added authorized services
This commit is contained in:
Roland Gruber
parent
16ca205148
commit
c33e212295
Binary file not shown.
|
After Width: | Height: | Size: 2.2 KiB |
|
|
@ -0,0 +1,309 @@
|
|||
<?php
|
||||
/*
|
||||
$Id$
|
||||
|
||||
This code is not yet part of LDAP Account Manager (http://www.ldap-account-manager.org/)
|
||||
Copyright (C) 2011 J de Jong
|
||||
|
||||
This program is free software; you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation; either version 2 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program; if not, write to the Free Software
|
||||
Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
||||
|
||||
*/
|
||||
|
||||
|
||||
/**
|
||||
* Provides Authorized Service for accounts.
|
||||
*
|
||||
* @package modules
|
||||
* @author J de Jong
|
||||
*/
|
||||
|
||||
/**
|
||||
* Provides Authorized Service for accounts.
|
||||
*
|
||||
* @package modules
|
||||
*/
|
||||
class authorizedServiceObject extends baseModule {
|
||||
|
||||
/**
|
||||
* Creates a new authorizedServiceObject object.
|
||||
*
|
||||
* @param string $scope account type (user, group, host)
|
||||
*/
|
||||
function __construct($scope) {
|
||||
// call parent constructor
|
||||
parent::__construct($scope);
|
||||
$this->autoAddObjectClasses = false;
|
||||
}
|
||||
|
||||
|
||||
/**
|
||||
* Returns meta data that is interpreted by parent class
|
||||
*
|
||||
* @return array array with meta data
|
||||
*/
|
||||
function get_metaData() {
|
||||
$return = array();
|
||||
// icon
|
||||
$return['icon'] = 'services.png';
|
||||
// manages user accounts
|
||||
$return["account_types"] = array("user");
|
||||
// alias name
|
||||
$return["alias"] = _("Authorized Services");
|
||||
// module dependencies
|
||||
$return['dependencies'] = array('depends' => array(), 'conflicts' => array());
|
||||
// managed object classes
|
||||
$return['objectClasses'] = array('authorizedServiceObject');
|
||||
// managed attributes
|
||||
$return['attributes'] = array('authorizedService');
|
||||
// help Entries
|
||||
$return['help'] = array (
|
||||
'authorizedService' => array (
|
||||
"Headline" => _("Authorized Services"),
|
||||
"Text" => _("Service name e.g. sshd, imap, ftp.... Enter one service per entry."). ' '. _("Use * for all services.")
|
||||
),
|
||||
'authorizedServices' => array (
|
||||
"Headline" => _("Authorized Services"),
|
||||
"Text" => _("Comma separated list of services (e.g. sshd, imap, ftp)."). ' '. _("Use * for all services.")
|
||||
),
|
||||
'autoAdd' => array(
|
||||
"Headline" => _("Automatically add this extension"),
|
||||
"Text" => _("This will enable the extension automatically if this profile is loaded.")
|
||||
)
|
||||
);
|
||||
// upload fields
|
||||
$return['upload_columns'] = array(
|
||||
array(
|
||||
'name' => 'authorizedService',
|
||||
'description' => _('Authorized Services'),
|
||||
'help' => 'authorizedServices',
|
||||
'example' => 'sshd, imap'
|
||||
)
|
||||
);
|
||||
// available PDF fields
|
||||
$return['PDF_fields'] = array(
|
||||
'authorizedService' => _('Authorized Services')
|
||||
);
|
||||
// profile options
|
||||
$profileContainer = new htmlTable();
|
||||
$profileContainer->addElement(new htmlTableExtendedInputField(_('Authorized Services'), 'authorizedServiceObject_services', null, 'authorizedServices'), true);
|
||||
$profileContainer->addElement(new htmlTableExtendedInputCheckbox('authorizedServiceObject_addExt', false, _('Automatically add this extension'), 'autoAdd'));
|
||||
$return['profile_options'] = $profileContainer;
|
||||
// profile checks
|
||||
$return['profile_checks']['authorizedServiceObject_services'] = array('type' => 'ext_preg', 'regex' => 'ascii',
|
||||
'error_message' => $this->messages['authorizedService'][0]);
|
||||
return $return;
|
||||
}
|
||||
|
||||
/**
|
||||
* This function fills the error message array with messages
|
||||
*/
|
||||
function load_Messages() {
|
||||
$this->messages['authorizedService'][0] = array('ERROR', 'Authorized services are invalid.'); // third array value is set dynamically
|
||||
$this->messages['authorizedService'][1] = array('ERROR', _('Account %s:') . ' authorizedService', _('Please enter a valid list of service names.'));
|
||||
}
|
||||
|
||||
/**
|
||||
* Returns a list of modifications which have to be made to the LDAP account.
