AccessOwnerStorageAcl.php 7.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156
  1. <?php
  2. Lib::loadClass('Core_AclBase');
  3. Lib::loadClass('ParseOgcFilter');
  4. class Schema_AccessOwnerStorageAcl extends Core_AclBase {
  5. public function getNamespace() { return 'default_objects/' . $this->getName(); }
  6. public function getSourceName() { return 'default_objects'; }
  7. public function init($force = false) {}
  8. public function isInitialized() { return true; }
  9. public function getName() { return 'AccessOwner'; }
  10. public function getRootTableName() { return 'ADMIN_USERS'; }// TODO: turn off - use getName for generating ref's
  11. public function getFieldListByIdZasob() { return $this->getRealFieldListByIdZasob(); }
  12. public function getVisibleFieldListByIdZasob() { return $this->getRealFieldListByIdZasob(); }
  13. public function getVirtualFieldListByIdZasob() { return array(); }
  14. public function getXsdTypes() {// TODO: mv to Core_AclBase
  15. $xsdTypes = array();
  16. foreach ($this->getFields() as $idZasob => $field) {
  17. $xsdTypes[ $field['name'] ] = $field;
  18. $xsdTypes[ $field['name'] ][ 'xsdType' ] = $this->getXsdFieldType($field['name']);
  19. }
  20. return $xsdTypes;
  21. }
  22. public function getRealFieldListByIdZasob($force = false) {
  23. $cols = array();
  24. $cols[100000] = 'id';// ADMIN_USERS.ID
  25. $cols[100001] = 'login';// ADMIN_USERS.ADM_ACCOUNT
  26. $cols[100002] = 'name';// ADMIN_USERS.ADM_NAME
  27. return $cols;
  28. }
  29. public function getFields() {
  30. $fields = array();
  31. $fields[100000] = ['name'=>'id', 'perms'=>'R', 'opis'=>'', 'label'=>'', 'sort_prio'=>100];
  32. $fields[100001] = ['name'=>'login', 'perms'=>'R', 'opis'=>'', 'label'=>'', 'sort_prio'=>101];
  33. $fields[100002] = ['name'=>'name', 'perms'=>'R', 'opis'=>'', 'label'=>'', 'sort_prio'=>102];
  34. return $fields;
  35. }
  36. public function getFieldType($fieldName) { return null; }
  37. // TODO: replace legacy functions: isAllowed, hasFieldPerm, getFieldIdByName
  38. public function canCreateField($fieldName) { return false; }
  39. public function canReadField($fieldName) { return true; }
  40. public function canReadObjectField($fieldName, $record) {return true; }
  41. public function canWriteField($fieldName) { return false; }
  42. public function canWriteObjectField($fieldName, $record) { return false; }
  43. public function getTotal($params = array()) {
  44. return count($this->getItems($params));
  45. }
  46. public function getItem($primaryKey, $params = []) {
  47. $items = $this->getItems(['primaryKey'=>$primaryKey]);
  48. return (!empty($items[$primaryKey])) ? $items[$primaryKey] : null;
  49. }
  50. public function getItems($params = array()) {
  51. $DBG = V::get('DBG_DS', 0, $_GET, 'int');
  52. if($DBG>2){echo 'C.'.get_class($this).' L.' . __LINE__ . " getItems \$params:";print_r($params);echo "\n";}
  53. $sqlWhereAndPk = "";
  54. if ($pk = V::get('@primaryKey', null, $params)) {// [@primaryKey] => TODO: int or array of int
  55. if (!is_array($pk)) $sqlPk = array($pk);
  56. else $sqlPk = $pk;
  57. $sqlWhereAndPk = "and u.ID in (" . implode(", ", $sqlPk) . ")";
  58. }
  59. $items = DB::getPDO()->fetchAllByKey("
  60. select u.ID as id, u.ADM_ACCOUNT as login, u.ADM_NAME as name
  61. from ADMIN_USERS u
  62. where u.A_STATUS = 'NORMAL'
  63. and u.ADM_TECH_WORKER != 'NO'
  64. {$sqlWhereAndPk}
  65. ", $key = 'id');
  66. if ($pk = V::get('primaryKey', 0, $params, 'int')) {// [primaryKey] => 2948
  67. if (!array_key_exists($pk, $items)) return array();
  68. $items = array($pk => $items[$pk]);
  69. }
  70. if (!empty($params['ogc:Filter'])) {
  71. $parser = new ParseOgcFilter();
  72. $parser->loadOgcFilter($params['ogc:Filter']);
  73. $queryWhereBuilder = $parser->convertToSqlQueryWhereBuilder();
  74. DBG::_('DBG_DS', '>2', "ogc:Filter \$queryWhereBuilder", $queryWhereBuilder, __CLASS__, __FUNCTION__, __LINE__);
  75. if($DBG>2){echo 'C.'.get_class($this).' L.' . __LINE__ . " getItems \$items:";print_r($items);echo "\n";}
