User Groups\n"; if($modetype == "user") { if($mode == "submitAddGroup") { print "User group successfully added"; print "

\n"; } elseif($mode == "submitDeleteGroup") { print "User group successfully deleted"; print "

\n"; } elseif($mode == "submitEditGroup") { print "User group successfully updated"; print "

\n"; } } $showusergrouptype = 0; if(checkUserHasPerm('Manage Federated User Groups (global)') || checkUserHasPerm('Manage Federated User Groups (affiliation only)')) $showusergrouptype = 1; $cdata = array('type' => 'user'); $cont = addContinuationsEntry('addGroup', $cdata); print "
\n"; print "

\n"; # hidden elements $cont = addContinuationsEntry('editGroup', $cdata); print "\n"; $cont = addContinuationsEntry('confirmDeleteGroup', $cdata); print "\n"; $cont = addContinuationsEntry('jsonUserGroupStore'); print "

\n"; print "

\n"; # filters print "

\n"; print "Name:\n"; print "

"; print " \n"; print "

\n"; print "
\n"; print "Affiliation:\n"; print "
\n"; print "Owner:\n"; print "
\n"; if($showusergrouptype) { print "Type:\n"; print "Normal\n"; print " | \n"; print "Federated\n"; print " | \n"; print "Course Roll\n"; print "
\n"; } print "Editable by:\n"; print "
\n"; print "

\n"; print "\n"; print "\n"; print "\n"; if(preg_match('/MSIE/i', $_SERVER['HTTP_USER_AGENT'])) $w = array('54px', '38px', '200px', '142px', '65px', '142px', '59px', '58px', '63px', '73px'); else $w = array('4.5em', '3em', '17em', '12em', '5em', '12em', '5em', '5em', '5.6em', '6.3em'); print "\n"; print "\n"; print "\n"; print "\n"; if($showusergrouptype) print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; if(checkUserHasPerm('Set Overlapping Reservation Count')) print "\n"; print "\n"; print "\n"; print "

		Name	Owner	Type	Editable by	Initial Max Time	Total Max Time	Max Extend Time	Max Overlapping Reservations

\n"; print "

\n"; print "\n"; print "

Resource Groups

\n"; if($modetype == "resource") { if($mode == "submitAddGroup") { print "Resource group successfully added"; print "

\n"; } elseif($mode == "submitDeleteGroup") { print "Resource group successfully deleted"; print "

\n"; } elseif($mode == "submitEditGroup") { print "Resource group successfully updated"; print "

\n"; } } $showaddresource = 0; $usergroups = getUserGroups(1); foreach(array_keys($usergroups) as $id) { if($usergroups[$id]["ownerid"] == $user["id"]) { $showaddresource = 1; break; } if(array_key_exists("editgroupid", $usergroups[$id]) && array_key_exists($usergroups[$id]["editgroupid"], $user["groups"])) { $showaddresource = 1; break; } } $cdata = array('type' => 'resource'); if($showaddresource) { $cont = addContinuationsEntry('addGroup', $cdata); print "
\n"; } print "

\n"; # hidden elements $cont = addContinuationsEntry('editGroup', $cdata); print "\n"; $cont = addContinuationsEntry('confirmDeleteGroup', $cdata); print "\n"; $jscont = addContinuationsEntry('jsonGetGroupInfo'); print "\n"; $cont = addContinuationsEntry('jsonResourceGroupStore'); print "

\n"; print "

\n"; # filters print "

\n"; print "Name:\n"; print "

"; print " \n"; print "

\n"; print "
\n"; $resourcetypes = getTypes("resources"); print "Type:\n"; print "\n"; $first = 1; foreach($resourcetypes['resources'] as $type) { if($first) $first = 0; else print ' | '; print "$type\n"; print "\n"; } print "\n"; print "
\n"; print "Owning User Group:\n"; print "
\n"; print "

\n"; print "\n"; print "\n"; print "\n"; if(preg_match('/MSIE/i', $_SERVER['HTTP_USER_AGENT'])) $w = array('54px', '38px', '108px', '240px', '250px', '24px'); else $w = array('4.5em', '3em', '9em', '20em', '21em', '1.6em'); print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; print "

		Type	Name	Owning User Group	\n"; print "\n"; print " $\"\"$

\n"; print "

