+/***************************************************************************

+ * admin_userauth.php

+ * -------------------

+ * begin : Saturday, Feb 13, 2001

+ * copyright : (C) 2001 The phpBB Group

+ * email : support@phpbb.com

+ *

+ * $Id$

+ *

+ *

+ ***************************************************************************/

+

+

+/***************************************************************************

+ *

+ * This program is free software; you can redistribute it and/or modify

+ * it under the terms of the GNU General Public License as published by

+ * the Free Software Foundation; either version 2 of the License, or

+ * (at your option) any later version.

+ *

+ *

+ ***************************************************************************/

+ $module['Auth']['Users'] = $filename;

+if( !$userdata['session_logged_in'] )

+{

+ header("Location: ../login.$phpEx?forward_page=/admin");

+}

+else if( $userdata['user_level'] != ADMIN )

+{

+ message_die(GENERAL_MESSAGE, "You are not authorised to administer this board");

+}

+//

+// Start program - define vars

+//

+ "auth_view" => AUTH_VIEW,

+ "auth_read" => AUTH_READ,

+ "auth_post" => AUTH_POST,

+ "auth_reply" => AUTH_REPLY,

+ "auth_edit" => AUTH_EDIT,

+ "auth_delete" => AUTH_DELETE,

+

+$forum_auth_fields = array("auth_view", "auth_read", "auth_post", "auth_reply", "auth_edit", "auth_delete", "auth_sticky", "auth_announce");

+

+$forum_auth_key_fields = array("auth_view", "auth_read", "auth_post", "auth_reply");

+

+//

+// Future stuff

+//

+//, "auth_votecreate", "auth_vote", "auth_attachments", "auth_allow_html", "auth_allow_bbcode", "auth_allow_smilies"

+//

+

+ if( $u_access[$i]['forum_id'] == $chg_forum_id )

+ if( $u_access[$i]['auth_mod'] && !$value && !$u_access[$i]['group_single_user'] )

+

+ if( $u_access[$i]['auth_mod'] != $value && $u_access[$i]['group_single_user'] )

+

+

+ $auth_exists = TRUE;

+ }

+

+ $valid_auth_mod[$chg_forum_id] = 1;

+ print_r($valid_auth_mod_sql);

+ echo "ACL : $chg_forum_id : " . $valid_auth_mod[$chg_forum_id] . "<BR>";

+

+

+

+ if( empty($valid_auth_mod[$chg_forum_id]) && !( $u_access[$i]['auth_mod'] && $u_access[$i]['group_single_user']) )

+

+

+

+

+ if( $u_access[$i][$auth_field] != $value && $u_access[$i]['group_single_user'])

+

+ $auth_exists = TRUE;

+ if( !empty($update_acl_sql) )

+ {

+ $valid_auth_acl_sql[$chg_forum_id] = "UPDATE " . AUTH_ACCESS_TABLE . " SET " . $update_acl_sql ." WHERE forum_id = $chg_forum_id AND group_id = " . $ug_info['group_id'];

+ }

+ }

+ else

+ {

+// $auth_exists = TRUE;

+ }// not_mod

+echo "forum = $chg_forum_id : " . $auth_exists . " : " . $value . " <BR>";

+

+ if($valid_auth_acl_sql[$chg_forum_id] == "" && !$auth_exists && $value && empty($valid_auth_mod[$chg_forum_id]))

+echo " : HERE ";

+echo " : HERE2 ";

+ if( $chg_forum_id == $forum_access[$j]['forum_id'] )

+echo " : HERE3 ";

+echo " : HERE4 ";

+ $template_header = "admin/page_header.tpl";

+ include('page_header_admin.'.$phpEx);

+

+ "body" => "admin/ug_auth_select_body.tpl")

+ );

+ "S_USERAUTH_ACTION" => append_sid("admin_userauth.$phpEx"),

+ "S_USERS_SELECT" => $select_list)

+else

+{

+ //

+ // Front end

+ //

+ $template_header = "admin/page_header.tpl";

+ include('page_header_admin.'.$phpEx);

+ $template->set_filenames(array(

+ "body" => "admin/ug_auth_body.tpl")

+ );

+ //

+ //

+ //

+ $user_id = $HTTP_GET_VARS[POST_USERS_URL];

+ $sql = "SELECT f.forum_id, f.forum_name, f.auth_view, f.auth_read, f.auth_post, f.auth_reply, f.auth_edit, f.auth_delete, f.auth_announce, f.auth_sticky

+ FROM " . FORUMS_TABLE . " f, " . CATEGORIES_TABLE . " c

+ WHERE c.cat_id = f.cat_id

+ ORDER BY c.cat_order ASC, f.forum_order ASC";

+ $fa_result = $db->sql_query($sql);

+ $forum_access = $db->sql_fetchrowset($fa_result);

+ if($adv == -1)

