2012-07-09 19:51:19 +00:00
|
|
|
<?php
|
|
|
|
/**
|
2016-07-21 15:07:57 +00:00
|
|
|
* @copyright Copyright (c) 2016, ownCloud, Inc.
|
|
|
|
*
|
2016-05-26 17:56:05 +00:00
|
|
|
* @author Arthur Schiwon <blizzz@arthur-schiwon.de>
|
2015-03-26 10:44:34 +00:00
|
|
|
* @author Bart Visscher <bartv@thisnet.nl>
|
2017-11-06 19:15:27 +00:00
|
|
|
* @author Georg Ehrke <oc.list@georgehrke.com>
|
2017-11-06 14:56:42 +00:00
|
|
|
* @author Joas Schilling <coding@schilljs.com>
|
2016-05-26 17:56:05 +00:00
|
|
|
* @author Lukas Reschke <lukas@statuscode.ch>
|
2015-03-26 10:44:34 +00:00
|
|
|
* @author Morris Jobke <hey@morrisjobke.de>
|
2016-07-21 15:07:57 +00:00
|
|
|
* @author Roeland Jago Douma <roeland@famdouma.nl>
|
2012-07-09 19:51:19 +00:00
|
|
|
*
|
2015-03-26 10:44:34 +00:00
|
|
|
* @license AGPL-3.0
|
2012-07-09 19:51:19 +00:00
|
|
|
*
|
2015-03-26 10:44:34 +00:00
|
|
|
* This code is free software: you can redistribute it and/or modify
|
|
|
|
* it under the terms of the GNU Affero General Public License, version 3,
|
|
|
|
* as published by the Free Software Foundation.
|
2012-07-09 19:51:19 +00:00
|
|
|
*
|
2015-03-26 10:44:34 +00:00
|
|
|
* This program is distributed in the hope that it will be useful,
|
2012-07-09 19:51:19 +00:00
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
2015-03-26 10:44:34 +00:00
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU Affero General Public License for more details.
|
2012-07-09 19:51:19 +00:00
|
|
|
*
|
2015-03-26 10:44:34 +00:00
|
|
|
* You should have received a copy of the GNU Affero General Public License, version 3,
|
|
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>
|
2012-07-09 19:51:19 +00:00
|
|
|
*
|
|
|
|
*/
|
2015-08-13 19:31:38 +00:00
|
|
|
|
|
|
|
namespace OC;
|
|
|
|
|
|
|
|
use OC\Hooks\PublicEmitter;
|
2019-01-29 09:38:05 +00:00
|
|
|
use OCP\Group\ISubAdmin;
|
2015-08-13 19:31:38 +00:00
|
|
|
use OCP\IUser;
|
|
|
|
use OCP\IUserManager;
|
|
|
|
use OCP\IGroup;
|
|
|
|
use OCP\IGroupManager;
|
|
|
|
use OCP\IDBConnection;
|
|
|
|
|
2019-01-29 09:38:05 +00:00
|
|
|
class SubAdmin extends PublicEmitter implements ISubAdmin {
|
2015-08-13 19:31:38 +00:00
|
|
|
|
|
|
|
/** @var IUserManager */
|
|
|
|
private $userManager;
|
|
|
|
|
|
|
|
/** @var IGroupManager */
|
|
|
|
private $groupManager;
|
|
|
|
|
|
|
|
/** @var IDBConnection */
|
|
|
|
private $dbConn;
|
|
|
|
|
2015-10-27 13:09:45 +00:00
|
|
|
/**
|
|
|
|
* @param IUserManager $userManager
|
|
|
|
* @param IGroupManager $groupManager
|
|
|
|
* @param IDBConnection $dbConn
|
|
|
|
*/
|
2015-08-13 19:31:38 +00:00
|
|
|