\n"; } //////////////////////////////////////////////////////////////////////////////// /// /// \fn jsonUserGroupStore() /// /// \brief generates json data for populating user group datagrid /// //////////////////////////////////////////////////////////////////////////////// function jsonUserGroupStore() { global $user; $usergroups = getUserGroups(); if($user['showallgroups']) $affilusergroups = $usergroups; else $affilusergroups = getUserGroups(0, $user['affiliationid']); $showfederatedall = 0; $showfederatedaffil = 0; if(checkUserHasPerm('Manage Federated User Groups (global)')) $showfederatedall = 1; elseif(checkUserHasPerm('Manage Federated User Groups (affiliation only)')) $showfederatedaffil = 1; $items = array(); $lengths = getReservationLengths(65535); foreach($affilusergroups as $id => $group) { if($group['name'] == 'None' || preg_match('/^\s*None/', $group['name'])) continue; $owner = 0; $editor = 0; if($group["ownerid"] == $user["id"]) $owner = 1; if(array_key_exists("editgroupid", $group) && array_key_exists($group["editgroupid"], $user["groups"])) $editor = 1; if($showfederatedall && ($group['custom'] == 0 || $group['courseroll'] == 1)) $owner = 1; elseif($showfederatedaffil && ($group['custom'] == 0 || $group['courseroll'] == 1) && $group['groupaffiliationid'] == $user['affiliationid']) $owner = 1; if(! $owner && ! $editor) continue; if(! array_key_exists($group['initialmaxtime'], $lengths)) $group['initialmaxtime'] = getReservationLengthCeiling($group['initialmaxtime']); if(! array_key_exists($group['totalmaxtime'], $lengths)) $group['totalmaxtime'] = getReservationLengthCeiling($group['totalmaxtime']); if(! array_key_exists($group['maxextendtime'], $lengths)) $group['maxextendtime'] = getReservationLengthCeiling($group['maxextendtime']); $g = array('id' => $id, 'name' => $group['name'], 'owner' => $group['owner'], 'editgroup' => $group['editgroup'], 'editgroupid' => $group['editgroupid'], 'groupaffiliation' => $group['groupaffiliation'], 'groupaffiliationid' => $group['groupaffiliationid'], 'initialmaxtime' => intval($group['initialmaxtime']), 'initialmaxtimedisp' => $lengths[$group['initialmaxtime']], 'totalmaxtime' => intval($group['totalmaxtime']), 'totalmaxtimedisp' => $lengths[$group['totalmaxtime']], 'maxextendtime' => intval($group['maxextendtime']), 'maxextendtimedisp' => $lengths[$group['maxextendtime']], 'overlapResCount' => intval($group['overlapResCount'])); if($group['courseroll']) { $g['type'] = 'courseroll'; $g['prettytype'] = 'Course Roll'; $g['owner'] = 'N/A'; $g['editgroup'] = 'None'; $g['editgroupid'] = 'NULL'; } elseif($group['custom'] == 0) { $g['type'] = 'federated'; $g['prettytype'] = 'Federated'; $g['owner'] = 'N/A'; $g['editgroup'] = 'None'; $g['editgroupid'] = 'NULL'; } else { $g['type'] = 'normal'; $g['prettytype'] = 'Normal'; $g['editgroup'] = "{$group['editgroup']}@{$group['editgroupaffiliation']}"; } if($owner) $g['deletable'] = 1; else $g['deletable'] = 0; $items[] = $g; } sendJSON($items, 'id'); } //////////////////////////////////////////////////////////////////////////////// /// /// \fn jsonResourceGroupStore() /// /// \brief generates json data for populating resource group datagrid /// //////////////////////////////////////////////////////////////////////////////// function jsonResourceGroupStore() { $resourcegroups = getResourceGroups(); $resources = array(); $userresources = getUserResources(array("groupAdmin"), array("manageGroup"), 1); foreach(array_keys($userresources) as $type) { foreach($userresources[$type] as $id => $group) { if(array_key_exists($id, $resourcegroups)) { // have to make sure it exists in case something was deleted from the session priv cache $resources[$id]["type"] = $type; $resources[$id]["name"] = $group; $resources[$id]["owner"] = $resourcegroups[$id]["owner"]; $resources[$id]["ownerid"] = $resourcegroups[$id]["ownerid"]; } } } $items = array(); foreach(array_keys($resources) as $id) { $g = array('id' => $id, 'type' => $resources[$id]['type'], 'name' => $resources[$id]['name'], 'owninggroup' => $resourcegroups[$id]['owner'], 'owninggroupid' => $resourcegroups[$id]['ownerid']); $items[] = $g; } sendJSON($items, 'id'); } //////////////////////////////////////////////////////////////////////////////// /// /// \fn editOrAddGroup($state) /// /// \param $state - 0 for edit, 1 for add /// /// \brief prints a form for editing a group /// //////////////////////////////////////////////////////////////////////////////// function editOrAddGroup($state) { global $submitErr, $user, $mode; $usergroups = getUserGroups(); $type = getContinuationVar("type"); if($state) $isowner = 1; elseif($type == 'resource') { $isowner = getContinuationVar('isowner'); } if(! $state) { $groupid = getContinuationVar('groupid', processInputVar('groupid', ARG_NUMERIC)); if($type == 'user') { if(! array_key_exists($groupid, $usergroups)) { print "

Edit User Group

\n"; print "The selected user group does not exist.\n"; return; } $isowner = 0; if($usergroups[$groupid]['ownerid'] != $user['id']) { if(($usergroups[$groupid]['custom'] == 0 || $usergroups[$groupid]['courseroll'] == 1)) { if(! checkUserHasPerm('Manage Federated User Groups (global)') && (! checkUserHasPerm('Manage Federated User Groups (affiliation only)') || $usergroups[$groupid]['groupaffiliationid'] != $user['affiliationid'])) { print "

Edit User Group

\n"; print "You do not have access to modify the selected user group.\n"; return; } else $isowner = 1; } elseif(! array_key_exists("editgroupid", $usergroups[$groupid]) || ! array_key_exists($usergroups[$groupid]["editgroupid"], $user["groups"])) { print "

Edit User Group

\n"; print "You do not have access to modify the selected user group.\n"; return; } } else $isowner = 1; } else { $userresources = getUserResources(array("groupAdmin"), array("manageGroup"), 1); $noaccess = 1; foreach(array_keys($userresources) as $rtype) { if(array_key_exists($groupid, $userresources[$rtype])) { $noaccess = 0; break; } } if($noaccess) { print "

