admin/roles/override.php

   1 <?php  //$Id$
   2
   3     require_once('../../config.php');
   4
   5     $contextid = required_param('contextid', PARAM_INT);   // context id
   6     $roleid    = optional_param('roleid', 0, PARAM_INT);   // requested role id
   7     $userid    = optional_param('userid', 0, PARAM_INT);   // needed for user tabs
   8     $courseid  = optional_param('courseid', 0, PARAM_INT); // needed for user tabs
   9     $cancel    = optional_param('cancel', 0, PARAM_BOOL);
  10
  11     if (!$context = get_record('context', 'id', $contextid)) {
  12         error('Bad context ID');
  13     }
  14
  15     if (!$sitecontext = get_context_instance(CONTEXT_SYSTEM)) {
  16         error('No site ID');
  17     }
  18
  19     if ($context->id == $sitecontext->id) {
  20         error('Can not override base role capabilities');
  21     }
  22
  23     if (!has_capability('moodle/role:override', $context)) {
  24         error('You do not have permission to change overrides in this context!');
  25     }
  26
  27     if ($courseid) {
  28         if (!$course = get_record('course', 'id', $courseid)) {
  29             error('Bad course ID');
  30         }
  31     } else {
  32         $course = clone($SITE);
  33         $courseid = SITEID;
  34     }
  35
  36     require_login($course);
  37
  38     $baseurl = 'override.php?contextid='.$context->id;
  39     if (!empty($userid)) {
  40         $baseurl .= '&amp;userid='.$userid;
  41     }
  42     if ($courseid != SITEID) {
  43         $baseurl .= '&amp;courseid='.$courseid;
  44     }
  45
  46     if ($cancel) {
  47         redirect($baseurl);
  48     }
  49
  50 /// needed for tabs.php
  51     $overridableroles = get_overridable_roles($context);
  52     $assignableroles  = get_assignable_roles($context);
  53
  54 /// Get some language strings
  55
  56     $strroletooverride = get_string('roletooverride', 'role');
  57     $stroverrideusers  = get_string('overrideusers', 'role');
  58     $straction         = get_string('overrideroles', 'role');
  59     $strcurrentrole    = get_string('currentrole', 'role');
  60     $strcurrentcontext = get_string('currentcontext', 'role');
  61     $strparticipants   = get_string('participants');
  62
  63 /// Make sure this user can override that role
  64
  65     if ($roleid) {
  66         if (!user_can_override($context, $roleid)) {
  67             error ('you can not override this role in this context');
  68         }
  69     }
  70
  71     if ($userid) {
  72         $user = get_record('user', 'id', $userid);
  73         $fullname = fullname($user, has_capability('moodle/site:viewfullnames', $context));
  74     }
  75
  76 /// get all cababilities
  77     $capabilities = fetch_context_capabilities($context);
  78
  79 /// Process incoming role override
  80     if ($data = data_submitted() and $roleid and confirm_sesskey()) {
  81         $allowed_values = array(CAP_INHERIT, CAP_ALLOW, CAP_PREVENT, CAP_PROHIBIT);
  82
  83         $localoverrides = get_records_select('role_capabilities', "roleid = $roleid AND contextid = $context->id",
  84                                              '', 'capability, permission, id');
  85
  86         foreach ($capabilities as $cap) {
  87
  88             if (!isset($data->{$cap->name})) {
  89                 //cap not specified in form
  90                 continue;
  91             }
  92
  93             if (islegacy($data->{$cap->name})) {
  94                 continue;
  95             }
  96
  97             $capname = $cap->name;
  98             $value = clean_param($data->{$cap->name}, PARAM_INT);
  99             if (!in_array($value, $allowed_values)) {
 100                  continue;
 101             }
 102
 103             if (isset($localoverrides[$capname])) {
 104                 // Something exists, so update it
 105                 assign_capability($capname, $value, $roleid, $context->id, true);
 106             } else { // insert a record
 107                 if ($value != CAP_INHERIT) {    // Ignore inherits
 108                     assign_capability($capname, $value, $roleid, $context->id);
 109                 }
 110             }
 111         }
 112         redirect($baseurl);
 113     }
 114
 115
 116 /// Print the header and tabs
 117
 118     if ($context->contextlevel == CONTEXT_USER) {
 119         $navlinks = array();
 120         /// course header
 121         if ($course->id != SITEID) {
 122             $navlinks[] = array('name' => $course->shortname, 'link' => "$CFG->wwwroot/course/view.php?id=$course->id", 'type' => 'course');
