3 * Provide an administration interface
4 * DO NOT USE: INSECURE.
6 * TODO : remove everything related to group editing (SpecialGrouplevels.php)
8 * @subpackage SpecialPage
12 require_once('HTMLForm.php');
13 require_once('Group.php');
16 function wfSpecialUserrights() {
18 $form = new UserrightsForm($wgRequest);
23 * A class to manage user levels rights.
25 * @subpackage SpecialPage
27 class UserrightsForm
extends HTMLForm
{
28 var $mPosted, $mRequest, $mSaveprefs;
29 /** Escaped local url name*/
33 function UserrightsForm ( &$request ) {
34 $this->mPosted
= $request->wasPosted();
35 $this->mRequest
= $request;
36 $this->mName
= 'userrights';
38 $titleObj = Title
::makeTitle( NS_SPECIAL
, 'Userrights' );
39 $this->action
= $titleObj->escapeLocalURL();
43 * Manage forms to be shown according to posted datas.
44 * Depending on the submit button used : Call a form or a saving function.
47 // show the general form
49 if ( $this->mPosted
) {
50 // show some more forms
51 if($this->mRequest
->getCheck('ssearchuser')) {
52 $this->editUserGroupsForm( $this->mRequest
->getVal('user-editname')); }
55 if($this->mRequest
->getCheck('saveusergroups')) {
56 $this->saveUserGroups($this->mRequest
->getVal('user-editname'),
57 $this->mRequest
->getArray('member'),
58 $this->mRequest
->getArray('available'));
65 * Save user groups changes in the database.
66 * Datas comes from the editUserGroupsForm() form function
68 * @param string $username Username to apply changes to.
69 * @param array $removegroup id of groups to be removed.
70 * @param array $addgroup id of groups to be added.
72 * @todo Log groupname instead of group id.
74 function saveUserGroups($username,$removegroup,$addgroup) {
75 $u = User
::NewFromName($username);
78 $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
82 if($u->getID() == 0) {
83 $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
87 $groups = $u->getGroups();
89 // remove then add groups
90 if(isset($removegroup)) {
91 $groups = array_diff($groups, $removegroup);
92 $logcomment .= implode( ' -', $removegroup);
94 if(isset($addgroup)) {
95 $groups = array_merge($groups, $addgroup);
96 $logcomment .= implode( ' +', $addgroup );
98 // save groups in user object and database
99 $u->setGroups($groups);
102 $log = new LogPage( 'rights' );
103 $log->addEntry( 'rights', Title
::makeTitle( NS_USER
, $u->getName() ), $logcomment );
108 * It allows a user to look for a username and edit its groups membership
110 function switchForm() {
114 $wgOut->addHTML( "<form name=\"uluser\" action=\"$this->action\" method=\"post\">\n" );
115 $wgOut->addHTML( $this->fieldset( 'lookup-user',
116 $this->textbox( 'user-editname' ) .
117 '<input type="submit" name="ssearchuser" value="'.wfMsg('editusergroup').'" />'
119 $wgOut->addHTML( "</form>\n" );
123 * Edit user groups membership
124 * @param string $username Name of the user.
126 function editUserGroupsForm($username) {
129 $user = User
::newFromName($username);
131 $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
135 if($user->getID() == 0) {
136 $wgOut->addHTML('<p>'.wfMsg('nosuchusershort',$username).'</p>');
140 $groups = $user->getGroups();
142 $wgOut->addHTML( "<form name=\"editGroup\" action=\"$this->action\" method=\"post\">\n".
143 '<input type="hidden" name="user-editname" value="'.$username.'" />');
144 $wgOut->addHTML( $this->fieldset( 'editusergroup',
145 wfMsg('editing', $this->mRequest
->getVal('user-editname')).".<br />\n" .
146 '<table border="0" align="center"><tr><td>'.
147 HTMLSelectGroups('member', $this->mName
.'-groupsmember', $groups,true,6).
149 HTMLSelectGroups('available', $this->mName
.'-groupsavailable', $groups,true,6,true).
150 '</td></tr></table>'."\n".
151 '<p>'.wfMsg('userrights-groupshelp').'</p>'."\n".
152 '<input type="submit" name="saveusergroups" value="'.wfMsg('saveusergroups').'" />'
154 $wgOut->addHTML( "</form>\n" );
156 } // end class UserrightsForm