Edit Resource Group

\n"; print "You do not have access to modify the selected resource group.\n"; return; } } } if($user['showallgroups']) $affilusergroups = getUserGroups(1); else $affilusergroups = getUserGroups(1, $user['affiliationid']); if($type == 'resource') { $dispUserGrpIds = array(); foreach(array_keys($affilusergroups) as $id) { # figure out if user is owner or in editor group $owner = 0; $editor = 0; if($affilusergroups[$id]["ownerid"] == $user["id"]) $owner = 1; if(array_key_exists("editgroupid", $affilusergroups[$id]) && array_key_exists($affilusergroups[$id]["editgroupid"], $user["groups"])) $editor = 1; if(! $owner && ! $editor) continue; if($user['showallgroups']) $dispUserGrpIDs[$id] = $affilusergroups[$id]['name']; elseif($affilusergroups[$id]['groupaffiliation'] == $user['affiliation'] && array_key_exists($id, $affilusergroups)) $dispUserGrpIDs[$id] = $affilusergroups[$id]['name']; } } $resourcegroups = getResourceGroups(); $affils = getAffiliations(); $resourcetypes = getTypes("resources"); if($submitErr) { $data = processGroupInput(0); if($mode == "submitEditGroup") { $id = $data["groupid"]; if($data["type"] == "resource") { list($grouptype, $junk) = explode('/', $resourcegroups[$id]["name"]); $ownerid = $resourcegroups[$id]["ownerid"]; } } else { if($data["type"] == "resource") { if($state) $grouptype = $resourcetypes['resources'][$data['resourcetypeid']]; else list($grouptype, $junk) = explode('/', $resourcegroups[$data['groupid']]["name"]); $ownerid = $data["ownergroup"]; } else { $selectAffil = getContinuationVar('selectAffil'); if(empty($selectAffil) && $user['showallgroups']) $selectAffil = 1; } } } else { $data["groupid"] = getContinuationVar("groupid"); $data["type"] = getContinuationVar("type"); $data["isowner"] = $isowner; if(! $state) { $id = $groupid; $data['groupid'] = $id; } else $id = $data["groupid"]; if($data["type"] == "user") { if($state) { $data["name"] = ''; $data["affiliationid"] = $user['affiliationid']; $data["owner"] = $user['unityid']; $data["editgroupid"] = ''; if(count($affilusergroups)) { $tmp = array_keys($affilusergroups); if(preg_match('/^\s*None/', $affilusergroups[$tmp[0]]['name'])) { if(array_key_exists(1, $tmp)) $data['editgroupid'] = $tmp[1]; else $data['editgroupid'] = 0; } else $data['editgroupid'] = $tmp[0]; } else $data['editgroupid'] = 0; $data["initialmax"] = 240; $data["totalmax"] = 360; $data["maxextend"] = 30; $data["overlap"] = 0; $data["custom"] = 1; $data["courseroll"] = 0; $tmp = explode('@', $data['name']); $data['name'] = $tmp[0]; if($user['showallgroups']) $selectAffil = 1; else $selectAffil = 0; } else { $data["name"] = $usergroups[$id]["name"]; $data["affiliationid"] = $usergroups[$id]["groupaffiliationid"]; $data["owner"] = $usergroups[$id]["owner"]; $data["editgroupid"] = $usergroups[$id]["editgroupid"]; $data["initialmax"] = $usergroups[$id]["initialmaxtime"]; $data["totalmax"] = $usergroups[$id]["totalmaxtime"]; $data["maxextend"] = $usergroups[$id]["maxextendtime"]; $data["overlap"] = $usergroups[$id]["overlapResCount"]; $data["custom"] = $usergroups[$id]["custom"]; $data["courseroll"] = $usergroups[$id]["courseroll"]; $tmp = explode('@', $data['name']); $data['name'] = $tmp[0]; if($user['showallgroups'] || (array_key_exists(1, $tmp) && $tmp[1] != $user['affiliation'])) $selectAffil = 1; else $selectAffil = 0; } } else { if($state) { $grouptype = 'computer'; $data['name'] = ''; $ownerid = ""; foreach(array_keys($user["groups"]) as $grpid) { if(array_key_exists($grpid, $dispUserGrpIDs)) { $ownerid = $grpid; break; } } } else { list($grouptype, $data["name"]) = explode('/', $resourcegroups[$id]["name"]); $ownerid = $resourcegroups[$id]["ownerid"]; } } } $editusergroup = 0; if($data['type'] != 'user') print "

\n"; else print "\n"; print "

\n"; if($state) { if($data["type"] == "user") print "

Add User Group

\n"; else print "

Add Resource Group

\n"; } else { if($data["type"] == "user") { print "

Edit User Group

\n"; print "{$usergroups[$data['groupid']]['name']}

\n"; if($data['courseroll'] == 1) print "Type: Course Roll

\n"; elseif($data['custom'] == 0) print "Type: Federated

\n"; $editusergroup = 1; } else print "

Edit Resource Group

\n"; } if(($state && $data["type"] == "user") || $data["isowner"] || $data["type"] == "resource") { print "\n"; if($data["type"] == "resource") { print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; } if($data['type'] == 'resource' || ($data['courseroll'] == 0 && $data['custom'] == 1)) { print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; } if($data["type"] == "user") { if($data['courseroll'] == 0 && $data['custom'] == 1) { print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " "; print " \n"; } else $groupwasnone = 1; print " \n"; print " \n"; print " "; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; if(checkUserHasPerm('Set Overlapping Reservation Count')) { print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; } } else { print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; } print "