|
||||
*
|
||||
* @return array list of modifications
|
||||
* <br>This function returns an array with 3 entries:
|
||||
* <br>array( DN1 ('add' => array($attr), 'remove' => array($attr), 'modify' => array($attr)), DN2 .... )
|
||||
* <br>DN is the DN to change. It may be possible to change several DNs (e.g. create a new user and add him to some groups via attribute memberUid)
|
||||
* <br>"add" are attributes which have to be added to LDAP entry
|
||||
* <br>"remove" are attributes which have to be removed from LDAP entry
|
||||
* <br>"modify" are attributes which have to been modified in LDAP entry
|
||||
* <br>"info" are values with informational value (e.g. to be used later by pre/postModify actions)
|
||||
*/
|
||||
function save_attributes() {
|
||||
if (!in_array('authorizedServiceObject', $this->attributes['objectClass']) && !in_array('authorizedServiceObject', $this->orig['objectClass'])) {
|
||||
// skip saving if the extension was not added/modified
|
||||
return array();
|
||||
}
|
||||
return parent::save_attributes();
|
||||
}
|
||||
|
||||
/**
|
||||
* Returns the HTML meta data for the main account page.
|
||||
*
|
||||
* @return htmlElement HTML meta data
|
||||
*/
|
||||
function display_html_attributes() {
|
||||
if (isset($_POST['form_subpage_authorizedServiceObject_attributes_addObjectClass'])) {
|
||||
$this->attributes['objectClass'][] = 'authorizedServiceObject';
|
||||
}
|
||||
$return = new htmlTable();
|
||||
if (in_array('authorizedServiceObject', $this->attributes['objectClass'])) {
|
||||
$ASCount = 0;
|
||||
// list current authorizedService's
|
||||
if (isset($this->attributes['authorizedService'])) {
|
||||
$ASCount = sizeof($this->attributes['authorizedService']);
|
||||
for ($i = 0; $i < sizeof($this->attributes['authorizedService']); $i++) {
|
||||
if ($i == 0) {
|
||||
$return->addElement(new htmlOutputText(_('Authorized Services')));
|
||||
}
|
||||
else {
|
||||
$return->addElement(new htmlOutputText(''));
|
||||
}
|
||||
$ASInput = new htmlInputField('authorizedService' . $i, $this->attributes['authorizedService'][$i]);
|
||||
$return->addElement($ASInput);
|
||||
$return->addElement(new htmlButton('delAS' . $i, 'del.png', true));
|
||||
$return->addElement(new htmlHelpLink('authorizedService'), true);
|
||||
}
|
||||
}
|
||||
// input box for new Service
|
||||
$return->addElement(new htmlOutputText(_('New Authorized Service')));
|
||||
$newASInput = new htmlInputField('authorizedService', '');
|
||||
$return->addElement($newASInput);
|
||||
$return->addElement(new htmlButton('addAS', 'add.png', true));
|
||||
$return->addElement(new htmlHelpLink('authorizedService'));
|
||||
$return->addElement(new htmlHiddenInput('as_number', $ASCount));
|
||||
$return->addElement(new htmlOutputText(''), true);
|
||||
|
||||
$return->addElement(new htmlSpacer(null, '10px'),true);
|
||||
$remButton = new htmlAccountPageButton('authorizedServiceObject', 'attributes', 'remObjectClass', _('Remove Authorized Service extension'));
|
||||
$remButton->colspan = 4;
|
||||
$return->addElement($remButton);
|
||||
}
|
||||
else {
|
||||
$return->addElement(new htmlAccountPageButton('authorizedServiceObject', 'attributes', 'addObjectClass', _('Add Authorized Service extension')));
|
||||
}
|
||||
|
||||
|
||||
return $return;
|
||||
}
|
||||
|
||||
/**
|
||||
* Processes user input of the primary module page.
|
||||
* It checks if all input values are correct and updates the associated LDAP attributes.
