PHP Validation::canAdminister方法代码示例

 /**
  * Constructor.
  */
 function UserManagementForm($userId = null)
 {
     parent::Form('manager/people/userProfileForm.tpl');
     $journal =& Request::getJournal();
     if ($userId && !Validation::canAdminister($journal->getId(), $userId)) {
         $userId = null;
     }
     $this->userId = isset($userId) ? (int) $userId : null;
     $site =& Request::getSite();
     // Validation checks for this form
     if ($userId == null) {
         $this->addCheck(new FormValidator($this, 'username', 'required', 'user.profile.form.usernameRequired'));
         $this->addCheck(new FormValidatorCustom($this, 'username', 'required', 'user.register.form.usernameExists', array(DAORegistry::getDAO('UserDAO'), 'userExistsByUsername'), array($this->userId, true), true));
         $this->addCheck(new FormValidatorAlphaNum($this, 'username', 'required', 'user.register.form.usernameAlphaNumeric'));
         if (!Config::getVar('security', 'implicit_auth')) {
             $this->addCheck(new FormValidator($this, 'password', 'required', 'user.profile.form.passwordRequired'));
             $this->addCheck(new FormValidatorLength($this, 'password', 'required', 'user.register.form.passwordLengthTooShort', '>=', $site->getMinPasswordLength()));
             $this->addCheck(new FormValidatorCustom($this, 'password', 'required', 'user.register.form.passwordsDoNotMatch', create_function('$password,$form', 'return $password == $form->getData(\'password2\');'), array(&$this)));
         }
     } else {
         $this->addCheck(new FormValidatorLength($this, 'password', 'optional', 'user.register.form.passwordLengthTooShort', '>=', $site->getMinPasswordLength()));
         $this->addCheck(new FormValidatorCustom($this, 'password', 'optional', 'user.register.form.passwordsDoNotMatch', create_function('$password,$form', 'return $password == $form->getData(\'password2\');'), array(&$this)));
     }
     $this->addCheck(new FormValidator($this, 'firstName', 'required', 'user.profile.form.firstNameRequired'));
     $this->addCheck(new FormValidator($this, 'lastName', 'required', 'user.profile.form.lastNameRequired'));
     $this->addCheck(new FormValidatorUrl($this, 'userUrl', 'optional', 'user.profile.form.urlInvalid'));
     $this->addCheck(new FormValidatorEmail($this, 'email', 'required', 'user.profile.form.emailRequired'));
     $this->addCheck(new FormValidatorCustom($this, 'email', 'required', 'user.register.form.emailExists', array(DAORegistry::getDAO('UserDAO'), 'userExistsByEmail'), array($this->userId, true), true));
     $this->addCheck(new FormValidatorPost($this));
 }

 /**
  * Sign in as another user.
  * @param $args array ($userId)
  */
 function signInAsUser($args)
 {
     $this->addCheck(new HandlerValidatorConference($this));
     $this->addCheck(new HandlerValidatorRoles($this, true, null, null, array(ROLE_ID_SITE_ADMIN, ROLE_ID_CONFERENCE_MANAGER)));
     $this->validate();
     if (isset($args[0]) && !empty($args[0])) {
         $userId = (int) $args[0];
         $conference =& Request::getConference();
         if (!Validation::canAdminister($conference->getId(), $userId)) {
             $this->setupTemplate();
             // We don't have administrative rights
             // over this user. Display an error.
             $templateMgr =& TemplateManager::getManager();
             $templateMgr->assign('pageTitle', 'manager.people');
             $templateMgr->assign('errorMsg', 'manager.people.noAdministrativeRights');
             $templateMgr->assign('backLink', Request::url(null, null, null, 'people', 'all'));
             $templateMgr->assign('backLinkLabel', 'manager.people.allUsers');
             return $templateMgr->display('common/error.tpl');
         }
         $userDao =& DAORegistry::getDAO('UserDAO');
         $newUser =& $userDao->getUser($userId);
         $session =& Request::getSession();
         // FIXME Support "stack" of signed-in-as user IDs?
         if (isset($newUser) && $session->getUserId() != $newUser->getId()) {
             $session->setSessionVar('signedInAs', $session->getUserId());
             $session->setSessionVar('userId', $userId);
             $session->setUserId($userId);
             $session->setSessionVar('username', $newUser->getUsername());
             Request::redirect(null, null, 'user');
         }
     }
     Request::redirect(null, null, Request::getRequestedPage());
 }

