PHP Perms::getInstance方法代码示例

 function __destruct()
 {
     global $user, $globalperms;
     $user = $this->previousUser;
     $perms = Perms::getInstance();
     $perms->setGroups($this->previousGroupList);
     $globalperms = Perms::get();
 }

 public function authorize($user, $path, $access = self::ACCESS_READ)
 {
     global $tikilib;
     print_debug("authorize " . $user . " " . $path . " " . $access . "\n");
     if ($path === '/') {
         return true;
     }
     $page = substr($path, 1);
     $groups = $tikilib->get_user_groups($user);
     $perms = Perms::getInstance();
     $perms->setGroups($groups);
     $perms = $tikilib->page_exists($page) ? Perms::get(array('type' => 'wiki page', 'object' => substr($path, 1))) : Perms::get();
     return $access === self::ACCESS_READ && $perms->view || $access === self::ACCESS_WRITE && $perms->edit;
 }

 public function authorize($user, $path, $access = self::ACCESS_READ)
 {
     global $tikilib;
     $filegallib = TikiLib::lib('filegal');
     print_debug("Authorize...PATH={$path} ACCESS=" . ($access == self::ACCESS_READ ? 'READ' : 'WRITE') . "\n");
     $dir_path = dirname(urldecode($path));
     if ($dir_path === '/' && $access === self::ACCESS_READ) {
         return true;
     }
     $fgal = $filegallib->get_objectid_from_virtual_path($dir_path);
     $id = $fgal['id'];
     if (!$id) {
         print_debug("Authorize...PATH={$dir_path} does not exist\n");
         return false;
     }
     $groups = $tikilib->get_user_groups($user);
     $perms = Perms::getInstance();
     $perms->setGroups($groups);
     $perms = Perms::get(array('type' => 'file gallery', 'object' => $id));
     print_debug("Authorize...PERMS:" . print_r($perms, true) . "\n");
     $ret = false;
     if ($access === self::ACCESS_READ) {
         print_debug("Authorize...READ " . ($perms->view_file_gallery ? 'OK' : 'PAS') . " " . ($perms->list_file_gallery ? 'OK' : 'PAS') . "\n");
         if ($perms->view_file_gallery || $perms->list_file_gallery) {
             $ret = true;
         }
     } elseif ($access === self::ACCESS_WRITE) {
         print_debug("Authorize...WRITE " . ($perms->upload_files ? 'OK' : 'PAS') . " " . ($perms->admin_file_galleries ? 'OK' : 'PAS') . "\n");
         if ($perms->upload_files || $perms->admin_file_galleries) {
             $ret = true;
         }
     }
     print_debug("Authorize...USER={$user} PATH={$path} " . ($ret ? 'OK' : 'PAS OK') . "\n");
     return $ret;
 }

