<?php
/**
* Manage roles in a database cluster
*
* $Id: roles.php,v 1.13 2008/03/21 15:32:57 xzilla Exp $
*/
// Include application functions
include_once('./libraries/lib.inc.php');
$action = (isset($_REQUEST['action'])) ? $_REQUEST['action'] : '';
if (!isset($msg)) $msg = '';
/**
* Displays a screen for create a new role
*/
function doCreate($msg = '') {
global $data, $misc, $username;
global $lang;
if (!isset($_POST['formRolename'])) $_POST['formRolename'] = '';
if (!isset($_POST['formPassword'])) $_POST['formPassword'] = '';
if (!isset($_POST['formConfirm'])) $_POST['formConfirm'] = '';
if (!isset($_POST['formConnLimit'])) $_POST['formConnLimit'] = '';
if (!isset($_POST['formExpires'])) $_POST['formExpires'] = '';
if (!isset($_POST['memberof'])) $_POST['memberof'] = array();
if (!isset($_POST['members'])) $_POST['members'] = array();
if (!isset($_POST['adminmembers'])) $_POST['adminmembers'] = array();
$misc->printTrail('role');
$misc->printTitle($lang['strcreaterole'],'pg.role.create');
$misc->printMsg($msg);
echo "<form action=\"roles.php\" method=\"post\">\n";
echo "<table>\n";
echo "\t<tr>\n\t\t<th class=\"data left required\" style=\"width: 130px\">{$lang['strname']}</th>\n";
echo "\t\t<td class=\"data1\"><input size=\"15\" maxlength=\"{$data->_maxNameLen}\" name=\"formRolename\" value=\"", htmlspecialchars($_POST['formRolename']), "\" /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\">{$lang['strpassword']}</th>\n";
echo "\t\t<td class=\"data1\"><input size=\"15\" type=\"password\" name=\"formPassword\" value=\"", htmlspecialchars($_POST['formPassword']), "\" /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\">{$lang['strconfirm']}</th>\n";
echo "\t\t<td class=\"data1\"><input size=\"15\" type=\"password\" name=\"formConfirm\" value=\"", htmlspecialchars($_POST['formConfirm']), "\" /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\"><label for=\"formSuper\">{$lang['strsuper']}</label></th>\n";
echo "\t\t<td class=\"data1\"><input type=\"checkbox\" id=\"formSuper\" name=\"formSuper\"",
(isset($_POST['formSuper'])) ? ' checked="checked"' : '', " /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\"><label for=\"formCreateDB\">{$lang['strcreatedb']}</label></th>\n";
echo "\t\t<td class=\"data1\"><input type=\"checkbox\" id=\"formCreateDB\" name=\"formCreateDB\"",
(isset($_POST['formCreateDB'])) ? ' checked="checked"' : '', " /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\"><label for=\"formCreateRole\">{$lang['strcancreaterole']}</label></th>\n";
echo "\t\t<td class=\"data1\"><input type=\"checkbox\" id=\"formCreateRole\" name=\"formCreateRole\"",
(isset($_POST['formCreateRole'])) ? ' checked="checked"' : '', " /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\"><label for=\"formInherits\">{$lang['strinheritsprivs']}</label></th>\n";
echo "\t\t<td class=\"data1\"><input type=\"checkbox\" id=\"formInherits\" name=\"formInherits\"",
(isset($_POST['formInherits'])) ? ' checked="checked"' : '', " /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\"><label for=\"formCanLogin\">{$lang['strcanlogin']}</label></th>\n";
echo "\t\t<td class=\"data1\"><input type=\"checkbox\" id=\"formCanLogin\" name=\"formCanLogin\"",
(isset($_POST['formCanLogin'])) ? ' checked="checked"' : '', " /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\">{$lang['strconnlimit']}</th>\n";
echo "\t\t<td class=\"data1\"><input size=\"4\" name=\"formConnLimit\" value=\"", htmlspecialchars($_POST['formConnLimit']), "\" /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\">{$lang['strexpires']}</th>\n";
