3 * Provide an administration interface
4 * DO NOT USE: INSECURE.
6 * TODO : remove everything related to group editing (SpecialGrouplevels.php)
8 * @subpackage SpecialPage
12 require_once('HTMLForm.php');
13 require_once('Group.php');
16 function wfSpecialUserrights($par=null) {
20 $form = new UserrightsForm($wgRequest);
25 * A class to manage user levels rights.
27 * @subpackage SpecialPage
29 class UserrightsForm
extends HTMLForm
{
30 var $mPosted, $mRequest, $mSaveprefs;
31 /** Escaped local url name*/
35 function UserrightsForm ( &$request ) {
36 $this->mPosted
= $request->wasPosted();
37 $this->mRequest
= $request;
38 $this->mName
= 'userrights';
40 $titleObj = Title
::makeTitle( NS_SPECIAL
, 'Userrights' );
41 $this->action
= $titleObj->escapeLocalURL();
45 * Manage forms to be shown according to posted datas.
46 * Depending on the submit button used : Call a form or a saving function.
49 // show the general form
51 if ( $this->mPosted
) {
52 // show some more forms
53 if($this->mRequest
->getCheck('ssearchuser')) {
54 $this->editUserGroupsForm( $this->mRequest
->getVal('user-editname')); }
57 if($this->mRequest
->getCheck('saveusergroups')) {
58 $this->saveUserGroups($this->mRequest
->getVal('user-editname'),
59 $this->mRequest
->getArray('member'),
60 $this->mRequest
->getArray('available'));
67 * Save user groups changes in the database.
68 * Datas comes from the editUserGroupsForm() form function
70 * @param string $username Username to apply changes to.
71 * @param array $removegroup id of groups to be removed.
72 * @param array $addgroup id of groups to be added.
74 * @todo Log groupname instead of group id.
76 function saveUserGroups($username,$removegroup,$addgroup) {
77 $u = User
::NewFromName($username);
80 $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
84 if($u->getID() == 0) {
85 $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
89 $groups = $u->getGroups();
91 // remove then add groups
92 if(isset($removegroup)) {
93 $groups = array_diff($groups, $removegroup);
94 $logcomment .= implode( ' -', $removegroup);
96 if(isset($addgroup)) {
97 $groups = array_merge($groups, $addgroup);
98 $logcomment .= implode( ' +', $addgroup );
100 // save groups in user object and database
101 $u->setGroups($groups);
104 $log = new LogPage( 'rights' );
105 $log->addEntry( 'rights', Title
::makeTitle( NS_USER
, $u->getName() ), $logcomment );
110 * It allows a user to look for a username and edit its groups membership
112 function switchForm() {
116 $wgOut->addHTML( "<form name=\"uluser\" action=\"$this->action\" method=\"post\">\n" );
117 $wgOut->addHTML( $this->fieldset( 'lookup-user',
118 $this->textbox( 'user-editname' ) .
119 '<input type="submit" name="ssearchuser" value="'.wfMsg('editusergroup').'" />'
121 $wgOut->addHTML( "</form>\n" );
125 * Edit user groups membership
126 * @param string $username Name of the user.
128 function editUserGroupsForm($username) {
131 $user = User
::newFromName($username);
133 $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
137 if($user->getID() == 0) {
138 $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
142 $groups = $user->getGroups();
144 $wgOut->addHTML( "<form name=\"editGroup\" action=\"$this->action\" method=\"post\">\n".
145 '<input type="hidden" name="user-editname" value="'.$username.'" />');
146 $wgOut->addHTML( $this->fieldset( 'editusergroup',
147 wfMsg('editing', $this->mRequest
->getVal('user-editname')).".<br />\n" .
148 '<table border="0" align="center"><tr><td>'.
149 HTMLSelectGroups('member', $this->mName
.'-groupsmember', $groups,true,6).
151 HTMLSelectGroups('available', $this->mName
.'-groupsavailable', $groups,true,6,true).
152 '</td></tr></table>'."\n".
153 '<p>'.wfMsg('userrights-groupshelp').'</p>'."\n".
154 '<input type="submit" name="saveusergroups" value="'.wfMsg('saveusergroups').'" />'
156 $wgOut->addHTML( "</form>\n" );
158 } // end class UserrightsForm