+ for($i = 0; $i < count($forum_access); $i++)

+ while(list($forum_id, $forum_row) = each($forum_access))

+ for($j = 0; $j < count($forum_auth_key_fields); $j++)

+ $basic_auth_level[$forum_row['forum_id']] = "public";

+

+ if($forum_row[$forum_auth_key_fields[$j]] == AUTH_REG)

+ {

+ $basic_auth_level[$forum_row['forum_id']] = "registered";

+ $basic_auth_level_fields[$forum_row['forum_id']][] = $forum_auth_fields[$j];

+ }

+ else if($forum_row[$forum_auth_key_fields[$j]] == AUTH_ACL)

+ {

+ $basic_auth_level[$forum_row['forum_id']] = "private";

+ $basic_auth_level_fields[$forum_row['forum_id']][] = $forum_auth_fields[$j];

+ }

+ else if($forum_row[$forum_auth_key_fields[$j]] == AUTH_MOD)

+ {

+ $basic_auth_level[$forum_row['forum_id']] = "moderator";

+ $basic_auth_level_fields[$forum_row['forum_id']][] = $forum_auth_fields[$j];

+ }

+ else if($forum_row[$forum_auth_key_fields[$j]] == AUTH_ADMIN)

+ {

+ $basic_auth_level[$forum_row['forum_id']] = "admin";

+ $basic_auth_level_fields[$forum_row['forum_id']][] = $forum_auth_fields[$j];

+ }

+ $sql = "SELECT u.user_id, u.username, u.user_level, g.group_id, g.group_name, g.group_single_user

+ FROM " . USERS_TABLE . " u, " . GROUPS_TABLE . " g, " . USER_GROUP_TABLE . " ug

+ WHERE u.user_id = $user_id

+ AND ug.user_id = u.user_id

+ AND g.group_id = ug.group_id";

+ $u_result = $db->sql_query($sql);

+ $userinf = $db->sql_fetchrowset($u_result);

+ $sql = "SELECT aa.forum_id, aa.auth_view, aa.auth_read, aa.auth_post, aa.auth_reply, aa.auth_edit, aa.auth_delete, aa.auth_mod

+ FROM " . AUTH_ACCESS_TABLE . " aa, " . USER_GROUP_TABLE . " ug, " . GROUPS_TABLE. " g

+ WHERE ug.user_id = $user_id

+ AND g.group_id = ug.group_id

+ AND aa.group_id = ug.group_id

+ AND g.group_single_user = " . TRUE;

+ $au_result = $db->sql_query($sql);

+

+ $num_u_access = $db->sql_numrows($au_result);

+

+ if($num_u_access)

+ while($u_row = $db->sql_fetchrow($au_result))

+ {

+ $u_access[$u_row['forum_id']][] = $u_row;

+ $num_forum_access[$u_row['forum_id']]++;

+ }

+ $is_admin = ($userinf[0]['user_level'] == ADMIN && $userinf[0]['user_id'] != ANONYMOUS) ? 1 : 0;

+ for($i = 0; $i < count($forum_access); $i++)

+ $f_forum_id = $forum_access[$i]['forum_id'];

+ $is_forum_restricted[$f_forum_id] = 0;

+ for($j = 0; $j < count($forum_auth_fields); $j++)

+ $key = $forum_auth_fields[$j];

+ $value = $forum_access[$i][$key];

+ switch($value)

+ {

+ case AUTH_ALL:

+ $auth_user[$f_forum_id][$key] = 1;

+ break;

+ case AUTH_REG:

+ $auth_user[$f_forum_id][$key] = ($user_id != ANONYMOUS) ? 1 : 0;

+ break;

+

+ case AUTH_ACL:

+ if($user_id != ANONYMOUS && $num_forum_access[$f_forum_id])

+ {

+ $result = a_auth_check_user(AUTH_ACL, $key, $u_access[$f_forum_id], $is_admin);

+ $auth_user[$f_forum_id][$key] = $result['auth'];

+ }

+ else

+ {

+ $auth_user[$f_forum_id][$key] = 0;

+ }

+ break;

+ case AUTH_MOD:

+ if($user_id != ANONYMOUS && $num_forum_access[$f_forum_id])

+ {

+ $result = a_auth_check_user(AUTH_MOD, $key, $u_access[$f_forum_id], $is_admin);

+ $auth_user[$f_forum_id][$key] = $result['auth'];

+ }

+ else

+ {

+ $auth_user[$f_forum_id][$key] = 0;

+ }

+ break;

+ case AUTH_ADMIN:

+ $auth_user[$f_forum_id][$key] = $is_admin;

+ break;

+ default:

+ $auth_user[$f_forum_id][$key] = 0;

+ break;

+ }

+ }

+ //

+ // Is user a moderator?