echo "\t\t<td class=\"data1\"><input size=\"23\" name=\"formExpires\" value=\"", htmlspecialchars($_POST['formExpires']), "\" /></td>\n\t</tr>\n";
$roles = $data->getRoles();
if ($roles->recordCount() > 0) {
echo "\t<tr>\n\t\t<th class=\"data left\">{$lang['strmemberof']}</th>\n";
echo "\t\t<td class=\"data\">\n";
echo "\t\t\t<select name=\"memberof[]\" multiple=\"multiple\" size=\"", min(20, $roles->recordCount()), "\">\n";
while (!$roles->EOF) {
$rolename = $roles->fields['rolname'];
echo "\t\t\t\t<option value=\"{$rolename}\"",
(in_array($rolename, $_POST['memberof']) ? ' selected="selected"' : ''), ">", $misc->printVal($rolename), "</option>\n";
$roles->moveNext();
}
echo "\t\t\t</select>\n";
echo "\t\t</td>\n\t</tr>\n";
$roles->moveFirst();
echo "\t<tr>\n\t\t<th class=\"data left\">{$lang['strmembers']}</th>\n";
echo "\t\t<td class=\"data\">\n";
echo "\t\t\t<select name=\"members[]\" multiple=\"multiple\" size=\"", min(20, $roles->recordCount()), "\">\n";
while (!$roles->EOF) {
$rolename = $roles->fields['rolname'];
echo "\t\t\t\t<option value=\"{$rolename}\"",
(in_array($rolename, $_POST['members']) ? ' selected="selected"' : ''), ">", $misc->printVal($rolename), "</option>\n";
$roles->moveNext();
}
echo "\t\t\t</select>\n";
echo "\t\t</td>\n\t</tr>\n";
$roles->moveFirst();
echo "\t<tr>\n\t\t<th class=\"data left\">{$lang['stradminmembers']}</th>\n";
echo "\t\t<td class=\"data\">\n";
echo "\t\t\t<select name=\"adminmembers[]\" multiple=\"multiple\" size=\"", min(20, $roles->recordCount()), "\">\n";
while (!$roles->EOF) {
$rolename = $roles->fields['rolname'];
echo "\t\t\t\t<option value=\"{$rolename}\"",
(in_array($rolename, $_POST['adminmembers']) ? ' selected="selected"' : ''), ">", $misc->printVal($rolename), "</option>\n";
$roles->moveNext();
}
echo "\t\t\t</select>\n";
echo "\t\t</td>\n\t</tr>\n";
}
echo "</table>\n";
echo "<p><input type=\"hidden\" name=\"action\" value=\"save_create\" />\n";
echo $misc->form;
echo "<input type=\"submit\" name=\"create\" value=\"{$lang['strcreate']}\" />\n";
echo "<input type=\"submit\" name=\"cancel\" value=\"{$lang['strcancel']}\" /></p>\n";
echo "</form>\n";
}
/**
* Actually creates the new role in the database
*/
function doSaveCreate() {
global $data, $lang;
if(!isset($_POST['memberof'])) $_POST['memberof'] = array();
if(!isset($_POST['members'])) $_POST['members'] = array();
if(!isset($_POST['adminmembers'])) $_POST['adminmembers'] = array();
// Check data
if ($_POST['formRolename'] == '')
doCreate($lang['strroleneedsname']);
else if ($_POST['formPassword'] != $_POST['formConfirm'])
doCreate($lang['strpasswordconfirm']);
else {
$status = $data->createRole($_POST['formRolename'], $_POST['formPassword'], isset($_POST['formSuper']),
isset($_POST['formCreateDB']), isset($_POST['formCreateRole']), isset($_POST['formInherits']),
isset($_POST['formCanLogin']), $_POST['formConnLimit'], $_POST['formExpires'], $_POST['memberof'], $_POST['members'],
$_POST['adminmembers']);
if ($status == 0)
doDefault($lang['strrolecreated']);
else
doCreate($lang['strrolecreatedbad']);
}
}
/**
* Function to allow alter a role
*/
function doAlter($msg = '') {
global $data, $misc;
global $lang;
$misc->printTrail('role');
$misc->printTitle($lang['stralter'],'pg.role.alter');
$misc->printMsg($msg);
$roledata = $data->getRole($_REQUEST['rolename']);
if ($roledata->recordCount() > 0) {
$server_info = $misc->getServerInfo();
$canRename = $data->hasUserRename() && ($_REQUEST['rolename'] != $server_info['username']);
$roledata->fields['rolsuper'] = $data->phpBool($roledata->fields['rolsuper']);
$roledata->fields['rolcreatedb'] = $data->phpBool($roledata->fields['rolcreatedb']);
