     /**
 374      * Explain the currently set permissions in plain english/$lang
 375      *
 376      * @author Andreas Gohr <andi@splitbrain.org>
 377      */
 378     function _html_explain($current){
 379         global $ID;
 380         global $auth;
 381
 382         $who = $this->who;
 383         $ns  = $this->ns;
 384
 385         // prepare where to check
 386         if($ns){
 387             if($ns == '*'){
 388                 $check='*';
 389             }else{
 390                 $check=$ns.':*';
 391             }
 392         }else{
 393             $check = $ID;
 394         }
 395
 396         // prepare who to check
 397         if($who{0} == '@'){
 398             $user   = '';
 399             $groups = array(ltrim($who,'@'));
 400         }else{
 401             $user = auth_nameencode($who);
 402             $info = $auth->getUserData($user);
 403             if($info === false){
 404                 $groups = array();
 405             }else{
 406                 $groups = $info['grps'];
 407             }
 408         }
 409
 410         // check the permissions
 411         $perm = auth_aclcheck($check,$user,$groups);
 412
 413         // build array of named permissions
 414         $names = array();
 415         if($perm){
 416             if($ns){
 417                 if($perm >= AUTH_DELETE) $names[] = $this->getLang('acl_perm16');
 418                 if($perm >= AUTH_UPLOAD) $names[] = $this->getLang('acl_perm8');
 419                 if($perm >= AUTH_CREATE) $names[] = $this->getLang('acl_perm4');
 420             }
 421             if($perm >= AUTH_EDIT) $names[] = $this->getLang('acl_perm2');
 422             if($perm >= AUTH_READ) $names[] = $this->getLang('acl_perm1');
 423             $names = array_reverse($names);
 424         }else{
 425             $names[] = $this->getLang('acl_perm0');
 426         }
 427
 428         // print permission explanation
 429         echo '<p>';
 430         if($user){
 431             if($ns){
 432                 printf($this->getLang('p_user_ns'),hsc($who),hsc($ns),join(', ',$names));
 433             }else{
 434                 printf($this->getLang('p_user_id'),hsc($who),hsc($ID),join(', ',$names));
 435             }
 436         }else{
 437             if($ns){
 438                 printf($this->getLang('p_group_ns'),hsc(ltrim($who,'@')),hsc($ns),join(', ',$names));
 439             }else{
 440                 printf($this->getLang('p_group_id'),hsc(ltrim($who,'@')),hsc($ID),join(', ',$names));
 441             }
 442         }
 443         echo '</p>';
 444
 445         // add note if admin
 446         if($perm == AUTH_ADMIN){
 447             echo '<p>'.$this->getLang('p_isadmin').'</p>';
 448         }elseif(is_null($current)){
 449             echo '<p>'.$this->getLang('p_inherited').'</p>';
 450         }
 451     }
 452
 453
 454     /**
 455      * Item formatter for the tree view
 456      *
 457      * User function for html_buildlist()
 458      *
 459      * @author Andreas Gohr <andi@splitbrain.org>
 460      */
 461     function _html_list_acl($item){
 462         global $ID;
 463         $ret = '';
 464         // what to display
 465         if($item['label']){
 466             $base = $item['label'];
 467         }else{
 468             $base = ':'.$item['id'];
 469             $base = substr($base,strrpos($base,':')+1);
 470         }
 471
 472         // highlight?
 473         if( ($item['type']=='d' && $item['id'] == $this->ns) ||
 474             ($item['type']!='d' && $item['id'] == $ID)) $cl = ' cur';
 475
 476         // namespace or page?