public function __construct(IUserManager $userManager,
|
|
|
|
IGroupManager $groupManager,
|
|
|
|
IDBConnection $dbConn) {
|
|
|
|
$this->userManager = $userManager;
|
|
|
|
$this->groupManager = $groupManager;
|
|
|
|
$this->dbConn = $dbConn;
|
|
|
|
|
|
|
|
$this->userManager->listen('\OC\User', 'postDelete', function($user) {
|
|
|
|
$this->post_deleteUser($user);
|
|
|
|
});
|
|
|
|
$this->groupManager->listen('\OC\Group', 'postDelete', function($group) {
|
2018-03-02 14:21:35 +00:00
|
|
|
$this->post_deleteGroup($group);
|
2015-08-13 19:31:38 +00:00
|
|
|
});
|
|
|
|
}
|
2012-07-09 19:51:19 +00:00
|
|
|
|
|
|
|
/**
|
2014-05-19 15:50:53 +00:00
|
|
|
* add a SubAdmin
|
2015-08-13 19:31:38 +00:00
|
|
|
* @param IUser $user user to be SubAdmin
|
|
|
|
* @param IGroup $group group $user becomes subadmin of
|
2012-07-09 19:51:19 +00:00
|
|
|
*/
|
2019-01-29 09:38:05 +00:00
|
|
|
public function createSubAdmin(IUser $user, IGroup $group): void {
|
2015-08-13 19:31:38 +00:00
|
|
|
$qb = $this->dbConn->getQueryBuilder();
|
|
|
|
|
2015-10-27 13:09:45 +00:00
|
|
|
$qb->insert('group_admin')
|
2015-08-13 19:31:38 +00:00
|
|
|
->values([
|
|
|
|
'gid' => $qb->createNamedParameter($group->getGID()),
|
|
|
|
'uid' => $qb->createNamedParameter($user->getUID())
|
|
|
|
])
|
|
|
|
->execute();
|
|
|
|
|
|
|
|
$this->emit('\OC\SubAdmin', 'postCreateSubAdmin', [$user, $group]);
|
|
|
|
\OC_Hook::emit("OC_SubAdmin", "post_createSubAdmin", ["gid" => $group->getGID()]);
|
2012-07-09 19:51:19 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2014-05-19 15:50:53 +00:00
|
|
|
* delete a SubAdmin
|
2015-08-13 19:31:38 +00:00
|
|
|
* @param IUser $user the user that is the SubAdmin
|
|
|
|
* @param IGroup $group the group
|
2012-07-09 19:51:19 +00:00
|
|
|
*/
|
2019-01-29 09:38:05 +00:00
|
|
|
public function deleteSubAdmin(IUser $user, IGroup $group): void {
|
2015-08-13 19:31:38 +00:00
|
|
|
$qb = $this->dbConn->getQueryBuilder();
|
|
|
|
|
2015-10-27 13:09:45 +00:00
|
|
|
$qb->delete('group_admin')
|
2015-08-13 19:31:38 +00:00
|
|
|
->where($qb->expr()->eq('gid', $qb->createNamedParameter($group->getGID())))
|
|
|
|
->andWhere($qb->expr()->eq('uid', $qb->createNamedParameter($user->getUID())))
|
|
|
|
->execute();
|
|
|
|
|
|
|
|
$this->emit('\OC\SubAdmin', 'postDeleteSubAdmin', [$user, $group]);
|
|
|
|
\OC_Hook::emit("OC_SubAdmin", "post_deleteSubAdmin", ["gid" => $group->getGID()]);
|
2012-07-09 19:51:19 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2014-05-19 15:50:53 +00:00
|
|
|
* get groups of a SubAdmin
|
2015-08-13 19:31:38 +00:00
|
|
|
* @param IUser $user the SubAdmin