$roledata->fields['rolcreaterole'] = $data->phpBool($roledata->fields['rolcreaterole']);
$roledata->fields['rolinherit'] = $data->phpBool($roledata->fields['rolinherit']);
$roledata->fields['rolcanlogin'] = $data->phpBool($roledata->fields['rolcanlogin']);
if (!isset($_POST['formExpires'])){
if ($canRename) $_POST['formNewRoleName'] = $roledata->fields['rolname'];
if ($roledata->fields['rolsuper']) $_POST['formSuper'] = '';
if ($roledata->fields['rolcreatedb']) $_POST['formCreateDB'] = '';
if ($roledata->fields['rolcreaterole']) $_POST['formCreateRole'] = '';
if ($roledata->fields['rolinherit']) $_POST['formInherits'] = '';
if ($roledata->fields['rolcanlogin']) $_POST['formCanLogin'] = '';
$_POST['formConnLimit'] = $roledata->fields['rolconnlimit'] == '-1' ? '' : $roledata->fields['rolconnlimit'];
$_POST['formExpires'] = $roledata->fields['rolvaliduntil'] == 'infinity' ? '' : $roledata->fields['rolvaliduntil'];
$_POST['formPassword'] = '';
}
echo "<form action=\"roles.php\" method=\"post\">\n";
echo "<table>\n";
echo "\t<tr>\n\t\t<th class=\"data left\" style=\"width: 130px\">{$lang['strname']}</th>\n";
echo "\t\t<td class=\"data1\">", ($canRename ? "<input name=\"formNewRoleName\" size=\"15\" maxlength=\"{$data->_maxNameLen}\" value=\"" . htmlspecialchars($_POST['formNewRoleName']) . "\" />" : $misc->printVal($roledata->fields['rolname'])), "</td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\">{$lang['strpassword']}</th>\n";
echo "\t\t<td class=\"data1\"><input type=\"password\" size=\"15\" name=\"formPassword\" value=\"", htmlspecialchars($_POST['formPassword']), "\" /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\">{$lang['strconfirm']}</th>\n";
echo "\t\t<td class=\"data1\"><input type=\"password\" size=\"15\" name=\"formConfirm\" value=\"\" /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\"><label for=\"formSuper\">{$lang['strsuper']}</label></th>\n";
echo "\t\t<td class=\"data1\"><input type=\"checkbox\" id=\"formSuper\" name=\"formSuper\"",
(isset($_POST['formSuper'])) ? ' checked="checked"' : '', " /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\"><label for=\"formCreateDB\">{$lang['strcreatedb']}</label></th>\n";
echo "\t\t<td class=\"data1\"><input type=\"checkbox\" id=\"formCreateDB\" name=\"formCreateDB\"",
(isset($_POST['formCreateDB'])) ? ' checked="checked"' : '', " /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\"><label for=\"formCreateRole\">{$lang['strcancreaterole']}</label></th>\n";
echo "\t\t<td class=\"data1\"><input type=\"checkbox\" id=\"formCreateRole\" name=\"formCreateRole\"",
(isset($_POST['formCreateRole'])) ? ' checked="checked"' : '', " /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\"><label for=\"formInherits\">{$lang['strinheritsprivs']}</label></th>\n";
echo "\t\t<td class=\"data1\"><input type=\"checkbox\" id=\"formInherits\" name=\"formInherits\"",
(isset($_POST['formInherits'])) ? ' checked="checked"' : '', " /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\"><label for=\"formCanLogin\">{$lang['strcanlogin']}</label></th>\n";
echo "\t\t<td class=\"data1\"><input type=\"checkbox\" id=\"formCanLogin\" name=\"formCanLogin\"",
(isset($_POST['formCanLogin'])) ? ' checked="checked"' : '', " /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\">{$lang['strconnlimit']}</th>\n";
echo "\t\t<td class=\"data1\"><input size=\"4\" name=\"formConnLimit\" value=\"", htmlspecialchars($_POST['formConnLimit']), "\" /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left\">{$lang['strexpires']}</th>\n";
