BxDolStudioPermissionsQuery.php 5.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148
  1. <?php defined('BX_DOL') or die('hack attempt');
  2. /**
  3. * Copyright (c) UNA, Inc - https://una.io
  4. * MIT License - https://opensource.org/licenses/MIT
  5. *
  6. * @defgroup UnaStudio UNA Studio
  7. * @{
  8. */
  9. class BxDolStudioPermissionsQuery extends BxDolAclQuery
  10. {
  11. function __construct()
  12. {
  13. parent::__construct();
  14. }
  15. function isLevelUsed($iId)
  16. {
  17. $sSql = $this->prepare("SELECT UNIX_TIMESTAMP(MAX(`DateExpires`)) as `MaxDateExpires` FROM `sys_acl_levels_members` WHERE `IDLevel`=?", $iId);
  18. return (int)$this->getOne($sSql) > time();
  19. }
  20. function getLevelOrderMax()
  21. {
  22. return (int)$this->getOne("SELECT MAX(`Order`) FROM `sys_acl_levels` WHERE 1");
  23. }
  24. function updateLevels($iId, $aFields)
  25. {
  26. $sSql = "UPDATE `sys_acl_levels` SET `" . implode("`=?, `", array_keys($aFields)) . "`=? WHERE `ID`=?";
  27. $sSql = call_user_func_array(array($this, 'prepare'), array_merge(array($sSql), array_values($aFields), array($iId)));
  28. return (int)$this->query($sSql) > 0;
  29. }
  30. function deleteLevel($aParams)
  31. {
  32. $aBindings = array();
  33. $sWhereClause = $sLimitClause = "";
  34. switch($aParams['type']) {
  35. case 'by_id':
  36. $aBindings = array(
  37. 'level_id' => $aParams['value']
  38. );
  39. $sWhereClause .= "AND `tal`.`ID`=:level_id";
  40. break;
  41. }
  42. $sSql = "DELETE FROM `tal`, `tam`
  43. USING `sys_acl_levels` AS `tal`
  44. LEFT JOIN `sys_acl_matrix` AS `tam` ON `tal`.`ID`=`tam`.`IDLevel`
  45. WHERE 1 " . $sWhereClause . " " . $sLimitClause;
  46. return (int)$this->query($sSql, $aBindings) > 0;
  47. }
  48. function switchAction($iLevelId, $iActionId, $bEnable, $aParamsAdd = array())
  49. {
  50. $aBindings = array(
  51. 'IDLevel' => $iLevelId,
  52. 'IDAction' => $iActionId
  53. );
  54. if($bEnable) {
  55. $sSql = "INSERT INTO `sys_acl_matrix` SET `IDLevel`=:IDLevel, `IDAction`=:IDAction";
  56. if(!empty($aParamsAdd) && is_array($aParamsAdd)) {
  57. $aParamsAddResult = array();
  58. foreach($aParamsAdd as $sKey => $mixedValue)
  59. if(!is_null($mixedValue))
  60. $aParamsAddResult[$sKey] = $mixedValue;
  61. if(!empty($aParamsAddResult))
  62. $sSql .= ", " . $this->arrayToSQL($aParamsAddResult);
  63. }
  64. }
  65. else
  66. $sSql = "DELETE FROM `sys_acl_matrix` WHERE `IDLevel`=:IDLevel AND `IDAction`=:IDAction";
  67. return (int)$this->query($sSql, $aBindings) > 0;
  68. }
  69. function getOptions($aParams, &$aItems, $bReturnCount = true)
  70. {
  71. $aMethod = array('name' => 'getAll', 'params' => array(0 => 'query'));
  72. $sSelectClause = $sJoinClause = $sWhereClause = $sOrderClause = $sLimitClause = "";
  73. if(!isset($aParams['order']) || empty($aParams['order']))
  74. $sOrderClause = "ORDER BY `tam`.`IDAction` ASC";
  75. switch($aParams['type']) {
  76. case 'by_level_action_ids':
  77. $aMethod['name'] = 'getRow';
  78. $aMethod['params'][1] = array(
  79. 'level_id' => $aParams['level_id'],
  80. 'action_id' => $aParams['action_id']
  81. );
  82. $sSelectClause = ", `taa`.`Title` AS `action_title`, `taa`.`Countable` AS `action_countable`";
  83. $sJoinClause = "LEFT JOIN `sys_acl_actions` AS `taa` ON `tam`.`IDAction`=`taa`.`ID` ";
  84. $sWhereClause = " AND `tam`.`IDLevel`=:level_id AND `tam`.`IDAction`=:action_id ";
  85. break;
  86. }
  87. $aMethod['params'][0] = "SELECT " . ($bReturnCount ? "SQL_CALC_FOUND_ROWS" : "") . "
  88. `tam`.`IDLevel` AS `level_id`,
  89. `tam`.`IDAction` AS `action_id`,
  90. `tam`.`AllowedCount` AS `allowed_count`,
  91. `tam`.`AllowedPeriodLen` AS `allowed_period_len`,
  92. `tam`.`AllowedPeriodStart` AS `allowed_period_start`,
  93. `tam`.`AllowedPeriodEnd` AS `allowed_period_end`,
  94. `tam`.`AdditionalParamValue` AS `additional_param_value`" . $sSelectClause . "
  95. FROM `sys_acl_matrix` AS `tam` " . $sJoinClause . "
  96. WHERE 1 " . $sWhereClause . " " . $sOrderClause . " " . $sLimitClause;
  97. $aItems = call_user_func_array(array($this, $aMethod['name']), $aMethod['params']);
  98. if(!$bReturnCount)
  99. return !empty($aItems);
  100. return (int)$this->getOne("SELECT FOUND_ROWS()");
  101. }
  102. function updateOptions($iLevelId, $iActionId, $aFields)
  103. {
  104. $sSql = "UPDATE `sys_acl_matrix` SET `" . implode("`=?, `", array_keys($aFields)) . "`=? WHERE `IDLevel`=? AND `IDAction`=?";
  105. $sSql = call_user_func_array(array($this, 'prepare'), array_merge(array($sSql), array_values($aFields), array($iLevelId, $iActionId)));
  106. return (int)$this->query($sSql) > 0;
  107. }
  108. function deleteActions($aParams)
  109. {
  110. $aBindings = array();
  111. $sWhereClause = "";
  112. switch($aParams['type']) {
  113. case 'by_level_id':
  114. $aBindings = array(
  115. 'level_id' => $aParams['value']
  116. );
  117. $sWhereClause .= "AND `IDLevel`=:level_id";
  118. break;
  119. }
  120. return (int)$this->query("DELETE FROM `sys_acl_matrix` WHERE 1 " . $sWhereClause, $aBindings) > 0;
  121. }
  122. }
  123. /** @} */