* @copyright 2007-2018 PrestaShop SA * @license https://opensource.org/licenses/OSL-3.0 Open Software License (OSL 3.0) * International Registered Trademark & Property of PrestaShop SA */ /** * Class ProfileCore. */ class ProfileCore extends ObjectModel { /** @var string Name */ public $name; /** * @see ObjectModel::$definition */ public static $definition = array( 'table' => 'profile', 'primary' => 'id_profile', 'multilang' => true, 'fields' => array( /* Lang fields */ 'name' => array('type' => self::TYPE_STRING, 'lang' => true, 'validate' => 'isGenericName', 'required' => true, 'size' => 32), ), ); protected static $_cache_accesses = array(); /** * Get all available profiles. * * @return array Profiles */ public static function getProfiles($idLang) { return Db::getInstance(_PS_USE_SQL_SLAVE_)->executeS(' SELECT p.`id_profile`, `name` FROM `' . _DB_PREFIX_ . 'profile` p LEFT JOIN `' . _DB_PREFIX_ . 'profile_lang` pl ON (p.`id_profile` = pl.`id_profile` AND `id_lang` = ' . (int) $idLang . ') ORDER BY `id_profile` ASC'); } /** * Get the current profile name. * * @param int $idProfile Profile ID * @param null $idLang Language ID * * @return string Profile */ public static function getProfile($idProfile, $idLang = null) { if (!$idLang) { $idLang = Configuration::get('PS_LANG_DEFAULT'); } return Db::getInstance(_PS_USE_SQL_SLAVE_)->getRow(' SELECT `name` FROM `' . _DB_PREFIX_ . 'profile` p LEFT JOIN `' . _DB_PREFIX_ . 'profile_lang` pl ON (p.`id_profile` = pl.`id_profile`) WHERE p.`id_profile` = ' . (int) $idProfile . ' AND pl.`id_lang` = ' . (int) $idLang ); } public function add($autodate = true, $null_values = false) { return parent::add($autodate, true); } public function delete() { if (parent::delete()) { return Db::getInstance()->execute('DELETE FROM `' . _DB_PREFIX_ . 'access` WHERE `id_profile` = ' . (int) $this->id) && Db::getInstance()->execute('DELETE FROM `' . _DB_PREFIX_ . 'module_access` WHERE `id_profile` = ' . (int) $this->id) ; } return false; } /** * Get access profile. * * @param int $idProfile Profile ID * @param int $idTab Tab ID * * @return bool */ public static function getProfileAccess($idProfile, $idTab) { // getProfileAccesses is cached so there is no performance leak $accesses = Profile::getProfileAccesses($idProfile); return isset($accesses[$idTab]) ? $accesses[$idTab] : false; } /** * Get access profiles. * * @param int $idProfile Profile ID * @param string $type Type * * @return bool */ public static function getProfileAccesses($idProfile, $type = 'id_tab') { if (!in_array($type, array('id_tab', 'class_name'))) { return false; } if (!isset(self::$_cache_accesses[$idProfile])) { self::$_cache_accesses[$idProfile] = array(); } if (!isset(self::$_cache_accesses[$idProfile][$type])) { self::$_cache_accesses[$idProfile][$type] = array(); // Super admin profile has full auth if ($idProfile == _PS_ADMIN_PROFILE_) { self::fillCacheAccesses( $idProfile, $type, array( 'id_profile' => _PS_ADMIN_PROFILE_, 'view' => '1', 'add' => '1', 'edit' => '1', 'delete' => '1', ) ); } else { self::fillCacheAccesses( $idProfile, $type, array( 'id_profile' => $idProfile, 'view' => '0', 'add' => '0', 'edit' => '0', 'delete' => '0', ) ); $result = Db::getInstance()->executeS(' SELECT `slug`, `slug` LIKE "%CREATE" as "add", `slug` LIKE "%READ" as "view", `slug` LIKE "%UPDATE" as "edit", `slug` LIKE "%DELETE" as "delete" FROM `' . _DB_PREFIX_ . 'authorization_role` a LEFT JOIN `' . _DB_PREFIX_ . 'access` j ON j.id_authorization_role = a.id_authorization_role WHERE j.`id_profile` = ' . (int) $idProfile); foreach ($result as $row) { $tab = self::findTabTypeInformationByAuthSlug($type, $row['slug']); self::$_cache_accesses[$idProfile][$type][$tab][array_search('1', $row)] = '1'; } } } return self::$_cache_accesses[$idProfile][$type]; } public static function resetCacheAccesses() { self::$_cache_accesses = array(); } /** * @param int $idProfile Profile ID * @param string $type Type * @param array $cacheData Cached data */ private static function fillCacheAccesses($idProfile, $type, $cacheData = []) { foreach (Tab::getTabs(Context::getContext()->language->id) as $tab) { self::$_cache_accesses[$idProfile][$type][$tab[$type]] = array_merge( array( 'id_tab' => $tab['id_tab'], 'class_name' => $tab['class_name'], ), $cacheData ); } } /** * Find tab type information by authorization slug. * * @param string $type * @param string $authSlug * * @return int */ private static function findTabTypeInformationByAuthSlug($type, $authSlug) { preg_match( '/ROLE_MOD_[A-Z]+_(?P[A-Z][A-Z0-9]*)_(?P[A-Z]+)/', $authSlug, $matches ); $result = Db::getInstance()->getRow(' SELECT `' . $type . '` FROM `' . _DB_PREFIX_ . 'tab` t WHERE UCASE(`class_name`) = "' . $matches['classname'] . '" '); return $result[$type]; } }