echo "\t\t<td class=\"data1\"><input size=\"23\" name=\"formExpires\" value=\"", htmlspecialchars($_POST['formExpires']), "\" /></td>\n\t</tr>\n";
if (!isset($_POST['memberof']))
{
$memberof = $data->getMemberOf($_REQUEST['rolename']);
if ($memberof->recordCount() > 0) {
$i = 0;
while (!$memberof->EOF) {
$_POST['memberof'][$i++] = $memberof->fields['rolname'];
$memberof->moveNext();
}
}
else
$_POST['memberof'] = array();
$memberofold = implode(',', $_POST['memberof']);
}
if (!isset($_POST['members']))
{
$members = $data->getMembers($_REQUEST['rolename']);
if ($members->recordCount() > 0) {
$i = 0;
while (!$members->EOF) {
$_POST['members'][$i++] = $members->fields['rolname'];
$members->moveNext();
}
}
else
$_POST['members'] = array();
$membersold = implode(',', $_POST['members']);
}
if (!isset($_POST['adminmembers']))
{
$adminmembers = $data->getMembers($_REQUEST['rolename'], 't');
if ($adminmembers->recordCount() > 0) {
$i = 0;
while (!$adminmembers->EOF) {
$_POST['adminmembers'][$i++] = $adminmembers->fields['rolname'];
$adminmembers->moveNext();
}
}
else
$_POST['adminmembers'] = array();
$adminmembersold = implode(',', $_POST['adminmembers']);
}
$roles = $data->getRoles($_REQUEST['rolename']);
if ($roles->recordCount() > 0) {
echo "\t<tr>\n\t\t<th class=\"data left\">{$lang['strmemberof']}</th>\n";
echo "\t\t<td class=\"data\">\n";
echo "\t\t\t<select name=\"memberof[]\" multiple=\"multiple\" size=\"", min(20, $roles->recordCount()), "\">\n";
while (!$roles->EOF) {
$rolename = $roles->fields['rolname'];
echo "\t\t\t\t<option value=\"{$rolename}\"",
(in_array($rolename, $_POST['memberof']) ? ' selected="selected"' : ''), ">", $misc->printVal($rolename), "</option>\n";
$roles->moveNext();
}
echo "\t\t\t</select>\n";
echo "\t\t</td>\n\t</tr>\n";
$roles->moveFirst();
echo "\t<tr>\n\t\t<th class=\"data left\">{$lang['strmembers']}</th>\n";
echo "\t\t<td class=\"data\">\n";
echo "\t\t\t<select name=\"members[]\" multiple=\"multiple\" size=\"", min(20, $roles->recordCount()), "\">\n";
while (!$roles->EOF) {
$rolename = $roles->fields['rolname'];
echo "\t\t\t\t<option value=\"{$rolename}\"",
(in_array($rolename, $_POST['members']) ? ' selected="selected"' : ''), ">", $misc->printVal($rolename), "</option>\n";
$roles->moveNext();
}
echo "\t\t\t</select>\n";
echo "\t\t</td>\n\t</tr>\n";
$roles->moveFirst();
echo "\t<tr>\n\t\t<th class=\"data left\">{$lang['stradminmembers']}</th>\n";
echo "\t\t<td class=\"data\">\n";
echo "\t\t\t<select name=\"adminmembers[]\" multiple=\"multiple\" size=\"", min(20, $roles->recordCount()), "\">\n";
while (!$roles->EOF) {
$rolename = $roles->fields['rolname'];
echo "\t\t\t\t<option value=\"{$rolename}\"",
(in_array($rolename, $_POST['adminmembers']) ? ' selected="selected"' : ''), ">", $misc->printVal($rolename), "</option>\n";
$roles->moveNext();
}
echo "\t\t\t</select>\n";
echo "\t\t</td>\n\t</tr>\n";
}
echo "</table>\n";
echo "<p><input type=\"hidden\" name=\"action\" value=\"save_alter\" />\n";
echo "<input type=\"hidden\" name=\"rolename\" value=\"", htmlspecialchars($_REQUEST['rolename']), "\" />\n";
echo "<input type=\"hidden\" name=\"memberofold\" value=\"", isset($_POST['memberofold']) ? $_POST['memberofold'] : htmlspecialchars($memberofold), "\" />\n";
echo "<input type=\"hidden\" name=\"membersold\" value=\"", isset($_POST['membersold']) ? $_POST['membersold'] : htmlspecialchars($membersold), "\" />\n";
echo "<input type=\"hidden\" name=\"adminmembersold\" value=\"", isset($_POST['adminmembersold']) ? $_POST['adminmembersold'] : htmlspecialchars($adminmembersold), "\" />\n";
echo $misc->form;