  76. $items = array_filter($items, array($queryWhereBuilder, 'filterRawArray'));
  77. }
  78. $filterId = trim(V::get('f_id', '', $params));
  79. if (strlen($filterId)) {// allow '0'
  80. $queryWhereBuilder = new SqlQueryWhereBuilder();
  81. if (is_numeric($filterId)) {
  82. $queryWhereBuilder->addComparisonFieldToValue('id', '=', $filterId);
  83. } else if (false !== strpos($filterId, '%') && is_numeric(trim($filterId, '%'))) {
  84. $queryWhereBuilder->addComparisonFieldToValue('id', 'like', $filterId);
  85. } else if ('>=' == substr($filterId, 0, 2) && is_numeric(substr($filterId, 2))) {
  86. $queryWhereBuilder->addComparisonFieldToValue('id', 'GreaterThenOrEqualTo', substr($filterId, 2));
  87. } else if ('<=' == substr($filterId, 0, 2) && is_numeric(substr($filterId, 2))) {
  88. $queryWhereBuilder->addComparisonFieldToValue('id', 'LessThenOrEqualTo', substr($filterId, 2));
  89. } else if ('>' == substr($filterId, 0, 1) && is_numeric(substr($filterId, 1))) {
  90. $queryWhereBuilder->addComparisonFieldToValue('id', 'GreaterThen', substr($filterId, 1));
  91. } else if ('<' == substr($filterId, 0, 1) && is_numeric(substr($filterId, 1))) {
  92. $queryWhereBuilder->addComparisonFieldToValue('id', 'LessThen', substr($filterId, 1));
  93. } else if ('=' == substr($filterId, 0, 1) && is_numeric(substr($filterId, 1))) {
  94. $queryWhereBuilder->addComparisonFieldToValue('id', '=', substr($filterId, 1));
  95. } else {
  96. $filterId = null;// TODO: BUG uniimplemented comparison sign
  97. }
  98. if ($filterId) $items = array_filter($items, array($queryWhereBuilder, 'filterRawArray'));
  99. }
  100. foreach (['login', 'name'] as $fieldName) {
  101. $filterValue = trim(V::get("f_{$fieldName}", '', $params));
  102. if (strlen($filterValue)) {// allow '0'
  103. $queryWhereBuilder = new SqlQueryWhereBuilder();
  104. if (!is_scalar($filterValue)) {
  105. } else if ('=' == substr($filterValue, 0, 1)) {
  106. $queryWhereBuilder->addComparisonFieldToValue($fieldName, '=', substr($filterValue, 1));
  107. } else {
  108. if ('%' != substr($filterValue, 0, 1)) $filterValue = "%{$filterValue}";
  109. if ('%' != substr($filterValue, -1)) $filterValue = "{$filterValue}%";
  110. $queryWhereBuilder->addComparisonFieldToValue($fieldName, 'like', $filterValue);
  111. }
  112. $items = array_filter($items, array($queryWhereBuilder, 'filterRawArray'));
  113. }
  114. }
  115. $orderBy = strtolower(V::get('order_by', 'id', $params));
  116. $orderDir = strtolower(V::get('order_dir', 'desc', $params));
  117. if (!in_array($orderBy, ['id', 'login', 'name'])) throw new HttpException("Bad Request - wrong or missing order by", 400);
  118. if (!in_array($orderDir, ['desc', 'asc'])) throw new HttpException("Bad Request - wrong or missing order dir", 400);
  119. uasort($items, function ($a, $b) use ($orderBy, $orderDir) {
  120. if ('desc' == $orderDir) {
  121. return (V::geti($orderBy, '', $a) > V::geti($orderBy, '', $b)) ? -1 : 1;
  122. } else if ('asc' == $orderDir) {
  123. return (V::geti($orderBy, '', $a) > V::geti($orderBy, '', $b)) ? 1 : -1;
  124. }
  125. return 0;
  126. });
  127. if($DBG>2){echo 'C.'.get_class($this).' L.' . __LINE__ . " getItems \$items:";print_r($items);echo "\n";}
  128. return $items;
  129. }
  130. public function addItem($itemTodo) { throw new Exception("Insert not allowed"); }
  131. public function updateItem($itemPatch) { throw new Exception("Update not allowed"); }
  132. public function getGeomFieldType($fieldName) { return null; }
  133. public function getPrimaryKeyField() { return 'id'; }
  134. public function getAttributesFromZasoby() { return array(); }
  135. public function isEnumerationField($fieldName) { return false; }
  136. public function getEnumerations($fieldName) { return null; }
  137. public function getXsdFieldType($fieldName) {
  138. if ('id' == $fieldName) return 'xsd:string';
  139. if ('login' == $fieldName) return 'xsd:string';
  140. if ('name' == $fieldName) return 'xsd:string';
  141. }
  142. public function isGeomField($fldName) { return false; }
  143. }