235 lines
7.1 KiB
PHP
235 lines
7.1 KiB
PHP
<?php
|
|
/**
|
|
* 2007-2018 PrestaShop.
|
|
*
|
|
* NOTICE OF LICENSE
|
|
*
|
|
* This source file is subject to the Open Software License (OSL 3.0)
|
|
* that is bundled with this package in the file LICENSE.txt.
|
|
* It is also available through the world-wide-web at this URL:
|
|
* https://opensource.org/licenses/OSL-3.0
|
|
* If you did not receive a copy of the license and are unable to
|
|
* obtain it through the world-wide-web, please send an email
|
|
* to license@prestashop.com so we can send you a copy immediately.
|
|
*
|
|
* DISCLAIMER
|
|
*
|
|
* Do not edit or add to this file if you wish to upgrade PrestaShop to newer
|
|
* versions in the future. If you wish to customize PrestaShop for your
|
|
* needs please refer to http://www.prestashop.com for more information.
|
|
*
|
|
* @author PrestaShop SA <contact@prestashop.com>
|
|
* @copyright 2007-2018 PrestaShop SA
|
|
* @license https://opensource.org/licenses/OSL-3.0 Open Software License (OSL 3.0)
|
|
* International Registered Trademark & Property of PrestaShop SA
|
|
*/
|
|
|
|
/**
|
|
* Class ProfileCore.
|
|
*/
|
|
class ProfileCore extends ObjectModel
|
|
{
|
|
/** @var string Name */
|
|
public $name;
|
|
|
|
/**
|
|
* @see ObjectModel::$definition
|
|
*/
|
|
public static $definition = array(
|
|
'table' => 'profile',
|
|
'primary' => 'id_profile',
|
|
'multilang' => true,
|
|
'fields' => array(
|
|
/* Lang fields */
|
|
'name' => array('type' => self::TYPE_STRING, 'lang' => true, 'validate' => 'isGenericName', 'required' => true, 'size' => 32),
|
|
),
|
|
);
|
|
|
|
protected static $_cache_accesses = array();
|
|
|
|
/**
|
|
* Get all available profiles.
|
|
*
|
|
* @return array Profiles
|
|
*/
|
|
public static function getProfiles($idLang)
|
|
{
|
|
return Db::getInstance(_PS_USE_SQL_SLAVE_)->executeS('
|
|
SELECT p.`id_profile`, `name`
|
|
FROM `' . _DB_PREFIX_ . 'profile` p
|
|
LEFT JOIN `' . _DB_PREFIX_ . 'profile_lang` pl ON (p.`id_profile` = pl.`id_profile` AND `id_lang` = ' . (int) $idLang . ')
|
|
ORDER BY `id_profile` ASC');
|
|
}
|
|
|
|
/**
|
|
* Get the current profile name.
|
|
*
|
|
* @param int $idProfile Profile ID
|
|
* @param null $idLang Language ID
|
|
*
|
|
* @return string Profile
|
|
*/
|
|
public static function getProfile($idProfile, $idLang = null)
|
|
{
|
|
if (!$idLang) {
|
|
$idLang = Configuration::get('PS_LANG_DEFAULT');
|
|
}
|
|
|
|
return Db::getInstance(_PS_USE_SQL_SLAVE_)->getRow('
|
|
SELECT `name`
|
|
FROM `' . _DB_PREFIX_ . 'profile` p
|
|
LEFT JOIN `' . _DB_PREFIX_ . 'profile_lang` pl ON (p.`id_profile` = pl.`id_profile`)
|
|
WHERE p.`id_profile` = ' . (int) $idProfile . '
|
|
AND pl.`id_lang` = ' . (int) $idLang
|
|
);
|
|
}
|
|
|
|
public function add($autodate = true, $null_values = false)
|
|
{
|
|
return parent::add($autodate, true);
|
|
}
|
|
|
|
public function delete()
|
|
{
|
|
if (parent::delete()) {
|
|
return
|
|
Db::getInstance()->execute('DELETE FROM `' . _DB_PREFIX_ . 'access` WHERE `id_profile` = ' . (int) $this->id)
|
|
&& Db::getInstance()->execute('DELETE FROM `' . _DB_PREFIX_ . 'module_access` WHERE `id_profile` = ' . (int) $this->id)
|
|
;
|
|
}
|
|
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Get access profile.