echo "<input type=\"submit\" name=\"alter\" value=\"{$lang['stralter']}\" />\n";
echo "<input type=\"submit\" name=\"cancel\" value=\"{$lang['strcancel']}\" /></p>\n";
echo "</form>\n";
}
else echo "<p>{$lang['strnodata']}</p>\n";
}
/**
* Function to save after editing a role
*/
function doSaveAlter() {
global $data, $lang;
if(!isset($_POST['memberof'])) $_POST['memberof'] = array();
if(!isset($_POST['members'])) $_POST['members'] = array();
if(!isset($_POST['adminmembers'])) $_POST['adminmembers'] = array();
// Check name and password
if (isset($_POST['formNewRoleName']) && $_POST['formNewRoleName'] == '')
doAlter($lang['strroleneedsname']);
else if ($_POST['formPassword'] != $_POST['formConfirm'])
doAlter($lang['strpasswordconfirm']);
else {
if (isset($_POST['formNewRoleName'])) $status = $data->setRenameRole($_POST['rolename'], $_POST['formPassword'], isset($_POST['formSuper']), isset($_POST['formCreateDB']), isset($_POST['formCreateRole']), isset($_POST['formInherits']), isset($_POST['formCanLogin']), $_POST['formConnLimit'], $_POST['formExpires'], $_POST['memberof'], $_POST['members'], $_POST['adminmembers'], $_POST['memberofold'], $_POST['membersold'], $_POST['adminmembersold'], $_POST['formNewRoleName']);
else $status = $data->setRole($_POST['rolename'], $_POST['formPassword'], isset($_POST['formSuper']), isset($_POST['formCreateDB']), isset($_POST['formCreateRole']), isset($_POST['formInherits']), isset($_POST['formCanLogin']), $_POST['formConnLimit'], $_POST['formExpires'], $_POST['memberof'], $_POST['members'], $_POST['adminmembers'], $_POST['memberofold'], $_POST['membersold'], $_POST['adminmembersold']);
if ($status == 0)
doDefault($lang['strrolealtered']);
else
doAlter($lang['strrolealteredbad']);
}
}
/**
* Show confirmation of drop a role and perform actual drop
*/
function doDrop($confirm) {
global $data, $misc;
global $lang;
if ($confirm) {
$misc->printTrail('role');
$misc->printTitle($lang['strdroprole'],'pg.role.drop');
echo "<p>", sprintf($lang['strconfdroprole'], $misc->printVal($_REQUEST['rolename'])), "</p>\n";
echo "<form action=\"roles.php\" method=\"post\">\n";
echo "<p><input type=\"hidden\" name=\"action\" value=\"drop\" />\n";
echo "<input type=\"hidden\" name=\"rolename\" value=\"", htmlspecialchars($_REQUEST['rolename']), "\" />\n";
echo $misc->form;
echo "<input type=\"submit\" name=\"drop\" value=\"{$lang['strdrop']}\" />\n";
echo "<input type=\"submit\" name=\"cancel\" value=\"{$lang['strcancel']}\" /></p>\n";
echo "</form>\n";
}
else {
$status = $data->dropRole($_REQUEST['rolename']);
if ($status == 0)
doDefault($lang['strroledropped']);
else
doDefault($lang['strroledroppedbad']);
}
}
/**
* Show the properties of a role
*/
function doProperties($msg = '') {
global $data, $misc;
global $lang;
$misc->printTrail('role');
$misc->printTitle($lang['strproperties'],'pg.role');
$misc->printMsg($msg);
$roledata = $data->getRole($_REQUEST['rolename']);
if($roledata->recordCount() > 0 ) {
$roledata->fields['rolsuper'] = $data->phpBool($roledata->fields['rolsuper']);
$roledata->fields['rolcreatedb'] = $data->phpBool($roledata->fields['rolcreatedb']);
$roledata->fields['rolcreaterole'] = $data->phpBool($roledata->fields['rolcreaterole']);
$roledata->fields['rolinherit'] = $data->phpBool($roledata->fields['rolinherit']);
$roledata->fields['rolcanlogin'] = $data->phpBool($roledata->fields['rolcanlogin']);
echo "<table>\n";
echo "\t<tr>\n\t\t<th class=\"data\" style=\"width: 130px\">Description</th>\n";
echo "\t\t<th class=\"data\" style=\"width: 120\">Value</th>\n\t</tr>\n";
echo "\t<tr>\n\t\t<td class=\"data1\">{$lang['strname']}</td>\n";