 /**
  * @copydoc GridRow::initialize()
  */
 function initialize($request, $template = null)
 {
     // Do the default initialization
     parent::initialize($request, $template);
     // Is this a new row or an existing row?
     $rowId = $this->getId();
     if (!empty($rowId) && is_numeric($rowId)) {
         // Only add row actions if this is an existing row.
         $router = $request->getRouter();
         import('lib.pkp.classes.linkAction.request.RemoteActionConfirmationModal');
         if ($this->_canAdminister) {
             $this->addAction(new LinkAction('delete', new RemoteActionConfirmationModal(__('editor.submission.removeStageParticipant.description'), __('editor.submission.removeStageParticipant'), $router->url($request, null, null, 'deleteParticipant', null, $this->getRequestArgs()), 'modal_delete'), __('grid.action.remove'), 'delete'));
         }
         import('lib.pkp.controllers.grid.users.stageParticipant.linkAction.NotifyLinkAction');
         $submission = $this->getSubmission();
         $stageId = $this->getStageId();
         $stageAssignment = $this->getData();
         $userId = $stageAssignment->getUserId();
         $this->addAction(new NotifyLinkAction($request, $submission, $stageId, $userId));
         $user = $request->getUser();
         if (!Validation::isLoggedInAs() && $user->getId() != $rowId && Validation::canAdminister($rowId, $user->getId())) {
             $dispatcher = $router->getDispatcher();
             import('lib.pkp.classes.linkAction.request.RedirectConfirmationModal');
             $this->addAction(new LinkAction('logInAs', new RedirectConfirmationModal(__('grid.user.confirmLogInAs'), __('grid.action.logInAs'), $dispatcher->url($request, ROUTE_PAGE, null, 'login', 'signInAsUser', $userId)), __('grid.action.logInAs'), 'enroll_user'));
         }
     }
 }

 /**
  * @copydoc GridRow::initialize()
  */
 function initialize($request, $template = null)
 {
     parent::initialize($request, $template);
     // Is this a new row or an existing row?
     $element =& $this->getData();
     assert(is_a($element, 'User'));
     $rowId = $this->getId();
     if (!empty($rowId) && is_numeric($rowId)) {
         // Only add row actions if this is an existing row
         $router = $request->getRouter();
         $actionArgs = array('gridId' => $this->getGridId(), 'rowId' => $rowId);
         $actionArgs = array_merge($actionArgs, $this->getRequestArgs());
         $this->addAction(new LinkAction('email', new AjaxModal($router->url($request, null, null, 'editEmail', null, $actionArgs), __('grid.user.email'), 'modal_email', true), __('grid.user.email'), 'notify'));
         $this->addAction(new LinkAction('edit', new AjaxModal($router->url($request, null, null, 'editUser', null, $actionArgs), __('grid.user.edit'), 'modal_edit', true), __('grid.user.edit'), 'edit'));
         if ($element->getDisabled()) {
             $actionArgs['enable'] = true;
             $this->addAction(new LinkAction('enable', new AjaxModal($router->url($request, null, null, 'editDisableUser', null, $actionArgs), __('common.enable'), 'enable', true), __('common.enable'), 'enable'));
         } else {
             $actionArgs['enable'] = false;
             $this->addAction(new LinkAction('disable', new AjaxModal($router->url($request, null, null, 'editDisableUser', null, $actionArgs), __('grid.user.disable'), 'disable', true), __('grid.user.disable'), 'disable'));
         }
         $this->addAction(new LinkAction('remove', new RemoteActionConfirmationModal(__('manager.people.confirmRemove'), __('common.remove'), $router->url($request, null, null, 'removeUser', null, $actionArgs), 'modal_delete'), __('grid.action.remove'), 'delete'));
         $sessionManager = SessionManager::getManager();
         $session = $sessionManager->getUserSession();
         $canAdminister = Validation::canAdminister($this->getId(), $session->user->getId());
         if (!Validation::isLoggedInAs() and $session->user->getId() != $this->getId() and $canAdminister) {
             $dispatcher = $router->getDispatcher();
             $this->addAction(new LinkAction('logInAs', new RedirectConfirmationModal(__('grid.user.confirmLogInAs'), __('grid.action.logInAs'), $dispatcher->url($request, ROUTE_PAGE, null, 'login', 'signInAsUser', $this->getId())), __('grid.action.logInAs'), 'enroll_user'));
         }
         $oldUserId = $this->getOldUserId();
         $userDao = DAORegistry::getDAO('UserDAO');
         $oldUser = $userDao->getById($this->getOldUserId());
         if ($oldUser) {
             $actionArgs['oldUserId'] = $this->getOldUserId();
             $actionArgs['newUserId'] = $rowId;
             // Don't merge a user in itself
             if ($actionArgs['oldUserId'] != $actionArgs['newUserId']) {
                 $userDao = DAORegistry::getDAO('UserDAO');
                 $oldUser = $userDao->getById($this->getOldUserId());
                 $this->addAction(new LinkAction('mergeUser', new RemoteActionConfirmationModal(__('grid.user.mergeUsers.confirm', array('oldUsername' => $oldUser->getUsername(), 'newUsername' => $element->getUsername())), null, $router->url($request, null, null, 'mergeUsers', null, $actionArgs), 'modal_merge_users'), __('grid.user.mergeUsers.mergeIntoUser'), 'merge_users'));
             }
         } else {
             // do not allow the deletion of the admin account.
             if ($rowId > 1 && $canAdminister) {
                 $this->addAction(new LinkAction('mergeUser', new JsEventConfirmationModal(__('grid.user.mergeUsers.mergeUserSelect.confirm'), 'confirmationModalConfirmed', array('oldUserId' => $rowId), null, 'modal_merge_users'), __('grid.user.mergeUsers.mergeUser'), 'merge_users'));
             }
         }
     }
 }