Type:	\n"; if($state && $submitErr) $resourcetypeid = $data['resourcetypeid']; else $resourcetypeid = array_search($grouptype, $resourcetypes["resources"]); if($state) printSelectInput("resourcetypeid", $resourcetypes["resources"], $resourcetypeid); else print " $grouptype\n"; print "
Name:	"; if($data['type'] == 'user' && $selectAffil) { print "@"; printSelectInput('affiliationid', $affils, $data['affiliationid']); } print "	"; printSubmitErr(GRPNAMEERR); print "
Owner:		"; printSubmitErr(GRPOWNER); print "
Editable by:	\n"; $groupwasnone = 0; if($submitErr & EDITGROUPERR) { if($state == 0) $data['editgroupid'] = $usergroups[$data['groupid']]['editgroupid']; elseif(count($affilusergroups)) { $tmp = array_keys($affilusergroups); $data['editgroupid'] = $tmp[0]; } } $notice = ''; if($state == 0 && empty($usergroups[$data['groupid']]["editgroup"])) { $affilusergroups = array_reverse($affilusergroups, TRUE); $affilusergroups[0] = array('name' => 'None'); $affilusergroups = array_reverse($affilusergroups, TRUE); $groupwasnone = 1; $notice = "Note: You are the only person that can " . "edit membership of this group. Select a user group here " . "to allow members of that group to edit membership of this one."; } elseif(! array_key_exists($data['editgroupid'], $affilusergroups) && $data['editgroupid'] != 0) { $affilusergroups[$data['editgroupid']] = array('name' => getUserGroupName($data['editgroupid'], 1)); uasort($affilusergroups, "sortKeepIndex"); } if($state == 1 && $data['editgroupid'] == 0) print "None\n"; else printSelectInput("editgroupid", $affilusergroups, $data["editgroupid"]); print "	"; if($submitErr & EDITGROUPERR) printSubmitErr(EDITGROUPERR); else print $notice; print "
Initial Max Time:	"; $lengths = getReservationLengths(65535); if(! array_key_exists($data['initialmax'], $lengths)) $data['initialmax'] = getReservationLengthCeiling($data['initialmax']); printSelectInput("initialmax", $lengths, $data['initialmax']); print "	"; printSubmitErr(INITIALMAXERR); print "
Total Max Time:	"; if(! array_key_exists($data['totalmax'], $lengths)) $data['totalmax'] = getReservationLengthCeiling($data['totalmax']); printSelectInput("totalmax", $lengths, $data['totalmax']); print "	"; printSubmitErr(TOTALMAXERR); print "
Max Extend Time:	"; if(! array_key_exists($data['maxextend'], $lengths)) $data['maxextend'] = getReservationLengthCeiling($data['maxextend']); printSelectInput("maxextend", $lengths, $data['maxextend']); print "	"; printSubmitErr(MAXEXTENDERR); print "
Max Overlapping Reservations:		"; printSubmitErr(MAXOVERLAPERR); print "
Owning User Group:	\n"; if(! array_key_exists($ownerid, $dispUserGrpIDs)) { $dispUserGrpIDs[$ownerid] = $usergroups[$ownerid]['name']; uasort($dispUserGrpIDs, "sortKeepIndex"); } printSelectInput("ownergroup", $dispUserGrpIDs, $ownerid); print "

\n"; print "\n"; print " \n"; print " \n"; print " \n"; print " \n"; print "

\n"; if($state) { $cdata = array('type' => $data['type']); if($data['type'] == 'user') { $cdata['isowner'] = $data['isowner']; if($data['editgroupid'] == 0) { $cdata['editgroupid'] = 0; $cdata['groupwasnone'] = 1; } } $cont = addContinuationsEntry('submitAddGroup', $cdata); print " \n"; print " \n"; } else { $cdata = array('type' => $data['type'], 'groupid' => $data['groupid'], 'isowner' => $data['isowner']); if($data['type'] == 'resource') $cdata['resourcetypeid'] = $resourcetypeid; else { if($data['courseroll'] == 1 || $data['custom'] == 0) { $cdata['name'] = $data['name']; $cdata['affiliationid'] = $data['affiliationid']; } $cdata['selectAffil'] = $selectAffil; $cdata['groupwasnone'] = $groupwasnone; $cdata['custom'] = $data['custom']; $cdata['courseroll'] = $data['courseroll']; } $cont = addContinuationsEntry('confirmEditGroup', $cdata); print " \n"; print " \n"; } print " \n"; print "

\n"; print " \n"; print "

\n"; } if($data["type"] != "user"){ print "

\n"; return; } if($editusergroup) { $newuser = processInputVar("newuser", ARG_STRING); print "

Group Membership

\n"; if($mode == "addGroupUser" && ! ($submitErr & IDNAMEERR)) { print "$newuser successfully added to group"; print "

\n"; } if($mode == "deleteGroupUser") { print "$newuser successfully deleted from "; print "group

\n"; } $groupmembers = getUserGroupMembers($data["groupid"]); $edit = 1; if($data['courseroll'] == 1 || $data['custom'] == 0) $edit = 0; if(empty($groupmembers) && ! $edit) print "(empty group)
\n"; print "\n"; if($edit) { print " \n"; print " \n"; print " \n"; print " \n"; else print ">\n"; if($submitErr) { print " \n"; } $cont = addContinuationsEntry('addGroupUser', $data); print " \n"; print " \n"; print " \n"; } foreach($groupmembers as $id => $login) { print " \n"; if($edit) { print " \n"; } print " \n"; print " \n"; } print "