|
|
|
|
* @return IGroup[]
|
2012-07-09 19:51:19 +00:00
|
|
|
*/
|
2019-01-29 09:38:05 +00:00
|
|
|
public function getSubAdminsGroups(IUser $user): array {
|
2015-08-13 19:31:38 +00:00
|
|
|
$qb = $this->dbConn->getQueryBuilder();
|
|
|
|
|
|
|
|
$result = $qb->select('gid')
|
|
|
|
->from('group_admin')
|
|
|
|
->where($qb->expr()->eq('uid', $qb->createNamedParameter($user->getUID())))
|
|
|
|
->execute();
|
|
|
|
|
|
|
|
$groups = [];
|
|
|
|
while($row = $result->fetch()) {
|
2015-11-05 10:50:57 +00:00
|
|
|
$group = $this->groupManager->get($row['gid']);
|
|
|
|
if(!is_null($group)) {
|
2018-03-02 14:21:35 +00:00
|
|
|
$groups[$group->getGID()] = $group;
|
2015-11-05 10:50:57 +00:00
|
|
|
}
|
2012-07-09 19:51:19 +00:00
|
|
|
}
|
2015-10-28 08:09:16 +00:00
|
|
|
$result->closeCursor();
|
2015-08-13 19:31:38 +00:00
|
|
|
|
|
|
|
return $groups;
|
2012-07-09 19:51:19 +00:00
|
|
|
}
|
|
|
|
|
2018-03-02 14:21:35 +00:00
|
|
|
/**
|
|
|
|
* get an array of groupid and displayName for a user
|
|
|
|
* @param IUser $user
|
|
|
|
* @return array ['displayName' => displayname]
|
|
|
|
*/
|
2019-01-29 09:38:05 +00:00
|
|
|
public function getSubAdminsGroupsName(IUser $user): array {
|
2018-03-02 14:21:35 +00:00
|
|
|
return array_map(function($group) {
|
|
|
|
return array('displayName' => $group->getDisplayName());
|
|
|
|
}, $this->getSubAdminsGroups($user));
|
|
|
|
}
|
|
|
|
|
2012-07-09 19:51:19 +00:00
|
|
|
/**
|
2014-05-19 15:50:53 +00:00
|
|
|
* get SubAdmins of a group
|
2015-08-13 19:31:38 +00:00
|
|
|
* @param IGroup $group the group
|
|
|
|
* @return IUser[]
|
2012-07-09 19:51:19 +00:00
|
|
|
*/
|
2019-01-29 09:38:05 +00:00
|
|
|
public function getGroupsSubAdmins(IGroup $group): array {
|
2015-08-13 19:31:38 +00:00
|
|
|
$qb = $this->dbConn->getQueryBuilder();
|
|
|
|
|
|
|
|
$result = $qb->select('uid')
|
|
|
|
->from('group_admin')
|
|
|
|
->where($qb->expr()->eq('gid', $qb->createNamedParameter($group->getGID())))
|
|
|
|
->execute();
|
|
|
|
|
|
|
|
$users = [];
|
|
|
|
while($row = $result->fetch()) {
|
2015-11-05 10:50:57 +00:00
|
|
|
$user = $this->userManager->get($row['uid']);
|
|
|
|
if(!is_null($user)) {
|
|
|
|
$users[] = $user;
|
|
|
|
}
|
2012-07-09 19:51:19 +00:00
|
|
|
}
|
2015-10-28 08:09:16 +00:00
|
|
|
$result->closeCursor();
|
2015-08-13 19:31:38 +00:00
|
|
|
|
|
|
|
return $users;
|
2012-07-09 19:51:19 +00:00
|
|
|
}
|
2012-08-29 06:38:33 +00:00
|
|
|
|
2012-07-09 19:51:19 +00:00
|
|
|
/**
|
2014-05-19 15:50:53 +00:00
|
|
|
* get all SubAdmins
|
2012-07-09 19:51:19 +00:00
|
|
|
* @return array
|
|
|
|
*/
|
2019-01-29 09:38:05 +00:00