 477         if($item['type']=='d'){
 478             if($item['open']){
 479                 $img   = DOKU_BASE.'lib/images/minus.gif';
 480                 $alt   = '&minus;';
 481             }else{
 482                 $img   = DOKU_BASE.'lib/images/plus.gif';
 483                 $alt   = '+';
 484             }
 485             $ret .= '<img src="'.$img.'" alt="'.$alt.'" />';
 486             $ret .= '<a href="'.wl('',$this->_get_opts(array('ns'=>$item['id'],'sectok'=>getSecurityToken()))).'" class="idx_dir'.$cl.'">';
 487             $ret .= $base;
 488             $ret .= '</a>';
 489         }else{
 490             $ret .= '<a href="'.wl('',$this->_get_opts(array('id'=>$item['id'],'ns'=>'','sectok'=>getSecurityToken()))).'" class="wikilink1'.$cl.'">';
 491             $ret .= noNS($item['id']);
 492             $ret .= '</a>';
 493         }
 494         return $ret;
 495     }
 496
 497
 498     function _html_li_acl($item){
 499             return '<li class="level'.$item['level'].'">';
 500     }
 501
 502
 503     /**
 504      * Get current ACL settings as multidim array
 505      *
 506      * @author Andreas Gohr <andi@splitbrain.org>
 507      */
 508     function _init_acl_config(){
 509         global $AUTH_ACL;
 510         global $conf;
 511         $acl_config=array();
 512         $usersgroups = array();
 513
 514         // get special users and groups
 515         $this->specials[] = '@ALL';
 516         $this->specials[] = '@'.$conf['defaultgroup'];
 517         if($conf['manager'] != '!!not set!!'){
 518             $this->specials = array_merge($this->specials,
 519                                           array_map('trim',
 520                                                     explode(',',$conf['manager'])));
 521         }
 522         $this->specials = array_filter($this->specials);
 523         $this->specials = array_unique($this->specials);
 524         sort($this->specials);
 525
 526         foreach($AUTH_ACL as $line){
 527             $line = trim(preg_replace('/#.*$/','',$line)); //ignore comments
 528             if(!$line) continue;
 529
 530             $acl = preg_split('/\s+/',$line);
 531             //0 is pagename, 1 is user, 2 is acl
 532
 533             $acl[1] = rawurldecode($acl[1]);
 534             $acl_config[$acl[0]][$acl[1]] = $acl[2];
 535
 536             // store non-special users and groups for later selection dialog
 537             $ug = $acl[1];
 538             if(in_array($ug,$this->specials)) continue;
 539             $usersgroups[] = $ug;
 540         }
 541
 542         $usersgroups = array_unique($usersgroups);
 543         sort($usersgroups);
 544         ksort($acl_config);
 545
 546         $this->acl = $acl_config;
 547         $this->usersgroups = $usersgroups;
 548     }
 549
 550     /**
 551      * Display all currently set permissions in a table
 552      *
 553      * @author Andreas Gohr <andi@splitbrain.org>
 554      */
 555     function _html_table(){
 556         global $lang;
 557         global $ID;
 558
 559         echo '<form action="'.wl().'" method="post" accept-charset="utf-8"><div class="no">'.NL;
 560         if($this->ns){
 561             echo '<input type="hidden" name="ns" value="'.hsc($this->ns).'" />'.NL;
 562         }else{
 563             echo '<input type="hidden" name="id" value="'.hsc($ID).'" />'.NL;
 564         }
 565         echo '<input type="hidden" name="acl_w" value="'.hsc($this->who).'" />'.NL;
 566         echo '<input type="hidden" name="do" value="admin" />'.NL;
 567         echo '<input type="hidden" name="page" value="acl" />'.NL;
 568         echo '<input type="hidden" name="sectok" value="'.getSecurityToken().'" />'.NL;
 569         echo '<table class="inline">';
 570         echo '<tr>';
 571         echo '<th>'.$this->getLang('where').'</th>';
 572         echo '<th>'.$this->getLang('who').'</th>';
 573         echo '<th>'.$this->getLang('perm').'<sup><a id="fnt__1" class="fn_top" name="fnt__1" href="#fn__1">1)</a></sup></th>';