		\n"; printSubmitErr(IDNAMEERR); print "
\n"; print " \n"; print " \n"; $data['userid'] = $id; $data['newuser'] = $login; $cont = addContinuationsEntry('deleteGroupUser', $data); print " \n"; print " \n"; print "	$login

\n"; } print "\n"; } //////////////////////////////////////////////////////////////////////////////// /// /// \fn processGroupInput($checks) /// /// \param $checks - (optional) 1 to perform validation, 0 not to /// /// \return an array with the following indexes:\n /// groupid, name, prettyname, platformid, osid /// /// \brief validates input from the previous form; if anything was improperly /// submitted, sets submitErr and submitErrMsg /// //////////////////////////////////////////////////////////////////////////////// function processGroupInput($checks=1) { global $submitErr, $submitErrMsg, $user; $return = array(); $return["groupid"] = getContinuationVar("groupid"); $return["type"] = getContinuationVar("type"); $return["custom"] = getContinuationVar("custom", 1); $return["courseroll"] = getContinuationVar("courseroll", 0); $return["name"] = getContinuationVar('name', processInputVar("name", ARG_STRING)); $return["affiliationid"] = getContinuationVar('affiliationid', processInputVar("affiliationid", ARG_NUMERIC, $user['affiliationid'])); $return["resourcetypeid"] = getContinuationVar('resourcetypeid', processInputVar("resourcetypeid", ARG_NUMERIC)); $return["owner"] = getContinuationVar('owner', processInputVar("owner", ARG_STRING)); $return["ownergroup"] = processInputVar("ownergroup", ARG_NUMERIC); $return["editgroupid"] = getContinuationVar('editgroupid', processInputVar("editgroupid", ARG_NUMERIC)); $return["isowner"] = getContinuationVar("isowner"); $return["initialmax"] = getContinuationVar('initialmax', processInputVar("initialmax", ARG_NUMERIC)); $return["totalmax"] = getContinuationVar('totalmax', processInputVar("totalmax", ARG_NUMERIC)); $return["maxextend"] = getContinuationVar('maxextend', processInputVar("maxextend", ARG_NUMERIC)); $return["overlap"] = getContinuationVar('overlap', processInputVar("overlap", ARG_NUMERIC, 0)); $groupwasnone = getContinuationVar('groupwasnone'); $affils = getAffiliations(); if(! array_key_exists($return['affiliationid'], $affils)) $return['affiliationid'] = $user['affiliationid']; if(! $checks) { return $return; } if($return['custom'] == 1 && $return['courseroll'] == 0) { if($return['type'] == 'user' && ! preg_match('/^[-a-zA-Z0-9_\.: ]{3,30}$/', $return["name"])) { $submitErr |= GRPNAMEERR; $submitErrMsg[GRPNAMEERR] = "Name must be between 3 and 30 characters " . "and can only contain letters, numbers, " . "spaces, and these characters: - . _ :"; } elseif($return['type'] == 'resource' && ! preg_match('/^[-a-zA-Z0-9_\. ]{3,30}$/', $return["name"])) { $submitErr |= GRPNAMEERR; $submitErrMsg[GRPNAMEERR] = "Name must be between 3 and 30 characters " . "and can only contain letters, numbers, " . "spaces, and these characters: - . _"; } } if($return['type'] == 'user') $extraid = $return['affiliationid']; else $extraid = $return['resourcetypeid']; if(! empty($return["type"]) && ! empty($return["name"]) && ! ($submitErr & GRPNAMEERR) && checkForGroupName($return["name"], $return["type"], $return["groupid"], $extraid)) { $submitErr |= GRPNAMEERR; $submitErrMsg[GRPNAMEERR] = "A group already exists with this name."; } if($return['custom'] == 1 && $return['courseroll'] == 0 && $return["type"] == "user" && ! validateUserid($return["owner"])) { $submitErr |= GRPOWNER; $submitErrMsg[GRPOWNER] = "Submitted ID is not valid"; } if($return["type"] == "user" && $return['editgroupid'] == 0 && ! $groupwasnone) { $submitErr |= EDITGROUPERR; $submitErrMsg[EDITGROUPERR] = "Invalid group was selected"; } if($return["type"] == "user" && $return["initialmax"] < 30) { $submitErr |= INITIALMAXERR; $submitErrMsg[INITIALMAXERR] = "Initial max time must be at least 30 " . "minutes"; } if($return["type"] == "user" && $return["totalmax"] < 30) { $submitErr |= TOTALMAXERR; $submitErrMsg[TOTALMAXERR] = "Total max time must be at least 30 " . "minutes"; } if($return["type"] == "user" && $return["maxextend"] < 15) { $submitErr |= MAXEXTENDERR; $submitErrMsg[MAXEXTENDERR] = "Max extend time must be at least 15 " . "minutes"; } if(checkUserHasPerm('Set Overlapping Reservation Count') && $return["type"] == "user" && ($return["overlap"] < 0 || $return["overlap"] == 1)) { $submitErr |= MAXOVERLAPERR; $submitErrMsg[MAXOVERLAPERR] = "Overlap can be 0 or greater than or equal to 2"; } return $return; } //////////////////////////////////////////////////////////////////////////////// /// /// \fn checkForGroupName($name, $type, $id, $extraid) /// /// \param $name - the name of a group /// \param $type - user or resource /// \param $id - id of a group to ignore /// \param $extraid - if $type is resource, this is a resource type id; if /// $type is user, this is an affiliation id /// /// \return 1 if $name is already in the associated table, 0 if not /// /// \brief checks for $name being in usergroup/resource group (based on $type) /// except for $id /// //////////////////////////////////////////////////////////////////////////////// function checkForGroupName($name, $type, $id, $extraid) { $name = mysql_real_escape_string($name); if($type == "user") $query = "SELECT id FROM usergroup " . "WHERE name = '$name' AND " . "affiliationid = $extraid"; else $query = "SELECT id FROM resourcegroup " . "WHERE name = '$name' AND " . "resourcetypeid = $extraid"; if(! empty($id)) $query .