 /**
  * @param $aggregator
  * @param string $mode
  */
 private function addSources($aggregator, $mode = 'indexing')
 {
     global $prefs;
     $types = $this->getSupportedTypes();
     // Content Sources
     if (isset($types['wiki page'])) {
         $aggregator->addContentSource('wiki page', new Search_ContentSource_WikiSource());
     }
     if (isset($types['forum post'])) {
         $aggregator->addContentSource('forum post', new Search_ContentSource_ForumPostSource());
         $aggregator->addContentSource('forum', new Search_ContentSource_ForumSource());
     }
     if (isset($types['blog post'])) {
         $aggregator->addContentSource('blog post', new Search_ContentSource_BlogPostSource());
     }
     if (isset($types['article'])) {
         $articleSource = new Search_ContentSource_ArticleSource();
         $aggregator->addContentSource('article', $articleSource);
         $aggregator->addGlobalSource(new Search_GlobalSource_ArticleAttachmentSource($articleSource));
     }
     if (isset($types['file'])) {
         $fileSource = new Search_ContentSource_FileSource();
         $aggregator->addContentSource('file', $fileSource);
         $aggregator->addContentSource('file gallery', new Search_ContentSource_FileGallerySource());
         $aggregator->addGlobalSource(new Search_GlobalSource_FileAttachmentSource($fileSource));
     }
     if (isset($types['trackeritem'])) {
         $aggregator->addContentSource('trackeritem', new Search_ContentSource_TrackerItemSource());
         $aggregator->addContentSource('tracker', new Search_ContentSource_TrackerSource());
         $aggregator->addContentSource('trackerfield', new Search_ContentSource_TrackerFieldSource());
     }
     if (isset($types['sheet'])) {
         $aggregator->addContentSource('sheet', new Search_ContentSource_SheetSource());
     }
     if (isset($types['comment'])) {
         $commentTypes = array();
         if ($prefs['feature_wiki_comments'] == 'y') {
             $commentTypes[] = 'wiki page';
         }
         if ($prefs['feature_article_comments'] == 'y') {
             $commentTypes[] = 'article';
         }
         if ($prefs['feature_poll_comments'] == 'y') {
             $commentTypes[] = 'poll';
         }
         if ($prefs['feature_file_galleries_comments'] == 'y') {
             $commentTypes[] = 'file gallery';
         }
         if ($prefs['feature_trackers'] == 'y') {
             $commentTypes[] = 'trackeritem';
         }
         $aggregator->addContentSource('comment', new Search_ContentSource_CommentSource($commentTypes));
         $aggregator->addGlobalSource(new Search_GlobalSource_CommentSource());
     }
     if (isset($types['user'])) {
         $aggregator->addContentSource('user', new Search_ContentSource_UserSource($prefs['user_in_search_result']));
     }
     if (isset($types['group'])) {
         $aggregator->addContentSource('group', new Search_ContentSource_GroupSource());
     }
     if ($prefs['activity_custom_events'] == 'y' || $prefs['activity_basic_events'] == 'y' || $prefs['monitor_enabled'] == 'y') {
         $aggregator->addContentSource('activity', new Search_ContentSource_ActivityStreamSource($aggregator instanceof Search_Indexer ? $aggregator : null));
     }
     if ($prefs['goal_enabled'] == 'y') {
         $aggregator->addContentSource('goalevent', new Search_ContentSource_GoalEventSource());
     }
     // Global Sources
     if ($prefs['feature_categories'] == 'y') {
         $aggregator->addGlobalSource(new Search_GlobalSource_CategorySource());
         $aggregator->addContentSource('category', new Search_ContentSource_CategorySource());
     }
     if ($prefs['feature_freetags'] == 'y') {
         $aggregator->addGlobalSource(new Search_GlobalSource_FreeTagSource());
     }
     if ($prefs['rating_advanced'] == 'y' && $mode == 'indexing') {
         $aggregator->addGlobalSource(new Search_GlobalSource_AdvancedRatingSource($prefs['rating_recalculation'] == 'indexing'));
     }
     $aggregator->addGlobalSource(new Search_GlobalSource_Geolocation());
     if ($prefs['feature_search_show_visit_count'] === 'y') {
         $aggregator->addGlobalSource(new Search_GlobalSource_VisitsSource());
     }
     if ($prefs['feature_friends'] === 'y') {
         $aggregator->addGlobalSource(new Search_GlobalSource_SocialSource());
     }
     if ($mode == 'indexing') {
         $aggregator->addGlobalSource(new Search_GlobalSource_PermissionSource(Perms::getInstance()));
         $aggregator->addGlobalSource(new Search_GlobalSource_RelationSource());
     }
     $aggregator->addGlobalSource(new Search_GlobalSource_TitleInitialSource());
     $aggregator->addGlobalSource(new Search_GlobalSource_SearchableSource());
     $aggregator->addGlobalSource(new Search_GlobalSource_UrlSource());
 }