 574         echo '<th>'.$lang['btn_delete'].'</th>';
 575         echo '</tr>';
 576         foreach($this->acl as $where => $set){
 577             foreach($set as $who => $perm){
 578                 echo '<tr>';
 579                 echo '<td>';
 580                 if(substr($where,-1) == '*'){
 581                     echo '<span class="aclns">'.hsc($where).'</span>';
 582                     $ispage = false;
 583                 }else{
 584                     echo '<span class="aclpage">'.hsc($where).'</span>';
 585                     $ispage = true;
 586                 }
 587                 echo '</td>';
 588
 589                 echo '<td>';
 590                 if($who{0} == '@'){
 591                     echo '<span class="aclgroup">'.hsc($who).'</span>';
 592                 }else{
 593                     echo '<span class="acluser">'.hsc($who).'</span>';
 594                 }
 595                 echo '</td>';
 596
 597                 echo '<td>';
 598                 echo $this->_html_checkboxes($perm,$ispage,'acl['.$where.']['.$who.']');
 599                 echo '</td>';
 600
 601                 echo '<td align="center">';
 602                 echo '<input type="checkbox" name="del['.hsc($where).'][]" value="'.hsc($who).'" />';
 603                 echo '</td>';
 604                 echo '</tr>';
 605             }
 606         }
 607
 608         echo '<tr>';
 609         echo '<th align="right" colspan="4">';
 610         echo '<input type="submit" value="'.$lang['btn_update'].'" name="cmd[update]" class="button" />';
 611         echo '</th>';
 612         echo '</tr>';
 613         echo '</table>';
 614         echo '</div></form>'.NL;
 615     }
 616
 617
 618     /**
 619      * Returns the permission which were set for exactly the given user/group
 620      * and page/namespace. Returns null if no exact match is available
 621      *
 622      * @author Andreas Gohr <andi@splitbrain.org>
 623      */
 624     function _get_exact_perm(){
 625         global $ID;
 626         if($this->ns){
 627             if($this->ns == '*'){
 628                 $check = '*';
 629             }else{
 630                 $check = $this->ns.':*';
 631             }
 632         }else{
 633             $check = $ID;
 634         }
 635
 636         if(isset($this->acl[$check][$this->who])){
 637             return $this->acl[$check][$this->who];
 638         }else{
 639             return null;
 640         }
 641     }
 642
 643     /**
 644      * adds new acl-entry to conf/acl.auth.php
 645      *
 646      * @author  Frank Schubert <frank@schokilade.de>
 647      */
 648     function _acl_add($acl_scope, $acl_user, $acl_level){
 649         $acl_config = file_get_contents(DOKU_CONF.'acl.auth.php');
 650         $acl_user = auth_nameencode($acl_user,true);
 651
 652         // max level for pagenames is edit
 653         if(strpos($acl_scope,'*') === false) {
 654             if($acl_level > AUTH_EDIT) $acl_level = AUTH_EDIT;
 655         }
 656
 657
 658         $new_acl = "$acl_scope\t$acl_user\t$acl_level\n";
 659
 660         $new_config = $acl_config.$new_acl;
 661
 662         return io_saveFile(DOKU_CONF.'acl.auth.php', $new_config);
 663     }
 664
 665     /**
 666      * remove acl-entry from conf/acl.auth.php
 667      *
 668      * @author  Frank Schubert <frank@schokilade.de>
 669      */
 670     function _acl_del($acl_scope, $acl_user){
 671         $acl_config = file(DOKU_CONF.'acl.auth.php');
 672         $acl_user = auth_nameencode($acl_user,true);
 673
 674         $acl_pattern = '^'.preg_quote($acl_scope,'/').'\s+'.$acl_user.'\s+[0-8].*$';
 675
 676         // save all non!-matching
 677         $new_config = preg_grep("/$acl_pattern/", $acl_config, PREG_GREP_INVERT);
 678
 679         return io_saveFile(DOKU_CONF.'acl.auth.php', join('',$new_config));
 680     }
 681
 682     /**
 683      * print the permission radio boxes