= " AND id != $id"; $qh = doQuery($query, 101); if(mysql_num_rows($qh)) return 1; return 0; } //////////////////////////////////////////////////////////////////////////////// /// /// \fn updateGroup($data) /// /// \param $data - an array returned from processGroupInput /// /// \return number of rows affected by the update\n /// \b NOTE: mysql reports that no rows were affected if none of the fields /// were actually changed even if the update matched a row /// /// \brief performs a query to update the group with data from $data /// //////////////////////////////////////////////////////////////////////////////// function updateGroup($data) { if($data['type'] == "user") { if($data['courseroll'] == 1 || $data['custom'] == 0) { $data['editgroupid'] = 'NULL'; $ownerid = 'NULL'; } else { if($data['editgroupid'] == 0) $data['editgroupid'] = 'NULL'; $ownerid = getUserlistID($data['owner']); } $query = "UPDATE usergroup " . "SET name = '{$data['name']}', " . "affiliationid = {$data['affiliationid']}, " . "ownerid = $ownerid, " . "editusergroupid = {$data['editgroupid']}, " . "initialmaxtime = {$data['initialmax']}, " . "totalmaxtime = {$data['totalmax']}, "; if(checkUserHasPerm('Set Overlapping Reservation Count')) $query .= "overlapResCount = {$data['overlap']}, "; $query .= "maxextendtime = {$data['maxextend']} " . "WHERE id = {$data['groupid']}"; } else { $query = "UPDATE resourcegroup " . "SET name = '{$data['name']}', " . "ownerusergroupid = {$data['ownergroup']} " . "WHERE id = {$data['groupid']}"; } doQuery($query, 300); return mysql_affected_rows($GLOBALS['mysql_link_vcl']); } //////////////////////////////////////////////////////////////////////////////// /// /// \fn addGroup($data) /// /// \param $data - an array returned from processGroupInput /// /// \return number of rows affected by the insert\n /// /// \brief performs a query to insert the group with data from $data /// //////////////////////////////////////////////////////////////////////////////// function addGroup($data) { if($data['type'] == "user") { if($data['editgroupid'] == 0 || $data['editgroupid'] == '') $data['editgroupid'] = 'NULL'; if(! array_key_exists('custom', $data)) $data['custom'] = 1; elseif($data['custom'] == 0) { $ownerid = 'NULL'; $data['editgroupid'] = 'NULL'; } if($data['custom']) $ownerid = getUserlistID($data['owner']); $query = "INSERT INTO usergroup " . "(name, " . "affiliationid, " . "ownerid, " . "editusergroupid, " . "custom, " . "initialmaxtime, " . "totalmaxtime, "; if(checkUserHasPerm('Set Overlapping Reservation Count')) $query .= "overlapResCount, "; $query .= "maxextendtime) " . "VALUES ('{$data['name']}', " . "{$data['affiliationid']}, " . "$ownerid, " . "{$data['editgroupid']}, " . "{$data['custom']}, " . "{$data['initialmax']}, " . "{$data['totalmax']}, "; if(checkUserHasPerm('Set Overlapping Reservation Count')) $query .= "{$data['overlap']}, "; $query .= "{$data['maxextend']})"; } else { $query = "INSERT INTO resourcegroup " . "(name, " . "ownerusergroupid, " . "resourcetypeid) " . "VALUES ('{$data['name']}', " . "{$data['ownergroup']}, " . "'{$data['resourcetypeid']}')"; } $qh = doQuery($query, 305); clearPrivCache(); return mysql_affected_rows($GLOBALS['mysql_link_vcl']); } //////////////////////////////////////////////////////////////////////////////// /// /// \fn checkForGroupUsage($groupid, $type) /// /// \param $groupid - id of an group /// \param $type - group type: "user" or "resource" /// /// \return 0 if group is not used, 1 if it is /// /// \brief checks for $groupid being in the priv table corresponding to $type /// //////////////////////////////////////////////////////////////////////////////// function checkForGroupUsage($groupid, $type) { if($type == "user") { $query = "SELECT id FROM resourcegroup WHERE ownerusergroupid = $groupid"; $qh = doQuery($query, 310); if(mysql_num_rows($qh)) return 1; $query = "SELECT id " . "FROM blockRequest " . "WHERE groupid = $groupid " . "OR admingroupid = $groupid"; $qh = doQuery($query, 311); if(mysql_num_rows($qh)) return 1; $query = "SELECT id FROM imagemeta WHERE usergroupid = $groupid"; $qh = doQuery($query, 312); if(mysql_num_rows($qh)) return 1; $query = "SELECT id " . "FROM usergroup " . "WHERE editusergroupid = $groupid " . "AND id != $groupid"; $qh = doQuery($query, 313); if(mysql_num_rows($qh)) return 1; $query = "SELECT id FROM userpriv WHERE usergroupid = $groupid"; } else $query = "SELECT id FROM resourcepriv WHERE resourcegroupid = $groupid"; $qh = doQuery($query, 314); if(mysql_num_rows($qh)) return 1; return 0; } //////////////////////////////////////////////////////////////////////////////// /// /// \fn confirmEditOrAddGroup($state) /// /// \param $state - 0 for edit, 1 for add /// /// \brief prints a form for confirming changes to an group /// //////////////////////////////////////////////////////////////////////////////// function confirmEditOrAddGroup($state) { global $submitErr, $user; $data = processGroupInput(1); if($submitErr) { editOrAddGroup($state); return; } $resourcetypes = getTypes("resources"); $usergroups = getUserGroups(1); $affils = getAffiliations(); if($state) { if($data["type"] == "user") { $title = "Add User Group"; $question = "Add the following user group?"; $target = ""; } else { $title = "Add Resource Group"; $question = "Add the following resource group?"; $target = "#resources"; } $nextmode = "submitAddGroup"; } else { if($data["type"] == "user") { $title = "Edit User Group"; $question = "Submit changes to the user group?"; $target = ""; } else { $title = "Edit Resource Group"; $question = "Submit changes to the resource group?"; $target = "#resources"; } $nextmode = "submitEditGroup"; } print "