|
|
|
public function getAllSubAdmins(): array {
|
2015-08-13 19:31:38 +00:00
|
|
|
$qb = $this->dbConn->getQueryBuilder();
|
|
|
|
|
|
|
|
$result = $qb->select('*')
|
|
|
|
->from('group_admin')
|
|
|
|
->execute();
|
|
|
|
|
|
|
|
$subadmins = [];
|
|
|
|
while($row = $result->fetch()) {
|
2015-11-05 10:50:57 +00:00
|
|
|
$user = $this->userManager->get($row['uid']);
|
|
|
|
$group = $this->groupManager->get($row['gid']);
|
|
|
|
if(!is_null($user) && !is_null($group)) {
|
|
|
|
$subadmins[] = [
|
|
|
|
'user' => $user,
|
|
|
|
'group' => $group
|
|
|
|
];
|
|
|
|
}
|
2012-07-09 19:51:19 +00:00
|
|
|
}
|
2015-10-28 08:09:16 +00:00
|
|
|
$result->closeCursor();
|
|
|
|
|
2012-07-09 19:51:19 +00:00
|
|
|
return $subadmins;
|
|
|
|
}
|
2012-08-29 06:38:33 +00:00
|
|
|
|
2012-07-15 14:31:28 +00:00
|
|
|
/**
|
2014-05-19 15:50:53 +00:00
|
|
|
* checks if a user is a SubAdmin of a group
|
2018-03-02 14:21:35 +00:00
|
|
|
* @param IUser $user
|
2015-08-13 19:31:38 +00:00
|
|
|
* @param IGroup $group
|
2012-07-19 14:43:46 +00:00
|
|
|
* @return bool
|
2012-07-15 14:31:28 +00:00
|
|
|
*/
|
2019-01-29 09:38:05 +00:00
|
|
|
public function isSubAdminOfGroup(IUser $user, IGroup $group): bool {
|
2015-08-13 19:31:38 +00:00
|
|
|
$qb = $this->dbConn->getQueryBuilder();
|
|
|
|
|
2015-10-28 08:09:16 +00:00
|
|
|
/*
|
|
|
|
* Primary key is ('gid', 'uid') so max 1 result possible here
|
|
|
|
*/
|
2015-08-13 19:31:38 +00:00
|
|
|
$result = $qb->select('*')
|
|
|
|
->from('group_admin')
|
|
|
|
->where($qb->expr()->eq('gid', $qb->createNamedParameter($group->getGID())))
|
|
|
|
->andWhere($qb->expr()->eq('uid', $qb->createNamedParameter($user->getUID())))
|
|
|
|
->execute();
|
|
|
|
|
2015-10-28 08:09:16 +00:00
|
|
|
$fetch = $result->fetch();
|
|
|
|
$result->closeCursor();
|
|
|
|
$result = !empty($fetch) ? true : false;
|
|
|
|
|
|
|
|
return $result;
|
2012-07-15 14:31:28 +00:00
|
|
|
}
|
2012-08-29 06:38:33 +00:00
|
|
|
|
2012-07-19 14:43:46 +00:00
|
|
|
/**
|
2014-05-19 15:50:53 +00:00
|
|
|
* checks if a user is a SubAdmin
|
2018-03-02 14:21:35 +00:00
|
|
|
* @param IUser $user
|
2012-07-19 14:43:46 +00:00
|
|
|
* @return bool
|
|
|
|
*/
|
2019-01-29 09:38:05 +00:00
|
|
|
public function isSubAdmin(IUser $user): bool {
|
2013-01-14 18:45:17 +00:00
|
|
|
// Check if the user is already an admin
|
2015-08-13 19:31:38 +00:00
|
|
|
if ($this->groupManager->isAdmin($user->getUID())) {
|
2013-01-14 18:45:17 +00:00
|
|
|
return true;
|
|
|
|
}
|
|
|
|
|
2015-08-13 19:31:38 +00:00
|
|
|
$qb = $this->dbConn->getQueryBuilder();
|
|
|
|
|
|
|
|
$result = $qb->select('gid')
|
|