 684      *
 685      * @author  Frank Schubert <frank@schokilade.de>
 686      * @author  Andreas Gohr <andi@splitbrain.org>
 687      */
 688     function _html_checkboxes($setperm,$ispage,$name){
 689         global $lang;
 690
 691         static $label = 0; //number labels
 692         $ret = '';
 693
 694         if($ispage && $setperm > AUTH_EDIT) $perm = AUTH_EDIT;
 695
 696         foreach(array(AUTH_NONE,AUTH_READ,AUTH_EDIT,AUTH_CREATE,AUTH_UPLOAD,AUTH_DELETE) as $perm){
 697             $label += 1;
 698
 699             //general checkbox attributes
 700             $atts = array( 'type'  => 'radio',
 701                            'id'    => 'pbox'.$label,
 702                            'name'  => $name,
 703                            'value' => $perm );
 704             //dynamic attributes
 705             if(!is_null($setperm) && $setperm == $perm) $atts['checked']  = 'checked';
 706             if($ispage && $perm > AUTH_EDIT){
 707                 $atts['disabled'] = 'disabled';
 708                 $class = ' class="disabled"';
 709             }else{
 710                 $class = '';
 711             }
 712
 713             //build code
 714             $ret .= '<label for="pbox'.$label.'" title="'.$this->getLang('acl_perm'.$perm).'"'.$class.'>';
 715             $ret .= '<input '.html_attbuild($atts).' />&nbsp;';
 716             $ret .= $this->getLang('acl_perm'.$perm);
 717             $ret .= '</label>'.NL;
 718         }
 719         return $ret;
 720     }
 721
 722     /**
 723      * Print a user/group selector (reusing already used users and groups)
 724      *
 725      * @author  Andreas Gohr <andi@splitbrain.org>
 726      */
 727     function _html_select(){
 728         global $conf;
 729         $inlist = false;
 730
 731         if($this->who &&
 732            !in_array($this->who,$this->usersgroups) &&
 733            !in_array($this->who,$this->specials)){
 734
 735             if($this->who{0} == '@'){
 736                 $gsel = ' selected="selected"';
 737             }else{
 738                 $usel   = ' selected="selected"';
 739             }
 740         }else{
 741             $usel = '';
 742             $gsel = '';
 743             $inlist = true;
 744         }
 745
 746
 747         echo '<select name="acl_t" class="edit">'.NL;
 748         echo '  <option value="__g__" class="aclgroup"'.$gsel.'>'.$this->getLang('acl_group').':</option>'.NL;
 749         echo '  <option value="__u__"  class="acluser"'.$usel.'>'.$this->getLang('acl_user').':</option>'.NL;
 750         echo '  <optgroup label="&nbsp;">'.NL;
 751         foreach($this->specials as $ug){
 752             if($ug == $this->who){
 753                 $sel    = ' selected="selected"';
 754                 $inlist = true;
 755             }else{
 756                 $sel = '';
 757             }
 758
 759             if($ug{0} == '@'){
 760                     echo '  <option value="'.hsc($ug).'" class="aclgroup"'.$sel.'>'.hsc($ug).'</option>'.NL;
 761             }else{
 762                     echo '  <option value="'.hsc($ug).'" class="acluser"'.$sel.'>'.hsc($ug).'</option>'.NL;
 763             }
 764         }
 765         echo '  </optgroup>'.NL;
 766         echo '  <optgroup label="&nbsp;">'.NL;
 767         foreach($this->usersgroups as $ug){
 768             if($ug == $this->who){
 769                 $sel    = ' selected="selected"';
 770                 $inlist = true;
 771             }else{
 772                 $sel = '';
 773             }
 774
 775             if($ug{0} == '@'){
 776                     echo '  <option value="'.hsc($ug).'" class="aclgroup"'.$sel.'>'.hsc($ug).'</option>'.NL;
 777             }else{
 778                     echo '  <option value="'.hsc($ug).'" class="acluser"'.$sel.'>'.hsc($ug).'</option>'.NL;
 779             }
 780         }
 781         echo '  </optgroup>'.NL;
 782         echo '</select>'.NL;
 783         return $inlist;
 784     }
 785 }