\n"; print "

$title

\n"; print "$question

\n"; if($data['courseroll'] == 1 || $data['custom'] == 0) { if($user['showallgroups']) print "{$data['name']}@{$affils[$data['affiliationid']]}

\n"; else print "{$data['name']}

\n"; } print "\n"; if($data["type"] == "resource") { print " \n"; print " \n"; print " \n"; print " \n"; } if($data['courseroll'] == 0 && $data['custom'] == 1) { print " \n"; print " \n"; if($data['type'] == 'user' && ($user['showallgroups'] || $data['affiliationid'] != $user['affiliationid'])) print " \n"; else print " \n"; print " \n"; } if($data["type"] == "user") { if($data['courseroll'] == 0 && $data['custom'] == 1) { print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; if($state == 0 && $data['editgroupid'] == 0) $usergroups[0]['name'] = 'None'; elseif(! $user['showallgroups']) { $tmp = explode('@', $usergroups[$data["editgroupid"]]["name"]); if($tmp[1] == $user['affiliation']) $usergroups[$data["editgroupid"]]["name"] = $tmp[0]; } print " \n"; print " \n"; } $lengths = getReservationLengths(65535); print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; if(checkUserHasPerm('Set Overlapping Reservation Count')) { print " \n"; print " \n"; print " \n"; print " \n"; } } else { print " \n"; print " \n"; if(! $user['showallgroups'] && preg_match("/^(.+)@{$user['affiliation']}$/", $usergroups[$data['ownergroup']]['name'], $matches)) print " \n"; print " \n"; } print "

Type:	" . $resourcetypes["resources"][$data["resourcetypeid"]]; print "
Name:	{$data["name"]}@{$affils[$data['affiliationid']]}	{$data["name"]}
Owner:	" . $data["owner"] . "
Editable by:	" . $usergroups[$data["editgroupid"]]["name"] . "
Initial Max Time:	{$lengths[$data["initialmax"]]}
Total Max Time:	{$lengths[$data["totalmax"]]}
Max Extend Time:	{$lengths[$data["maxextend"]]}
Max Overlapping Reservations:	{$data["overlap"]}
Owning User Group:	{$matches[1]}"; else print "	" . $usergroups[$data["ownergroup"]]["name"]; print "

\n"; print "\n"; print " \n"; print " \n"; print " \n"; print " \n"; print "

\n"; print " \n"; print "

\n"; print "

\n"; } //////////////////////////////////////////////////////////////////////////////// /// /// \fn submitEditGroup() /// /// \brief submits changes to group and notifies user /// //////////////////////////////////////////////////////////////////////////////// function submitEditGroup() { $data = getContinuationVar(); updateGroup($data); $_SESSION['userresources'] = array(); $_SESSION['nodeprivileges'] = array(); $_SESSION['usersessiondata'] = array(); #$_SESSION['cascadenodeprivileges'] = array(); // might need this uncommented viewGroups(); } //////////////////////////////////////////////////////////////////////////////// /// /// \fn submitAddGroup() /// /// \brief adds the group and notifies user /// //////////////////////////////////////////////////////////////////////////////// function submitAddGroup() { global $submitErr; $data = processGroupInput(1); if($submitErr) { editOrAddGroup(1); return; } if(! addGroup($data)) abort(10); viewGroups(); } //////////////////////////////////////////////////////////////////////////////// /// /// \fn confirmDeleteGroup() /// /// \brief prints a form to confirm the deletion of an group /// //////////////////////////////////////////////////////////////////////////////// function confirmDeleteGroup() { global $user; $groupid = getContinuationVar("groupid"); $type = getContinuationVar("type"); $usergroups = getUserGroups(); $groupid = processInputVar('groupid', ARG_NUMERIC); if($type == 'user') { if(! array_key_exists($groupid, $usergroups)) { print "

Delete User Group

\n"; print "The selected user group does not exist.\n"; return; } if($usergroups[$groupid]['ownerid'] != $user['id']) { if(($usergroups[$groupid]['custom'] == 0 || $usergroups[$groupid]['courseroll'] == 1)) { if(! checkUserHasPerm('Manage Federated User Groups (global)') && (! checkUserHasPerm('Manage Federated User Groups (affiliation only)') || $usergroups[$groupid]['groupaffiliationid'] != $user['affiliationid'])) { print "