|
||||
*
|
||||
* @return array list of info/error messages
|
||||
*/
|
||||
function process_attributes() {
|
||||
if (isset($_POST['form_subpage_authorizedServiceObject_attributes_remObjectClass'])) {
|
||||
$this->attributes['objectClass'] = array_delete(array('authorizedServiceObject'), $this->attributes['objectClass']);
|
||||
if (isset($this->attributes['authorizedService'])) unset($this->attributes['authorizedService']);
|
||||
return array();
|
||||
}
|
||||
if (!in_array('authorizedServiceObject', $this->attributes['objectClass'])) {
|
||||
return array();
|
||||
}
|
||||
|
||||
|
||||
$errors = array();
|
||||
$this->attributes['authorizedService'] = array();
|
||||
// check old services
|
||||
if (isset($_POST['as_number'])) {
|
||||
for ($i = 0; $i < $_POST['as_number']; $i++) {
|
||||
if (isset($_POST['delAS' . $i])) continue;
|
||||
if (isset($_POST['authorizedService' . $i]) && ($_POST['authorizedService' . $i] != "")) {
|
||||
// check if service has correct format
|
||||
if (!get_preg($_POST['authorizedService' . $i], 'ascii')) {
|
||||
$message = $this->messages['authorizedService'][0];
|
||||
$message[] = $_POST['authorizedService' . $i];
|
||||
$errors[] = $message;
|
||||
}
|
||||
$this->attributes['authorizedService'][] = $_POST['authorizedService' . $i];
|
||||
}
|
||||
}
|
||||
}
|
||||
// check new authorizedService
|
||||
if (isset($_POST['authorizedService']) && ($_POST['authorizedService'] != "")) {
|
||||
// check if service has correct format
|
||||
if (get_preg($_POST['authorizedService'], 'ascii')) {
|
||||
$this->attributes['authorizedService'][] = $_POST['authorizedService'];
|
||||
}
|
||||
else {
|
||||
$message = $this->messages['authorizedService'][0];
|
||||
$message[] = $_POST['authorizedService'];
|
||||
$errors[] = $message;
|
||||
}
|
||||
}
|
||||
$this->attributes['authorizedService'] = array_unique($this->attributes['authorizedService']);
|
||||
return $errors;
|
||||
}
|
||||
|
||||
/**
|
||||
* In this function the LDAP account is built up.
|
||||
*
|
||||
* @param array $rawAccounts list of hash arrays (name => value) from user input
|
||||
* @param array $partialAccounts list of hash arrays (name => value) which are later added to LDAP
|
||||
* @param array $ids list of IDs for column position (e.g. "posixAccount_uid" => 5)
|
||||
* @param array $selectedModules list of selected account modules
|
||||
* @return array list of error messages if any
|
||||
*/
|
||||
function build_uploadAccounts($rawAccounts, $ids, &$partialAccounts, $selectedModules) {
|
||||
$messages = array();
|
||||
for ($i = 0; $i < sizeof($rawAccounts); $i++) {
|
||||
// add object class
|
||||
if (!in_array("authorizedServiceObject", $partialAccounts[$i]['objectClass'])) $partialAccounts[$i]['objectClass'][] = "authorizedServiceObject";
|
||||
// add ASs
|
||||
if ($rawAccounts[$i][$ids['authorizedService']] != "") {
|
||||
$services = explode(', ', $rawAccounts[$i][$ids['authorizedService']]);
|
||||
for ($m = 0; $m < sizeof($services); $m++) {
|
||||
if (get_preg($services[$m], 'ascii')) {
|
||||
$partialAccounts[$i]['authorizedService'][] = $services[$m];
|
||||
}
|
||||
else {
|
||||
$errMsg = $this->messages['authorizedService'][1];
|
||||
array_push($errMsg, array($i));
|
||||
$messages[] = $errMsg;
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
return $messages;
|
||||
}
|
||||
|
||||
/**
|
||||
* Returns the PDF entries for this module.
|
||||
*
|
||||
* @return array list of possible PDF entries
|
||||
*/
|
||||
function get_pdfEntries() {
|
||||
$return = array();
|
||||
if (in_array('authorizedServiceObject', $this->attributes['objectClass'])) {
|
||||
$return['authorizedServiceObject_authorizedService'][0] = '<block><key>' . _('Authorized Services') . '</key><value>' . implode(', ', $this->attributes['authorizedService']) . '</value></block>';
|
||||
}
|
||||
return $return;
|
||||
}
|
||||
|
||||
/**
|
||||
* Loads the values of an account profile into internal variables.
|
||||
*
|
||||
* @param array $profile hash array with profile values (identifier => value)
|
||||
*/
|
||||
function load_profile($profile) {
|
||||
// profile mappings in meta data
|
||||
parent::load_profile($profile);
|
||||
// add extension
|
||||
if (isset($profile['authorizedServiceObject_addExt'][0]) && ($profile['authorizedServiceObject_addExt'][0] == "true")) {
|
||||
if (!in_array('authorizedServiceObject', $this->attributes['objectClass'])) {
|
||||
$this->attributes['objectClass'][] = 'authorizedServiceObject';
|
||||
}
|
||||
}
|
||||
// add ASs
|
||||
if ($profile['authorizedServiceObject_services'][0] != "") {
|
||||
$services = explode(',', $profile['authorizedServiceObject_services'][0]);
|
||||
for ($m = 0; $m < sizeof($services); $m++) {
|
||||
if (get_preg($services[$m], 'ascii')) {
|
||||
$this->attributes['authorizedService'][] = trim($services[$m]);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
?>
|
||||
Loading…
Reference in New Issue