 /**
  * Save changes to a user profile.
  */
 function updateUser()
 {
     $this->validate();
     $this->setupTemplate(true);
     $conference =& Request::getConference();
     $userId = Request::getUserVar('userId');
     if (!empty($userId) && !Validation::canAdminister($conference->getId(), $userId)) {
         // We don't have administrative rights
         // over this user. Display an error.
         $templateMgr =& TemplateManager::getManager();
         $templateMgr->assign('pageTitle', 'manager.people');
         $templateMgr->assign('errorMsg', 'manager.people.noAdministrativeRights');
         $templateMgr->assign('backLink', Request::url(null, null, null, 'people', 'all'));
         $templateMgr->assign('backLinkLabel', 'manager.people.allUsers');
         return $templateMgr->display('common/error.tpl');
     }
     import('classes.manager.form.UserManagementForm');
     if (checkPhpVersion('5.0.0')) {
         // WARNING: This form needs $this in constructor
         $userForm = new UserManagementForm($userId);
     } else {
         $userForm =& new UserManagementForm($userId);
     }
     $userForm->readInputData();
     if ($userForm->validate()) {
         $userForm->execute();
         if (Request::getUserVar('createAnother')) {
             $templateMgr =& TemplateManager::getManager();
             $templateMgr->assign('currentUrl', Request::url(null, null, null, 'people', 'all'));
             $templateMgr->assign('userCreated', true);
             unset($userForm);
             if (checkPhpVersion('5.0.0')) {
                 // WARNING: This form needs $this in constructor
                 $userForm = new UserManagementForm();
             } else {
                 $userForm =& new UserManagementForm();
             }
             $userForm->initData();
             $userForm->display();
         } else {
             if ($source = Request::getUserVar('source')) {
                 Request::redirectUrl($source);
             } else {
                 Request::redirect(null, null, null, 'people', 'all');
             }
         }
     } else {
         $userForm->display();
     }
 }