|
|
*
|
|
* @param int $idProfile Profile ID
|
|
* @param int $idTab Tab ID
|
|
*
|
|
* @return bool
|
|
*/
|
|
public static function getProfileAccess($idProfile, $idTab)
|
|
{
|
|
// getProfileAccesses is cached so there is no performance leak
|
|
$accesses = Profile::getProfileAccesses($idProfile);
|
|
|
|
return isset($accesses[$idTab]) ? $accesses[$idTab] : false;
|
|
}
|
|
|
|
/**
|
|
* Get access profiles.
|
|
*
|
|
* @param int $idProfile Profile ID
|
|
* @param string $type Type
|
|
*
|
|
* @return bool
|
|
*/
|
|
public static function getProfileAccesses($idProfile, $type = 'id_tab')
|
|
{
|
|
if (!in_array($type, array('id_tab', 'class_name'))) {
|
|
return false;
|
|
}
|
|
|
|
if (!isset(self::$_cache_accesses[$idProfile])) {
|
|
self::$_cache_accesses[$idProfile] = array();
|
|
}
|
|
|
|
if (!isset(self::$_cache_accesses[$idProfile][$type])) {
|
|
self::$_cache_accesses[$idProfile][$type] = array();
|
|
// Super admin profile has full auth
|
|
if ($idProfile == _PS_ADMIN_PROFILE_) {
|
|
self::fillCacheAccesses(
|
|
$idProfile,
|
|
$type,
|
|
array(
|
|
'id_profile' => _PS_ADMIN_PROFILE_,
|
|
'view' => '1',
|
|
'add' => '1',
|
|
'edit' => '1',
|
|
'delete' => '1',
|
|
)
|
|
);
|
|
} else {
|
|
self::fillCacheAccesses(
|
|
$idProfile,
|
|
$type,
|
|
array(
|
|
'id_profile' => $idProfile,
|
|
'view' => '0',
|
|
'add' => '0',
|
|
'edit' => '0',
|
|
'delete' => '0',
|
|
)
|
|
);
|
|
|
|
$result = Db::getInstance()->executeS('
|
|
SELECT `slug`,
|
|
`slug` LIKE "%CREATE" as "add",
|
|
`slug` LIKE "%READ" as "view",
|
|
`slug` LIKE "%UPDATE" as "edit",
|
|
`slug` LIKE "%DELETE" as "delete"
|
|
FROM `' . _DB_PREFIX_ . 'authorization_role` a
|
|
LEFT JOIN `' . _DB_PREFIX_ . 'access` j ON j.id_authorization_role = a.id_authorization_role
|
|
WHERE j.`id_profile` = ' . (int) $idProfile);
|
|
|
|
foreach ($result as $row) {
|
|
$tab = self::findTabTypeInformationByAuthSlug($type, $row['slug']);
|
|
|
|
self::$_cache_accesses[$idProfile][$type][$tab][array_search('1', $row)] = '1';
|
|
}
|
|
}
|
|
}
|
|
|
|
return self::$_cache_accesses[$idProfile][$type];
|
|
}
|
|
|
|
public static function resetCacheAccesses()
|
|
{
|
|
self::$_cache_accesses = array();
|
|
}
|
|
|
|
/**
|
|
* @param int $idProfile Profile ID
|
|
* @param string $type Type
|
|
* @param array $cacheData Cached data
|
|
*/
|
|
private static function fillCacheAccesses($idProfile, $type, $cacheData = [])
|
|
{
|
|
foreach (Tab::getTabs(Context::getContext()->language->id) as $tab) {
|
|
self::$_cache_accesses[$idProfile][$type][$tab[$type]] = array_merge(
|
|
array(
|
|
'id_tab' => $tab['id_tab'],
|
|
'class_name' => $tab['class_name'],
|
|
),
|
|
$cacheData
|
|
);
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Find tab type information by authorization slug.
|
|
*
|
|
* @param string $type
|
|
* @param string $authSlug
|
|
*
|
|
* @return int
|
|
*/
|
|
private static function findTabTypeInformationByAuthSlug($type, $authSlug)
|
|
{
|
|
preg_match(
|
|
'/ROLE_MOD_[A-Z]+_(?P<classname>[A-Z][A-Z0-9]*)_(?P<auth>[A-Z]+)/',
|
|
$authSlug,
|
|
$matches
|
|
);
|
|
|
|
$result = Db::getInstance()->getRow('
|
|
SELECT `' . $type . '`
|
|
FROM `' . _DB_PREFIX_ . 'tab` t
|
|
WHERE UCASE(`class_name`) = "' . $matches['classname'] . '"
|
|
');
|
|
|
|
return $result[$type];
|
|
}
|
|
}
|