 function getData($objectType, $objectId, Search_Type_Factory_Interface $typeFactory, array $data = array())
 {
     global $prefs;
     if (isset($data['relations']) || isset($data['relation_types'])) {
         return array();
     }
     $relations = array();
     $relation_objects = array();
     $types = array();
     $relation_objects_to_index = array();
     if ($prefs['unified_engine'] == 'elastic') {
         // only index full objects in elasticsearch
         $relation_objects_to_index = array_map('trim', explode(',', $prefs['unified_relation_object_indexing']));
     }
     $from = $this->relationlib->get_relations_from($objectType, $objectId);
     foreach ($from as $rel) {
         $relations[] = Search_Query_Relation::token($rel['relation'], $rel['type'], $rel['itemId']);
         $types[] = $rel['relation'];
         if (in_array($rel['relation'], $relation_objects_to_index)) {
             $contentSource = $this->contentSources[$rel['type']];
             //new Search_ContentSource_TrackerItemSource();
             $data = $contentSource->getDocument($rel['itemId'], $typeFactory);
             $permissionSource = new Search_GlobalSource_PermissionSource(Perms::getInstance());
             $data = array_merge($data, $permissionSource->getData($rel['type'], $rel['itemId'], $typeFactory, $data));
             foreach ($data as &$item) {
                 if ($item instanceof Search_Type_Interface) {
                     $item = $item->getValue();
                 }
             }
             $data['relation'] = $rel['relation'];
             $relation_objects[] = $data;
         }
     }
     $to = $this->relationlib->get_relations_to($objectType, $objectId);
     foreach ($to as $rel) {
         $relations[] = Search_Query_Relation::token($rel['relation'] . '.invert', $rel['type'], $rel['itemId']);
         $rel_type = $rel['relation'] . '.invert';
         $types[] = $rel_type;
         if (in_array($rel_type, $relation_objects_to_index)) {
             $contentSource = $this->contentSources[$rel['type']];
             //new Search_ContentSource_TrackerItemSource();
             $data = $contentSource->getDocument($rel['itemId'], $typeFactory);
             $permissionSource = new Search_GlobalSource_PermissionSource(Perms::getInstance());
             $data = array_merge($data, $permissionSource->getData($rel['type'], $rel['itemId'], $typeFactory, $data));
             foreach ($data as &$item) {
                 if ($item instanceof Search_Type_Interface) {
                     $item = $item->getValue();
                 }
             }
             $data['relation'] = $rel['relation'];
             $relation_objects[] = $data;
         }
     }
     //take the type array and get a count of each indiv. type
     $type_count = array_count_values($types);
     $rel_count = array();
     foreach ($type_count as $key => $val) {
         //instead of returning an assoc. array, format to "relation:count" format for input in index
         $rel_count[] = $key . ":" . $val;
     }
     return array('relations' => $typeFactory->multivalue($relations), 'relation_objects' => $typeFactory->nested($relation_objects), 'relation_types' => $typeFactory->multivalue(array_unique($types)), 'relation_count' => $typeFactory->multivalue($rel_count));
 }

