mirror of
https://github.com/moodle/moodle.git
synced 2025-01-19 14:27:22 +01:00
431ac39634
The permissions are now going to be verified as part of the weekly release process.
313 lines
12 KiB
PHP
313 lines
12 KiB
PHP
<?php
|
|
|
|
// This file is part of Moodle - http://moodle.org/
|
|
//
|
|
// Moodle is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// Moodle is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU General Public License
|
|
// along with Moodle. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
/**
|
|
* Lets you assign roles to users in a particular context.
|
|
*
|
|
* @package core
|
|
* @subpackage role
|
|
* @copyright 1999 onwards Martin Dougiamas (http://dougiamas.com)
|
|
* @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
|
|
*/
|
|
|
|
require_once(dirname(__FILE__) . '/../../config.php');
|
|
require_once($CFG->dirroot . '/' . $CFG->admin . '/roles/lib.php');
|
|
|
|
define("MAX_USERS_TO_LIST_PER_ROLE", 10);
|
|
|
|
$contextid = required_param('contextid',PARAM_INT);
|
|
$roleid = optional_param('roleid', 0, PARAM_INT);
|
|
|
|
list($context, $course, $cm) = get_context_info_array($contextid);
|
|
|
|
$url = new moodle_url('/admin/roles/assign.php', array('contextid' => $contextid));
|
|
|
|
if ($course) {
|
|
$isfrontpage = ($course->id == SITEID);
|
|
} else {
|
|
$isfrontpage = false;
|
|
if ($context->contextlevel == CONTEXT_USER) {
|
|
$course = $DB->get_record('course', array('id'=>optional_param('courseid', SITEID, PARAM_INT)), '*', MUST_EXIST);
|
|
$user = $DB->get_record('user', array('id'=>$context->instanceid), '*', MUST_EXIST);
|
|
$url->param('courseid', $course->id);
|
|
$url->param('userid', $user->id);
|
|
} else {
|
|
$course = $SITE;
|
|
}
|
|
}
|
|
|
|
|
|
// security
|
|
require_login($course, false, $cm);
|
|
require_capability('moodle/role:assign', $context);
|
|
$PAGE->set_url($url);
|
|
$PAGE->set_context($context);
|
|
|
|
$contextname = print_context_name($context);
|
|
$courseid = $course->id;
|
|
|
|
// These are needed early because of tabs.php
|
|
list($assignableroles, $assigncounts, $nameswithcounts) = get_assignable_roles($context, ROLENAME_BOTH, true);
|
|
$overridableroles = get_overridable_roles($context, ROLENAME_BOTH);
|
|
|
|
// Make sure this user can assign this role
|
|
if ($roleid && !isset($assignableroles[$roleid])) {
|
|
$a = new stdClass;
|
|
$a->roleid = $roleid;
|
|
$a->context = $contextname;
|
|
print_error('cannotassignrolehere', '', get_context_url($context), $a);
|
|
}
|
|
|
|
// Work out an appropriate page title.
|
|
if ($roleid) {
|
|
$a = new stdClass;
|
|
$a->role = $assignableroles[$roleid];
|
|
$a->context = $contextname;
|
|
$title = get_string('assignrolenameincontext', 'role', $a);
|
|
} else {
|
|
if ($isfrontpage) {
|
|
$title = get_string('frontpageroles', 'admin');
|
|
} else {
|
|
$title = get_string('assignrolesin', 'role', $contextname);
|
|
}
|
|
}
|
|
|
|
// Process any incoming role assignments before printing the header.
|
|
if ($roleid) {
|
|
|
|
// Create the user selector objects.
|
|
$options = array('context' => $context, 'roleid' => $roleid);
|
|
|
|
$potentialuserselector = roles_get_potential_user_selector($context, 'addselect', $options);
|
|
$currentuserselector = new existing_role_holders('removeselect', $options);
|
|
|
|
// Process incoming role assignments
|
|
$errors = array();
|
|
if (optional_param('add', false, PARAM_BOOL) && confirm_sesskey()) {
|
|
$userstoassign = $potentialuserselector->get_selected_users();
|
|
if (!empty($userstoassign)) {
|
|
|
|
foreach ($userstoassign as $adduser) {
|
|
$allow = true;
|
|
|
|
if ($allow) {
|
|
role_assign($roleid, $adduser->id, $context->id);
|
|
}
|
|
}
|
|
|
|
$potentialuserselector->invalidate_selected_users();
|
|
$currentuserselector->invalidate_selected_users();
|
|
|
|
$rolename = $assignableroles[$roleid];
|
|
add_to_log($course->id, 'role', 'assign', 'admin/roles/assign.php?contextid='.$context->id.'&roleid='.$roleid, $rolename, '', $USER->id);
|
|
// Counts have changed, so reload.