echo "\t\t<td class=\"data1\">", htmlspecialchars($_REQUEST['rolename']), "</td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<td class=\"data2\">{$lang['strsuper']}</td>\n";
echo "\t\t<td class=\"data2\">", (($roledata->fields['rolsuper']) ? $lang['stryes'] : $lang['strno']), "</td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<td class=\"data1\">{$lang['strcreatedb']}</td>\n";
echo "\t\t<td class=\"data1\">", (($roledata->fields['rolcreatedb']) ? $lang['stryes'] : $lang['strno']), "</td>\n";
echo "\t<tr>\n\t\t<td class=\"data2\">{$lang['strcancreaterole']}</td>\n";
echo "\t\t<td class=\"data2\">", (($roledata->fields['rolcreaterole']) ? $lang['stryes'] : $lang['strno']), "</td>\n";
echo "\t<tr>\n\t\t<td class=\"data1\">{$lang['strinheritsprivs']}</td>\n";
echo "\t\t<td class=\"data1\">", (($roledata->fields['rolinherit']) ? $lang['stryes'] : $lang['strno']), "</td>\n";
echo "\t<tr>\n\t\t<td class=\"data2\">{$lang['strcanlogin']}</td>\n";
echo "\t\t<td class=\"data2\">", (($roledata->fields['rolcanlogin']) ? $lang['stryes'] : $lang['strno']), "</td>\n";
echo "\t<tr>\n\t\t<td class=\"data1\">{$lang['strconnlimit']}</td>\n";
echo "\t\t<td class=\"data1\">", ($roledata->fields['rolconnlimit'] == '-1' ? $lang['strnolimit'] : $misc->printVal($roledata->fields['rolconnlimit'])), "</td>\n";
echo "\t<tr>\n\t\t<td class=\"data2\">{$lang['strexpires']}</td>\n";
echo "\t\t<td class=\"data2\">", ($roledata->fields['rolvaliduntil'] == 'infinity' || is_null($roledata->fields['rolvaliduntil']) ? $lang['strnever'] : $misc->printVal($roledata->fields['rolvaliduntil'])), "</td>\n";
echo "\t<tr>\n\t\t<td class=\"data1\">{$lang['strsessiondefaults']}</td>\n";
echo "\t\t<td class=\"data1\">", $misc->printVal($roledata->fields['rolconfig']), "</td>\n";
echo "\t<tr>\n\t\t<td class=\"data2\">{$lang['strmemberof']}</td>\n";
echo "\t\t<td class=\"data2\">";
$memberof = $data->getMemberOf($_REQUEST['rolename']);
if ($memberof->recordCount() > 0) {
while (!$memberof->EOF) {
echo $misc->printVal($memberof->fields['rolname']), "<br />\n";
$memberof->moveNext();
}
}
echo "</td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<td class=\"data1\">{$lang['strmembers']}</td>\n";
echo "\t\t<td class=\"data1\">";
$members = $data->getMembers($_REQUEST['rolename']);
if ($members->recordCount() > 0) {
while (!$members->EOF) {
echo $misc->printVal($members->fields['rolname']), "<br />\n";
$members->moveNext();
}
}
echo "</td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<td class=\"data2\">{$lang['stradminmembers']}</td>\n";
echo "\t\t<td class=\"data2\">";
$adminmembers = $data->getMembers($_REQUEST['rolename'], 't');
if ($adminmembers->recordCount() > 0) {
while (!$adminmembers->EOF) {
echo $misc->printVal($adminmembers->fields['rolname']), "<br />\n";
$adminmembers->moveNext();
}
}
echo "</td>\n\t</tr>\n";
echo "</table>\n";
}
else echo "<p>{$lang['strnodata']}</p>\n";
echo "<ul class=\"navlink\">\n\t<li><a href=\"roles.php?{$misc->href}\">{$lang['strshowallroles']}</a></li>\n";
echo "\t<li><a href=\"roles.php?action=alter&{$misc->href}&rolename=",
urlencode($_REQUEST['rolename']), "\">{$lang['stralter']}</a></li>\n";
echo "\t<li><a href=\"roles.php?action=confirm_drop&{$misc->href}&rolename=",
urlencode($_REQUEST['rolename']), "\">{$lang['strdrop']}</li>\n</ul>\n";
}
/**
* If a role is not a superuser role, then we have an 'account management'
* page for change his password, etc. We don't prevent them from
* messing with the URL to gain access to other role admin stuff, because
* the PostgreSQL permissions will prevent them changing anything anyway.