 /**
  * @param $aggregator
  * @param string $mode
  */
 private function addSources($aggregator, $mode = 'indexing')
 {
     global $prefs;
     $types = $this->getSupportedTypes();
     // Content Sources
     if (isset($types['wiki page'])) {
         $aggregator->addContentSource('wiki page', new Search_ContentSource_WikiSource());
     }
     if (isset($types['forum post'])) {
         $aggregator->addContentSource('forum post', new Search_ContentSource_ForumPostSource());
     }
     if (isset($types['blog post'])) {
         $aggregator->addContentSource('blog post', new Search_ContentSource_BlogPostSource());
     }
     if (isset($types['article'])) {
         $aggregator->addContentSource('article', new Search_ContentSource_ArticleSource());
     }
     if (isset($types['file'])) {
         $aggregator->addContentSource('file', new Search_ContentSource_FileSource());
         $aggregator->addGlobalSource(new Search_GlobalSource_FileAttachmentSource());
     }
     if (isset($types['trackeritem'])) {
         $aggregator->addContentSource('trackeritem', new Search_ContentSource_TrackerItemSource());
     }
     if (isset($types['sheet'])) {
         $aggregator->addContentSource('sheet', new Search_ContentSource_SheetSource());
     }
     if (isset($types['comment'])) {
         $commentTypes = array();
         if ($prefs['feature_wiki_comments'] == 'y') {
             $commentTypes[] = 'wiki page';
         }
         if ($prefs['feature_article_comments'] == 'y') {
             $commentTypes[] = 'article';
         }
         if ($prefs['feature_poll_comments'] == 'y') {
             $commentTypes[] = 'poll';
         }
         if ($prefs['feature_file_galleries_comments'] == 'y') {
             $commentTypes[] = 'file gallery';
         }
         if ($prefs['feature_trackers'] == 'y') {
             $commentTypes[] = 'trackeritem';
         }
         $aggregator->addContentSource('comment', new Search_ContentSource_CommentSource($commentTypes));
         $aggregator->addGlobalSource(new Search_GlobalSource_CommentSource());
     }
     if (isset($types['user'])) {
         $aggregator->addContentSource('user', new Search_ContentSource_UserSource($prefs['user_in_search_result']));
     }
     // Global Sources
     if ($prefs['feature_categories'] == 'y') {
         $aggregator->addGlobalSource(new Search_GlobalSource_CategorySource());
     }
     if ($prefs['feature_freetags'] == 'y') {
         $aggregator->addGlobalSource(new Search_GlobalSource_FreeTagSource());
     }
     if ($prefs['rating_advanced'] == 'y' && $mode == 'indexing') {
         $aggregator->addGlobalSource(new Search_GlobalSource_AdvancedRatingSource($prefs['rating_recalculation'] == 'indexing'));
     }
     $aggregator->addGlobalSource(new Search_GlobalSource_Geolocation());
     if ($prefs['feature_search_show_visit_count'] === 'y') {
         $aggregator->addGlobalSource(new Search_GlobalSource_VisitsSource());
     }
     if ($mode == 'indexing') {
         $aggregator->addGlobalSource(new Search_GlobalSource_PermissionSource(Perms::getInstance()));
         $aggregator->addGlobalSource(new Search_GlobalSource_RelationSource());
     }
 }

 /**
  * @return bool
  */
 function http_auth()
 {
     global $tikidomain, $userlib, $user, $smarty;
     if (!$tikidomain) {
         $tikidomain = "Default";
     }
     if (!isset($_SERVER['PHP_AUTH_USER'])) {
         header('WWW-Authenticate: Basic realm="' . $tikidomain . '"');
         header('HTTP/1.0 401 Unauthorized');
         exit;
     }
     $attempt = $_SERVER['PHP_AUTH_USER'];
     $pass = $_SERVER['PHP_AUTH_PW'];
     list($res, $rest) = $userlib->validate_user_tiki($attempt, $pass, false, false);
     if ($res == USER_VALID) {
         global $permissionList;
         $user = $attempt;
         $groups = $userlib->get_user_groups($user);
         $perms = Perms::getInstance();
         $perms->setGroups($groups);
         $perms = Perms::get();
         $perms->globalize($permissionList, $smarty);
         return true;
     } else {
         header('WWW-Authenticate: Basic realm="' . $tikidomain . '"');
         header('HTTP/1.0 401 Unauthorized');
         return false;
     }
 }

 protected function getCollectionMembers($path)
 {
     global $tikilib, $user;
     print_debug('getCollectionMembers ' . $path . "\n");
     $contents = array();
     $errors = array();
     if ($path !== '/') {
         return $contents;
     }
     $groups = $tikilib->get_user_groups($user);
     $perms = Perms::getInstance();
     $perms->setGroups($groups);
     $pages = $tikilib->list_pages();
     foreach ($pages['data'] as $page) {
         $contents[] = new ezcWebdavResource($path . $page['pageName']);
     }
     return $contents;
 }