|
|
list($assignableroles, $assigncounts, $nameswithcounts) = get_assignable_roles($context, ROLENAME_BOTH, true);
|
|
}
|
|
}
|
|
|
|
// Process incoming role unassignments
|
|
if (optional_param('remove', false, PARAM_BOOL) && confirm_sesskey()) {
|
|
$userstounassign = $currentuserselector->get_selected_users();
|
|
if (!empty($userstounassign)) {
|
|
|
|
foreach ($userstounassign as $removeuser) {
|
|
//unassign only roles that are added manually, no messing with other components!!!
|
|
role_unassign($roleid, $removeuser->id, $context->id, '');
|
|
}
|
|
|
|
$potentialuserselector->invalidate_selected_users();
|
|
$currentuserselector->invalidate_selected_users();
|
|
|
|
$rolename = $assignableroles[$roleid];
|
|
add_to_log($course->id, 'role', 'unassign', 'admin/roles/assign.php?contextid='.$context->id.'&roleid='.$roleid, $rolename, '', $USER->id);
|
|
// Counts have changed, so reload.
|
|
list($assignableroles, $assigncounts, $nameswithcounts) = get_assignable_roles($context, ROLENAME_BOTH, true);
|
|
}
|
|
}
|
|
}
|
|
|
|
$PAGE->set_pagelayout('admin');
|
|
$PAGE->set_title($title);
|
|
|
|
switch ($context->contextlevel) {
|
|
case CONTEXT_SYSTEM:
|
|
admin_externalpage_setup('assignroles', '', array('contextid' => $contextid, 'roleid' => $roleid));
|
|
break;
|
|
case CONTEXT_USER:
|
|
$fullname = fullname($user, has_capability('moodle/site:viewfullnames', $context));
|
|
$PAGE->set_heading($fullname);
|
|
$showroles = 1;
|
|
break;
|
|
case CONTEXT_COURSECAT:
|
|
$PAGE->set_heading("$SITE->fullname: ".get_string("categories"));
|
|
break;
|
|
case CONTEXT_COURSE:
|
|
if ($isfrontpage) {
|
|
admin_externalpage_setup('frontpageroles', '', array('contextid' => $contextid, 'roleid' => $roleid));
|
|
} else {
|
|
$PAGE->set_heading($course->fullname);
|
|
}
|
|
break;
|
|
case CONTEXT_MODULE:
|
|
$PAGE->set_heading(print_context_name($context, false));
|
|
$PAGE->set_cacheable(false);
|
|
break;
|
|
case CONTEXT_BLOCK:
|
|
$PAGE->set_heading($PAGE->course->fullname);
|
|
break;
|
|
}
|
|
|
|
echo $OUTPUT->header();
|
|
|
|
// Print heading.
|
|
echo $OUTPUT->heading_with_help($title, 'assignroles', 'role');
|
|
|
|
if ($roleid) {
|
|
// Show UI for assigning a particular role to users.
|
|
// Print a warning if we are assigning system roles.
|
|
if ($context->contextlevel == CONTEXT_SYSTEM) {
|
|
echo $OUTPUT->box(get_string('globalroleswarning', 'role'));
|
|
}
|
|
|
|
// Print the form.
|
|
$assignurl = new moodle_url($PAGE->url, array('roleid'=>$roleid));
|
|
?>
|
|
<form id="assignform" method="post" action="<?php echo $assignurl ?>"><div>
|
|
<input type="hidden" name="sesskey" value="<?php echo sesskey() ?>" />
|
|
|
|
<table summary="" class="roleassigntable generaltable generalbox boxaligncenter" cellspacing="0">
|
|
<tr>
|
|
<td id="existingcell">
|
|
<p><label for="removeselect"><?php print_string('extusers', 'role'); ?></label></p>
|
|
<?php $currentuserselector->display() ?>
|
|
</td>
|
|
<td id="buttonscell">
|
|
<div id="addcontrols">
|
|
<input name="add" id="add" type="submit" value="<?php echo $OUTPUT->larrow().' '.get_string('add'); ?>" title="<?php print_string('add'); ?>" /><br />
|
|
</div>
|
|
|
|
<div id="removecontrols">
|
|
<input name="remove" id="remove" type="submit" value="<?php echo get_string('remove').' '.$OUTPUT->rarrow(); ?>" title="<?php print_string('remove'); ?>" />
|
|
</div>
|
|
</td>
|
|
<td id="potentialcell">
|
|
<p><label for="addselect"><?php print_string('potusers', 'role'); ?></label></p>
|
|
<?php $potentialuserselector->display() ?>
|
|
</td>
|
|
</tr>
|
|
</table>
|
|
</div></form>
|
|
|
|
<?php
|
|
$PAGE->requires->js_init_call('M.core_role.init_add_assign_page');
|
|
|
|
if (!empty($errors)) {
|
|
$msg = '<p>';
|
|
foreach ($errors as $e) {
|
|
$msg .= $e.'<br />';
|
|
}
|
|
$msg .= '</p>';
|
|
echo $OUTPUT->box_start();
|
|
echo $OUTPUT->notification($msg);
|
|
echo $OUTPUT->box_end();
|
|
}
|
|
|
|
// Print a form to swap roles, and a link back to the all roles list.