*/
function doAccount($msg = '') {
global $data, $misc;
global $lang;
$server_info = $misc->getServerInfo();
$roledata = $data->getRole($server_info['username']);
$_REQUEST['rolename'] = $server_info['username'];
$misc->printTrail('role');
$misc->printTabs('server','account');
$misc->printMsg($msg);
if ($roledata->recordCount() > 0) {
$roledata->fields['rolsuper'] = $data->phpBool($roledata->fields['rolsuper']);
$roledata->fields['rolcreatedb'] = $data->phpBool($roledata->fields['rolcreatedb']);
$roledata->fields['rolcreaterole'] = $data->phpBool($roledata->fields['rolcreaterole']);
$roledata->fields['rolinherit'] = $data->phpBool($roledata->fields['rolinherit']);
echo "<table>\n";
echo "\t<tr>\n\t\t<th class=\"data\">{$lang['strname']}</th>\n";
echo "\t\t<th class=\"data\">{$lang['strsuper']}</th>\n";
echo "\t\t<th class=\"data\">{$lang['strcreatedb']}</th>\n";
echo "\t\t<th class=\"data\">{$lang['strcancreaterole']}</th>\n";
echo "\t\t<th class=\"data\">{$lang['strinheritsprivs']}</th>\n";
echo "\t\t<th class=\"data\">{$lang['strconnlimit']}</th>\n";
echo "\t\t<th class=\"data\">{$lang['strexpires']}</th>\n";
echo "\t\t<th class=\"data\">{$lang['strsessiondefaults']}</th>\n";
echo "\t</tr>\n";
echo "\t<tr>\n\t\t<td class=\"data1\">", $misc->printVal($roledata->fields['rolname']), "</td>\n";
echo "\t\t<td class=\"data1\">", $misc->printVal($roledata->fields['rolsuper'], 'yesno'), "</td>\n";
echo "\t\t<td class=\"data1\">", $misc->printVal($roledata->fields['rolcreatedb'], 'yesno'), "</td>\n";
echo "\t\t<td class=\"data1\">", $misc->printVal($roledata->fields['rolcreaterole'], 'yesno'), "</td>\n";
echo "\t\t<td class=\"data1\">", $misc->printVal($roledata->fields['rolinherit'], 'yesno'), "</td>\n";
echo "\t\t<td class=\"data1\">", ($roledata->fields['rolconnlimit'] == '-1' ? $lang['strnolimit'] : $misc->printVal($roledata->fields['rolconnlimit'])), "</td>\n";
echo "\t\t<td class=\"data1\">", ($roledata->fields['rolvaliduntil'] == 'infinity' || is_null($roledata->fields['rolvaliduntil']) ? $lang['strnever'] : $misc->printVal($roledata->fields['rolvaliduntil'])), "</td>\n";
echo "\t\t<td class=\"data1\">", $misc->printVal($roledata->fields['rolconfig']), "</td>\n";
echo "\t</tr>\n</table>\n";
}
else echo "<p>{$lang['strnodata']}</p>\n";
echo "<p><a class=\"navlink\" href=\"roles.php?action=confchangepassword&{$misc->href}\">{$lang['strchangepassword']}</a></p>\n";
}
/**
* Show confirmation of change password and actually change password
*/
function doChangePassword($confirm, $msg = '') {
global $data, $misc;
global $lang, $conf;
$server_info = $misc->getServerInfo();
if ($confirm) {
$_REQUEST['rolename'] = $server_info['username'];
$misc->printTrail('role');
$misc->printTitle($lang['strchangepassword'],'pg.role.alter');
$misc->printMsg($msg);
if (!isset($_POST['password'])) $_POST['password'] = '';
if (!isset($_POST['confirm'])) $_POST['confirm'] = '';
echo "<form action=\"roles.php\" method=\"post\">\n";
echo "<table>\n";
echo "\t<tr>\n\t\t<th class=\"data left required\">{$lang['strpassword']}</th>\n";
echo "\t\t<td><input type=\"password\" name=\"password\" size=\"32\" value=\"",
htmlspecialchars($_POST['password']), "\" /></td>\n\t</tr>\n";
echo "\t<tr>\n\t\t<th class=\"data left required\">{$lang['strconfirm']}</th>\n";
echo "\t\t<td><input type=\"password\" name=\"confirm\" size=\"32\" value=\"\" /></td>\n\t</tr>\n";
echo "</table>\n";
echo "<p><input type=\"hidden\" name=\"action\" value=\"changepassword\" />\n";
echo $misc->form;
echo "<input type=\"submit\" name=\"ok\" value=\"{$lang['strok']}\" />\n";