+ //

+ if($user_id != ANONYMOUS && $num_forum_access[$f_forum_id])

+ {

+ $result = a_auth_check_user(AUTH_MOD, 'auth_mod', $u_access[$f_forum_id], 0);

+ $auth_user[$f_forum_id]['auth_mod'] = $result['auth'];

+ }

+ else

+ {

+ $auth_user[$f_forum_id][$key] = 0;

+ while(list($forumkey, $user_ary) = each($auth_user))

+ $simple_auth[$forumkey] = 1;

+ while(list($fieldkey, $value) = each($user_ary))

+ {

+ $simple_auth[$forumkey] = $simple_auth[$forumkey] && $value;

+ }

+ reset($auth_user);

+ $i = 0;

+ if($adv == -1)

+ while(list($forumkey, $user_ary) = each($auth_user))

+ if($basic_auth_level[$forumkey] == "private")

+ $allowed = 1;

+ for($j = 0; $j < count($basic_auth_level_fields[$forumkey]); $j++)

+ if(!$auth_user[$forumkey][$basic_auth_level_fields[$forumkey][$j]])

+ {

+ $allowed = 0;

+ }

+ $optionlist_acl = "<select name=\"private[$forumkey]\">";

+ if($is_admin || $user_ary['auth_mod'])

+ {

+ $optionlist_acl .= "<option value=\"1\">Allowed Access</option>";

+ }

+ else if($allowed)

+ {

+ $optionlist_acl .= "<option value=\"1\" selected>Allowed Access</option><option value=\"0\">Disallowed Access</option>";

+ }

+ else

+ {

+ $optionlist_acl .= "<option value=\"1\">Allowed Access</option><option value=\"0\" selected>Disallowed Access</option>";

+ }

+ $optionlist_acl .= "</select>";

+ else

+ $optionlist_acl = "&nbsp;";

+

+ $optionlist_mod = "<select name=\"moderator[$forumkey]\">";

+ if($user_ary['auth_mod'])

+ $optionlist_mod .= "<option value=\"1\" selected>Is a Moderator</option><option value=\"0\">Is not a Moderator</option>";

+ $optionlist_mod .= "<option value=\"1\">Is a Moderator</option><option value=\"0\" selected>Is not a Moderator</option>";

+ $optionlist_mod .= "</select>";

+ $row_class = ($i%2) ? "row2" : "row1";

+ $template->assign_block_vars("forums", array(

+ "ROW_CLASS" => $row_class,

+ "FORUM_NAME" => $forum_access[$i]['forum_name'],

+ "U_FORUM_AUTH" => append_sid("admin_forumauth.$phpEx?f=" . $forum_access[$i]['forum_id']),

+ "S_ACL_SELECT" => $optionlist_acl,

+ "S_MOD_SELECT" => $optionlist_mod)

+ );

+ $i++;

+ }

+ reset($auth_user);

+ $t_username .= $userinf[0]['username'];

+ $s_user_type = ($is_admin) ? '<select name="userlevel"><option value="admin" selected>Administrator</option><option value="user">User</option></select>' : '<select name="userlevel"><option value="admin">Administrator</option><option value="user" selected>User</option></select>';

+ for($i = 0; $i < count($userinf); $i++)

+ if(!$userinf[$i]['group_single_user'])

+ {

+ $group_name[] = $userinf[$i]['group_name'];

+ $group_id[] = $userinf[$i]['group_id'];

+ }

+ if(count($group_name))

+ $t_usergroup_list = "";

+ for($i = 0; $i < count($userinf); $i++)

+ $t_usergroup_list .= "<a href=\"admin_groupauth.$phpEx?" . POST_GROUPS_URL . "=" . $group_id[$i] . "\">" . $group_name[$i] . "</a>";

+ if($i < count($group_name) - 1)

+ {

+ $t_usergroup_list .= ", ";

+ }

+ else

+ {

+ $t_usergroup_list = "None";

+ }

+ $s_hidden_fields = "<input type=\"hidden\" name=\"" . POST_USERS_URL . "\" value=\"$user_id\">";

+ $s_hidden_fields .= "<input type=\"hidden\" name=\"curadmin\" value=\"" . $is_admin ."\">";

+ $template->assign_vars(array(

+ "USERNAME" => $t_username,

+ "USER_GROUP_MEMBERSHIPS" => "This user is a $s_user_type and belongs to the following groups: $t_usergroup_list",

+ "L_USER_OR_GROUPNAME" => "Username",

+ "L_USER_OR_GROUP" => "User",

+ "U_USER_OR_GROUP" => append_sid("admin_userauth.$phpEx"),

+ "U_FORUMAUTH" => append_sid("admin_forumauth.$phpEx"),

+ "S_USER_AUTH_ACTION" => append_sid("admin_userauth.$phpEx"),

+ "S_HIDDEN_FIELDS" => $s_hidden_fields)

+ );

+ } // if adv == -1

+

+}

+include('page_footer_admin.'.$phpEx);