admin/roles/allowassign.php

   1 <?php
   2 /**
   3  * this page defines what roles can access (grant user that role and override that roles'
   4  * capabilities in different context. For example, we can say that Teachers can only grant
   5  * student role or modify student role's capabilities. Note that you need both the right
   6  * capability moodle/role:assign or moodle/role:manage and this database table roles_deny_grant
   7  * to be able to grant roles. If a user has moodle/role:manage at site level assignment
   8  * then he can modify the roles_allow_assign table via this interface.
   9  */
  10     require_once('../../config.php');
  11     require_once($CFG->libdir.'/adminlib.php');
  12
  13     admin_externalpage_setup('defineroles');
  14
  15
  16     $sitecontext = get_context_instance(CONTEXT_SYSTEM);
  17     require_capability('moodle/role:manage', $sitecontext);
  18
  19 /// form processiong here
  20
  21 /// get all roles
  22
  23     $roles = get_all_roles();
  24
  25     if ($grant = data_submitted()) {
  26
  27         foreach ($grant as $grole => $val) {
  28             if ($grole == 'dummy') {
  29                 continue;
  30             }
  31
  32             $string = explode('_', $grole);
  33             $temp[$string[1]][$string[2]] = 1; // if set, means can access
  34         }
  35
  36 // if current assignment is in data_submitted, ignore, else, write deny into db
  37         foreach ($roles as $srole) {
  38             foreach ($roles as $trole) {
  39                 if (isset($temp[$srole->id][$trole->id])) { // if set, need to write to db
  40                     if (!$record = get_record('role_allow_assign', 'roleid', $srole->id, 'allowassign', $trole->id)) {
  41                         allow_assign($srole->id, $trole->id);
  42                     }
  43                 } else { //if set, means can access, attempt to remove it from db
  44                     delete_records('role_allow_assign', 'roleid', $srole->id, 'allowassign', $trole->id);
  45                 }
  46             }
  47         }
  48         // updated allowassigns sitewide...
  49         mark_context_dirty($sitecontext->path);
  50     }
  51 /// displaying form here
  52
  53     admin_externalpage_print_header();
  54
  55     $currenttab='allowassign';
  56     require_once('managetabs.php');
  57
  58     $table->tablealign = 'center';
  59     $table->cellpadding = 5;
  60     $table->cellspacing = 0;
  61     $table->width = '90%';
  62     $table->align[] = 'right';
  63
  64 /// get all the roles identifier
  65     foreach ($roles as $role) {
  66         $rolesname[] = format_string($role->name);
  67         $roleids[] = $role->id;
  68         $table->align[] = 'center';
  69         $table->wrap[] = 'nowrap';
  70     }
  71
  72     $table->head = array_merge(array(''), $rolesname);
  73
  74     foreach ($roles as $role) {
  75         $beta = get_box_list($role->id, $roleids);
  76         $table->data[] = array_merge(array(format_string($role->name)), $beta);
  77     }
  78
  79     print_simple_box(get_string('configallowassign', 'admin'), 'center');
  80
  81     echo '<form action="allowassign.php" method="post">';
  82     print_table($table);
  83     echo '<div class="buttons"><input type="submit" value="'.get_string('savechanges').'"/>';
  84     echo '<input type="hidden" name="dummy" value="1" />'; // this is needed otherwise we do not know a form has been submitted
  85     echo '</div></form>';
  86
  87     admin_externalpage_print_footer();
  88
  89
  90
  91 function get_box_list($roleid, $arraylist){
  92
  93     foreach ($arraylist as $targetid) {
  94         if (get_record('role_allow_assign', 'roleid', $roleid, 'allowassign', $targetid)) {
  95             $array[] = '<input type="checkbox" name="s_'.$roleid.'_'.$targetid.'" value="1" checked="checked"/>';
  96         } else {
  97             $array[] = '<input type="checkbox" name="s_'.$roleid.'_'.$targetid.'" value="1" />';
  98         }
  99     }
 100     return $array;
 101 }
 102 ?>