echo "<input type=\"submit\" name=\"cancel\" value=\"{$lang['strcancel']}\" />\n";
echo "</p></form>\n";
}
else {
// Check that password is minimum length
if (strlen($_POST['password']) < $conf['min_password_length'])
doChangePassword(true, $lang['strpasswordshort']);
// Check that password matches confirmation password
elseif ($_POST['password'] != $_POST['confirm'])
doChangePassword(true, $lang['strpasswordconfirm']);
else {
$status = $data->changePassword($server_info['username'], $_POST['password']);
if ($status == 0)
doAccount($lang['strpasswordchanged']);
else
doAccount($lang['strpasswordchangedbad']);
}
}
}
/**
* Show default list of roles in the database
*/
function doDefault($msg = '') {
global $data, $misc;
global $lang;
function renderRoleConnLimit($val) {
global $lang;
return $val == '-1' ? $lang['strnolimit'] : htmlspecialchars($val);
}
function renderRoleExpires($val) {
global $lang;
return $val == 'infinity' ? $lang['strnever'] : htmlspecialchars($val);
}
$misc->printTrail('server');
$misc->printTabs('server','roles');
$misc->printMsg($msg);
$roles = $data->getRoles();
$columns = array(
'role' => array(
'title' => $lang['strrole'],
'field' => field('rolname'),
'url' => "redirect.php?subject=role&action=properties&{$misc->href}&",
'vars' => array('rolename' => 'rolname'),
),
'superuser' => array(
'title' => $lang['strsuper'],
'field' => field('rolsuper'),
'type' => 'yesno',
),
'createdb' => array(
'title' => $lang['strcreatedb'],
'field' => field('rolcreatedb'),
'type' => 'yesno',
),
'createrole' => array(
'title' => $lang['strcancreaterole'],
'field' => field('rolcreaterole'),
'type' => 'yesno',
),
'inherits' => array(
'title' => $lang['strinheritsprivs'],
'field' => field('rolinherit'),
'type' => 'yesno',
),
'canloging' => array(
'title' => $lang['strcanlogin'],
'field' => field('rolcanlogin'),
'type' => 'yesno',
),
'connlimit' => array(
'title' => $lang['strconnlimit'],
'field' => field('rolconnlimit'),
'type' => 'callback',
'params'=> array('function' => 'renderRoleConnLimit')
),
'expires' => array(
'title' => $lang['strexpires'],
'field' => field('rolvaliduntil'),
'type' => 'callback',
'params'=> array('function' => 'renderRoleExpires', 'null' => $lang['strnever']),
),
'actions' => array(
'title' => $lang['stractions'],
),
);
$actions = array(
'alter' => array(
'title' => $lang['stralter'],
'url' => "roles.php?action=alter&{$misc->href}&",
'vars' => array('rolename' => 'rolname'),
),
'drop' => array(
'title' => $lang['strdrop'],
'url' => "roles.php?action=confirm_drop&{$misc->href}&",
'vars' => array('rolename' => 'rolname'),
),
);
$misc->printTable($roles, $columns, $actions, $lang['strnoroles']);
echo "<p><a class=\"navlink\" href=\"roles.php?action=create&{$misc->href}\">{$lang['strcreaterole']}</a></p>\n";
}
$misc->printHeader($lang['strroles']);
$misc->printBody();
switch ($action) {
case 'create':
doCreate();
break;
case 'save_create':
if (isset($_POST['create'])) doSaveCreate();
else doDefault();
break;
case 'alter':
doAlter();
break;
case 'save_alter':
if (isset($_POST['alter'])) doSaveAlter();
else doDefault();
break;
case 'confirm_drop':
doDrop(true);
break;
case 'drop':
if (isset($_POST['drop'])) doDrop(false);
else doDefault();
break;
case 'properties':
doProperties();
break;
case 'confchangepassword':
doChangePassword(true);
break;
case 'changepassword':
if (isset($_REQUEST['ok'])) doChangePassword(false);
else doAccount();
break;
case 'account':
doAccount();
break;
default:
doDefault();
}
$misc->printFooter();
?>