|
|
echo '<div class="backlink">';
|
|
|
|
$select = new single_select($PAGE->url, 'roleid', $nameswithcounts, $roleid, null);
|
|
$select->label = get_string('assignanotherrole', 'role');
|
|
echo $OUTPUT->render($select);
|
|
$backurl = new moodle_url('/admin/roles/assign.php', array('contextid' => $contextid));
|
|
echo '<p><a href="' . $backurl->out() . '">' . get_string('backtoallroles', 'role') . '</a></p>';
|
|
echo '</div>';
|
|
|
|
} else if (empty($assignableroles)) {
|
|
// Print a message that there are no roles that can me assigned here.
|
|
echo $OUTPUT->heading(get_string('notabletoassignroleshere', 'role'), 3);
|
|
|
|
} else {
|
|
// Show UI for choosing a role to assign.
|
|
|
|
// Print a warning if we are assigning system roles.
|
|
if ($context->contextlevel == CONTEXT_SYSTEM) {
|
|
echo $OUTPUT->box(get_string('globalroleswarning', 'role'));
|
|
}
|
|
|
|
// Print instruction
|
|
echo $OUTPUT->heading(get_string('chooseroletoassign', 'role'), 3);
|
|
|
|
// Get the names of role holders for roles with between 1 and MAX_USERS_TO_LIST_PER_ROLE users,
|
|
// and so determine whether to show the extra column.
|
|
$roleholdernames = array();
|
|
$strmorethanmax = get_string('morethan', 'role', MAX_USERS_TO_LIST_PER_ROLE);
|
|
$showroleholders = false;
|
|
foreach ($assignableroles as $roleid => $notused) {
|
|
$roleusers = '';
|
|
if (0 < $assigncounts[$roleid] && $assigncounts[$roleid] <= MAX_USERS_TO_LIST_PER_ROLE) {
|
|
$roleusers = get_role_users($roleid, $context, false, 'u.id, u.lastname, u.firstname');
|
|
if (!empty($roleusers)) {
|
|
$strroleusers = array();
|
|
foreach ($roleusers as $user) {
|
|
$strroleusers[] = '<a href="' . $CFG->wwwroot . '/user/view.php?id=' . $user->id . '" >' . fullname($user) . '</a>';
|
|
}
|
|
$roleholdernames[$roleid] = implode('<br />', $strroleusers);
|
|
$showroleholders = true;
|
|
}
|
|
} else if ($assigncounts[$roleid] > MAX_USERS_TO_LIST_PER_ROLE) {
|
|
$assignurl = new moodle_url($PAGE->url, array('roleid'=>$roleid));
|
|
$roleholdernames[$roleid] = '<a href="'.$assignurl.'">'.$strmorethanmax.'</a>';
|
|
} else {
|
|
$roleholdernames[$roleid] = '';
|
|
}
|
|
}
|
|
|
|
// Print overview table
|
|
$table = new html_table();
|
|
$table->tablealign = 'center';
|
|
$table->width = '60%';
|
|
$table->head = array(get_string('role'), get_string('description'), get_string('userswiththisrole', 'role'));
|
|
$table->wrap = array('nowrap', '', 'nowrap');
|
|
$table->align = array('left', 'left', 'center');
|
|
if ($showroleholders) {
|
|
$table->headspan = array(1, 1, 2);
|
|
$table->wrap[] = 'nowrap';
|
|
$table->align[] = 'left';
|
|
}
|
|
|
|
foreach ($assignableroles as $roleid => $rolename) {
|
|
$description = format_string($DB->get_field('role', 'description', array('id'=>$roleid)));
|
|
$assignurl = new moodle_url($PAGE->url, array('roleid'=>$roleid));
|
|
$row = array('<a href="'.$assignurl.'">'.$rolename.'</a>',
|
|
$description, $assigncounts[$roleid]);
|
|
if ($showroleholders) {
|
|
$row[] = $roleholdernames[$roleid];
|
|
}
|
|
$table->data[] = $row;
|
|
}
|
|
|
|
echo html_writer::table($table);
|
|
|
|
if ($context->contextlevel > CONTEXT_USER) {
|
|
echo html_writer::start_tag('div', array('class'=>'backlink'));
|
|
echo html_writer::tag('a', get_string('backto', '', $contextname), array('href'=>get_context_url($context)));
|
|
echo html_writer::end_tag('div');
|
|
}
|
|
}
|
|
|
|
echo $OUTPUT->footer();
|