 /**
  * Sign in as another user.
  * @param $args array ($userId)
  * @param $request PKPRequest
  */
 function signInAsUser($args, $request)
 {
     if (isset($args[0]) && !empty($args[0])) {
         $userId = (int) $args[0];
         $session = $request->getSession();
         if (!Validation::canAdminister($userId, $session->getUserId())) {
             $this->setupTemplate($request);
             // We don't have administrative rights
             // over this user. Display an error.
             $templateMgr = TemplateManager::getManager($request);
             $templateMgr->assign(array('pageTitle' => 'manager.people', 'errorMsg' => 'manager.people.noAdministrativeRights', 'backLink' => $request->url(null, null, 'people', 'all'), 'backLinkLabel' => 'manager.people.allUsers'));
             return $templateMgr->display('frontend/pages/error.tpl');
         }
         $userDao = DAORegistry::getDAO('UserDAO');
         $newUser = $userDao->getById($userId);
         if (isset($newUser) && $session->getUserId() != $newUser->getId()) {
             $session->setSessionVar('signedInAs', $session->getUserId());
             $session->setSessionVar('userId', $userId);
             $session->setUserId($userId);
             $session->setSessionVar('username', $newUser->getUsername());
             $this->sendHome($request);
         }
     }
     $request->redirect(null, $request->getRequestedPage());
 }

 /**
  * Sign in as another user.
  * @param $args array ($userId)
  */
 function signInAsUser($args, &$request)
 {
     $this->validate();
     if (isset($args[0]) && !empty($args[0])) {
         $userId = (int) $args[0];
         if (!Validation::canAdminister($userId)) {
             // We don't have administrative rights
             // over this user. Display an error.
             $templateMgr =& TemplateManager::getManager($request);
             $templateMgr->assign('pageTitle', 'admin.people');
             $templateMgr->assign('errorMsg', 'admin.people.noAdministrativeRights');
             $templateMgr->assign('backLink', $request->url(null, null, 'people', 'all'));
             $templateMgr->assign('backLinkLabel', 'admin.people.allUsers');
             return $templateMgr->display('common/error.tpl');
         }
         $userDao = DAORegistry::getDAO('UserDAO');
         $newUser =& $userDao->getById($userId);
         $session =& $request->getSession();
         // FIXME Support "stack" of signed-in-as user IDs?
         if (isset($newUser) && $session->getUserId() != $newUser->getId()) {
             $session->setSessionVar('signedInAs', $session->getUserId());
             $session->setSessionVar('userId', $userId);
             $session->setUserId($userId);
             $session->setSessionVar('username', $newUser->getUsername());
             $request->redirect('user');
         }
     }
     $request->redirect($request->getRequestedPage());
 }

 /**
  * Send the user email and close the modal
  * @param $args array
  * @param $request PKPRequest
  * @return string Serialized JSON object
  */
 function sendEmail($args, &$request)
 {
     // Identify the press
     $press =& $request->getPress();
     // Identify the user Id
     $userId = $request->getUserVar('userId');
     if ($userId !== null && !Validation::canAdminister($press->getId(), $userId)) {
         // We don't have administrative rights over this user.
         $json = new JSON('false', Locale::translate('grid.user.cannotAdminister'));
     } else {
         // Form handling
         import('controllers.grid.users.user.form.UserEmailForm');
         $userEmailForm = new UserEmailForm($userId);
         $userEmailForm->readInputData();
         if ($userEmailForm->validate()) {
             $userEmailForm->execute($args, $request);
             $json = new JSON('true');
         } else {
             $json = new JSON('false', $userEmailForm->display($args, $request));
         }
     }
     return $json->getString();
 }

 /**
  * Remove all user group assignments for a press for a given user
  * @param $args array
  * @param $request PKPRequest
  * @return string Serialized JSON object
  */
 function removeUser($args, &$request)
 {
     // Identify the press
     $press =& $request->getPress();
     $pressId = $press->getId();
     // Identify the user Id
     $userId = $request->getUserVar('rowId');
     if ($userId !== null && !Validation::canAdminister($press->getId(), $userId)) {
         // We don't have administrative rights over this user.
         $json = new JSON('false', Locale::translate('grid.user.cannotAdminister'));
     } else {
         // Remove user from all user group assignments for this press
         $userGroupDao =& DAORegistry::getDAO('UserGroupDAO');
         // Check if this user has any user group assignments for this press
         if (!$userGroupDao->userInAnyGroup($userId, $pressId)) {
             $json = new JSON('false', Locale::translate('grid.user.userNoRoles'));
         } else {
             $userGroupDao->deleteAssignmentsByContextId($pressId, $userId);
             // Successfully removed user's user group assignments
             // Refresh the grid row data to indicate this
             $userDao =& DAORegistry::getDAO('UserDAO');
             $user =& $userDao->getUser($userId);
             $row =& $this->getRowInstance();
             $row->setGridId($this->getId());
             $row->setId($user->getId());
             $row->setData($user);
             $row->initialize($request);
             $json = new JSON('true', $this->_renderRowInternally($request, $row));
         }
     }
     return $json->getString();
 }