|
|
->from('group_admin')
|
|
|
|
->andWhere($qb->expr()->eq('uid', $qb->createNamedParameter($user->getUID())))
|
|
|
|
->setMaxResults(1)
|
2015-10-28 08:09:16 +00:00
|
|
|
->execute();
|
|
|
|
|
|
|
|
$isSubAdmin = $result->fetch();
|
|
|
|
$result->closeCursor();
|
|
|
|
|
2018-01-26 11:36:25 +00:00
|
|
|
return $isSubAdmin !== false;
|
2012-07-15 14:31:28 +00:00
|
|
|
}
|
2012-08-29 06:38:33 +00:00
|
|
|
|
2012-07-19 14:43:46 +00:00
|
|
|
/**
|
2014-05-19 15:50:53 +00:00
|
|
|
* checks if a user is a accessible by a subadmin
|
2015-08-13 19:31:38 +00:00
|
|
|
* @param IUser $subadmin
|
|
|
|
* @param IUser $user
|
2012-07-19 14:43:46 +00:00
|
|
|
* @return bool
|
|
|
|
*/
|
2019-01-29 09:38:05 +00:00
|
|
|
public function isUserAccessible(IUser $subadmin, IUser $user): bool {
|
2015-08-13 19:31:38 +00:00
|
|
|
if(!$this->isSubAdmin($subadmin)) {
|
2012-07-19 14:30:58 +00:00
|
|
|
return false;
|
|
|
|
}
|
2015-08-13 19:31:38 +00:00
|
|
|
if($this->groupManager->isAdmin($user->getUID())) {
|
2012-08-26 14:29:10 +00:00
|
|
|
return false;
|
|
|
|
}
|
2015-10-27 13:09:45 +00:00
|
|
|
$accessibleGroups = $this->getSubAdminsGroups($subadmin);
|
|
|
|
foreach($accessibleGroups as $accessibleGroup) {
|
|
|
|
if($accessibleGroup->inGroup($user)) {
|
2012-07-19 14:30:58 +00:00
|
|
|
return true;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
return false;
|
|
|
|
}
|
2012-08-29 06:38:33 +00:00
|
|
|
|
2012-07-21 14:43:39 +00:00
|
|
|
/**
|
2015-08-13 19:31:38 +00:00
|
|
|
* delete all SubAdmins by $user
|
|
|
|
* @param IUser $user
|
2012-07-21 14:43:39 +00:00
|
|
|
*/
|
2019-01-29 09:38:05 +00:00
|
|
|
private function post_deleteUser(IUser $user) {
|
2015-08-13 19:31:38 +00:00
|
|
|
$qb = $this->dbConn->getQueryBuilder();
|
|
|
|
|
2015-10-27 13:09:45 +00:00
|
|
|
$qb->delete('group_admin')
|
2015-08-13 19:31:38 +00:00
|
|
|
->where($qb->expr()->eq('uid', $qb->createNamedParameter($user->getUID())))
|
|
|
|
->execute();
|
2012-07-21 14:43:39 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2015-08-13 19:31:38 +00:00
|
|
|
* delete all SubAdmins by $group
|
|
|
|
* @param IGroup $group
|
2012-07-21 14:43:39 +00:00
|
|
|
*/
|
2019-01-29 09:38:05 +00:00
|
|
|
private function post_deleteGroup(IGroup $group) {
|
2015-08-13 19:31:38 +00:00
|
|
|
$qb = $this->dbConn->getQueryBuilder();
|
|
|
|
|
2015-10-27 13:09:45 +00:00
|
|
|
$qb->delete('group_admin')
|
2015-08-13 19:31:38 +00:00
|
|
|
->where($qb->expr()->eq('gid', $qb->createNamedParameter($group->getGID())))
|
|
|
|
->execute();
|
2012-07-21 14:43:39 +00:00
|
|
|
}
|
2012-07-09 19:51:19 +00:00
|
|
|
}
|