 123             $navlinks[] = array('name' => $strparticipants, 'link' => "$CFG->wwwroot/user/index.php?id=$course->id", 'type' => 'misc');
 124             $navlinks[] = array('name' => $fullname, 'link' => "$CFG->wwwroot/user/view.php?id=$userid&amp;course=$courseid", 'type' => 'misc');
 125             $navlinks[] = array('name' => $straction, 'link' => null, 'type' => 'misc');
 126             $navigation = build_navigation($navlinks);
 127             print_header("$fullname", "$fullname", $navigation, "", "", true, "&nbsp;", navmenu($course));
 128
 129         /// site header
 130         } else {
 131             $navlinks[] = array('name' => $fullname, 'link' => "$CFG->wwwroot/user/view.php?id=$userid&amp;course=$courseid", 'type' => 'misc');
 132             $navlinks[] = array('name' => $straction, 'link' => null, 'type' => 'misc');
 133             $navigation = build_navigation($navlinks);
 134             print_header("$course->fullname: $fullname", $course->fullname, $navigation, "", "", true, "&nbsp;", navmenu($course));
 135         }
 136         $showroles = 1;
 137         $currenttab = 'override';
 138         include_once($CFG->dirroot.'/user/tabs.php');
 139     } else if ($context->contextlevel==CONTEXT_COURSE and $context->instanceid == SITEID) {
 140         require_once($CFG->libdir.'/adminlib.php');
 141         admin_externalpage_setup('frontpageroles');
 142         admin_externalpage_print_header();
 143         $currenttab = '';
 144         $tabsmode = 'override';
 145         include_once('tabs.php');
 146     } else {
 147         $currenttab = '';
 148         $tabsmode = 'override';
 149         include_once('tabs.php');
 150     }
 151
 152     print_heading_with_help(get_string('overrides', 'role'), 'overrides');
 153
 154     if ($roleid) {
 155     /// prints a form to swap roles
 156         echo '<div class="selector">';
 157         echo $strcurrentcontext.': '.print_context_name($context).'<br/>';
 158         $overridableroles = array('0'=>get_string('listallroles', 'role').'...') + $overridableroles;
 159         popup_form("$CFG->wwwroot/$CFG->admin/roles/override.php?userid=$userid&amp;courseid=$courseid&amp;contextid=$contextid&amp;roleid=",
 160             $overridableroles, 'switchrole', $roleid, '', '', '', false, 'self', $strroletooverride);
 161         echo '</div>';
 162
 163         $parentcontexts = get_parent_contexts($context);
 164         if (!empty($parentcontexts)) {
 165             $parentcontext = array_shift($parentcontexts);
 166             $parentcontext = get_context_instance_by_id($parentcontext);
 167         } else {
 168             $parentcontext = $context; // site level in override??
 169         }
 170
 171         $r_caps = role_context_capabilities($roleid, $parentcontext);
 172
 173         $localoverrides = get_records_select('role_capabilities', "roleid = $roleid AND contextid = $context->id",
 174                                              '', 'capability, permission, id');
 175
 176         $lang = str_replace('_utf8', '', current_language());
 177
 178         if (!empty($capabilities)) {
 179             // Print the capabilities overrideable in this context
 180             print_simple_box_start('center');
 181             include_once('override.html');
 182             print_simple_box_end();
 183
 184         } else {
 185             notice(get_string('nocapabilitiesincontext', 'role'),
 186                     $CFG->wwwroot.'/'.$CFG->admin.'/roles/'.$baseurl);
 187         }
 188
 189     } else {   // Print overview table
 190
 191         $table->tablealign = 'center';
 192         $table->cellpadding = 5;
 193         $table->cellspacing = 0;
 194         $table->width = '60%';
 195         $table->head = array(get_string('roles', 'role'), get_string('description'), get_string('overrides', 'role'));
 196         $table->wrap = array('nowrap', '', 'nowrap');
 197         $table->align = array('right', 'left', 'center');
 198
 199         foreach ($overridableroles as $roleid => $rolename) {
 200             $countusers = 0;
 201             $overridecount = count_records_select('role_capabilities', "roleid = $roleid AND contextid = $context->id");
 202             $description = format_string(get_field('role', 'description', 'id', $roleid));
 203             $table->data[] = array('<a href="'.$baseurl.'&amp;roleid='.$roleid.'">'.$rolename.'</a>', $description, $overridecount);
 204         }
 205
 206         print_table($table);
 207     }
 208
 209     print_footer($course);
 210
 211 ?>