 /**
  * Send the user email and close the modal.
  * @param $args array
  * @param $request PKPRequest
  * @return string Serialized JSON object
  */
 function sendEmail($args, $request)
 {
     $user = $request->getUser();
     // Identify the user Id.
     $userId = $request->getUserVar('userId');
     if ($userId !== null && !Validation::canAdminister($userId, $user->getId())) {
         // We don't have administrative rights over this user.
         $json = new JSONMessage(false, __('grid.user.cannotAdminister'));
     } else {
         // Form handling.
         import('lib.pkp.controllers.grid.settings.user.form.UserEmailForm');
         $userEmailForm = new UserEmailForm($userId);
         $userEmailForm->readInputData();
         if ($userEmailForm->validate()) {
             $userEmailForm->execute($args, $request);
             $json = new JSONMessage(true);
         } else {
             $json = new JSONMessage(false, $userEmailForm->display($args, $request));
         }
     }
     return $json->getString();
 }

 /**
  * Allow user account merging, including attributed submissions etc.
  * @param $args array
  * @param $request PKPRequest
  * @return JSONMessage JSON object
  */
 function mergeUsers($args, $request)
 {
     // if there is a $newUserId, this is the second time through, so merge the users.
     $newUserId = (int) $request->getUserVar('newUserId');
     $oldUserId = (int) $request->getUserVar('oldUserId');
     $user = $request->getUser();
     if ($newUserId > 0 && $oldUserId > 0 && Validation::canAdminister($oldUserId, $user->getId())) {
         import('classes.user.UserAction');
         $userAction = new UserAction();
         $userAction->mergeUsers($oldUserId, $newUserId);
         return DAO::getDataChangedEvent();
     } else {
         // The grid shouldn't have presented an action in this
         // case.
         return new JSONMessage(false, __('grid.user.cannotAdminister'));
     }
 }

 /**
  * Sign in as another user.
  * @param $args array ($userId)
  * @param $request PKPRequest
  */
 function signInAsUser($args, $request)
 {
     $this->addCheck(new HandlerValidatorRoles($this, true, null, null, array(ROLE_ID_SITE_ADMIN, ROLE_ID_MANAGER)));
     $this->validate();
     if (isset($args[0]) && !empty($args[0])) {
         $userId = (int) $args[0];
         $session = $request->getSession();
         if (!Validation::canAdminister($userId, $session->getUserId())) {
             $this->setupTemplate($request);
             // We don't have administrative rights
             // over this user. Display an error.
             $templateMgr = TemplateManager::getManager($request);
             $templateMgr->assign('pageTitle', 'manager.people');
             $templateMgr->assign('errorMsg', 'manager.people.noAdministrativeRights');
             $templateMgr->assign('backLink', $request->url(null, null, 'people', 'all'));
             $templateMgr->assign('backLinkLabel', 'manager.people.allUsers');
             return $templateMgr->display('common/error.tpl');
         }
         $userDao = DAORegistry::getDAO('UserDAO');
         $newUser = $userDao->getById($userId);
         if (isset($newUser) && $session->getUserId() != $newUser->getId()) {
             $session->setSessionVar('signedInAs', $session->getUserId());
             $session->setSessionVar('userId', $userId);
             $session->setUserId($userId);
             $session->setSessionVar('username', $newUser->getUsername());
             $request->redirect(null, 'dashboard');
         }
     }
     $request->redirect(null, $request->getRequestedPage());
 }