Delete User Group

\n"; print "You do not have access to delete the selected user group.\n"; return; } } else { print "

Delete User Group

\n"; print "You do not have access to delete the selected user group.\n"; return; } } } else { $userresources = getUserResources(array("groupAdmin"), array("manageGroup"), 1); $noaccess = 1; foreach(array_keys($userresources) as $rtype) { if(array_key_exists($groupid, $userresources[$rtype])) { $noaccess = 0; break; } } if($noaccess) { print "

Delete Resource Group

\n"; print "You do not have access to delete the selected resource group.\n"; return; } } $resourcegroups = getResourceGroups(); if($type == "user") { $title = "Delete User Group"; $usemsg = "This group is currently in use. You cannot delete it until " . "it is no longer being used."; $question = "Delete the following user group?"; $name = $usergroups[$groupid]["name"]; $target = ""; } else { $title = "Delete Resource Group"; $usemsg = "This group is currently assigned to at least one node in the " . "privilege tree. You cannot delete it until it is no longer " . "in use."; $question = "Delete the following resource group?"; list($resourcetype, $name) = explode('/', $resourcegroups[$groupid]["name"]); $target = "#resources"; } if(checkForGroupUsage($groupid, $type)) { print "

$title

\n"; print $usemsg; return; } print "

\n"; print "

$title

\n"; print "$question

\n"; print "\n"; if($type == "resource") { print " \n"; print " \n"; print " \n"; print " \n"; } print " \n"; print " \n"; print " \n"; print " \n"; if($type == "resource") { print " \n"; print " \n"; print " \n"; print " \n"; } elseif($usergroups[$groupid]['courseroll'] == 1 || $usergroups[$groupid]['custom'] == 0) { print "\n"; print " \n"; if($usergroups[$groupid]['courseroll'] == 1) print " \n"; elseif($usergroups[$groupid]['custom'] == 0) print " \n"; print "\n"; print "\n"; print " \n"; print "\n"; } print "

Type:	$resourcetype
Name:	$name
Owning User Group:	" . $resourcegroups[$groupid]["owner"] . "
Type:	Course Roll	Federated
Note: This type of group is "; print "created from external sources and could be recreated from "; print "those sources at any time.

\n"; print "\n"; print " \n"; print " \n"; print " \n"; print " \n"; print "

\n"; print " \n"; print "

\n"; print "

\n"; } //////////////////////////////////////////////////////////////////////////////// /// /// \fn submitDeleteGroup() /// /// \brief deletes an group from the database and notifies the user /// //////////////////////////////////////////////////////////////////////////////// function submitDeleteGroup() { $groupid = getContinuationVar("groupid"); $type = getContinuationVar("type"); if($type == "user") $table = "usergroup"; else $table = "resourcegroup"; $query = "DELETE FROM $table " . "WHERE id = $groupid"; doQuery($query, 315); clearPrivCache(); viewGroups(); } //////////////////////////////////////////////////////////////////////////////// /// /// \fn addGroupUser() /// /// \brief adds a user to a group /// //////////////////////////////////////////////////////////////////////////////// function addGroupUser() { global $submitErr, $submitErrMsg; $groupid = getContinuationVar("groupid"); $newuser = processInputVar("newuser", ARG_STRING); if(! validateUserid($newuser)) { $submitErr |= IDNAMEERR; $submitErrMsg[IDNAMEERR] = "Invalid login ID"; editOrAddGroup(0); return; } addUserGroupMember($newuser, $groupid); editOrAddGroup(0); } //////////////////////////////////////////////////////////////////////////////// /// /// \fn deleteGroupUser() /// /// \brief deletes a user from a group /// //////////////////////////////////////////////////////////////////////////////// function deleteGroupUser() { $groupid = getContinuationVar("groupid"); $userid = getContinuationVar("userid"); $test = getUserUnityID($userid); if(! empty($test)) deleteUserGroupMember($userid, $groupid); editOrAddGroup(0); } //////////////////////////////////////////////////////////////////////////////// /// /// \fn jsonGetGroupInfo() /// /// \brief gets members of submitted resource group and returns in JSON format /// //////////////////////////////////////////////////////////////////////////////// function jsonGetGroupInfo() { $groupid = processInputVar('groupid', ARG_NUMERIC); $mousex = processInputVar('mousex', ARG_NUMERIC); $mousey = processInputVar('mousey', ARG_NUMERIC); $userresources = getUserResources(array("groupAdmin"), array("manageGroup"), 1); $found = 0; foreach(array_keys($userresources) as $type) { if(array_key_exists($groupid, $userresources[$type])) { $found = 1; break; } } if(! $found || $mousex < 0 || $mousex > 5000 || $mousey < 0 || $mousey > 500000) { header('Content-Type: text/json; charset=utf-8'); print '{} && {"items":' . json_encode(array()) . '}'; return; } $members = getResourceGroupMembers($type); $data = ''; if(! empty($members[$type][$groupid])) { uasort($members[$type][$groupid], "sortKeepIndex"); foreach($members[$type][$groupid] as $mem) { $data .= "{$mem['name']}
"; } } else $data = '(empty group)'; $arr = array('members' => $data, 'x' => $mousex, 'y' => $mousey, 'groupid' => $groupid); header('Content-Type: text/json-comment-filtered; charset=utf-8'); print '{} && {"items":' . json_encode($arr) . '}'; } ?>