fusionpbx/app/access_controls/resources/classes/access_controls.php

<?php

/**
 * access controls class
 */
	class access_controls {

		/**
		 * declare constant variables
		 */
		const app_name = 'access_controls';
		const app_uuid = '1416a250-f6e1-4edc-91a6-5c9b883638fd';

		/**
		 * Set in the constructor. Must be a database object and cannot be null.
		 * @var database Database Object
		 */
		private $database;

		/**
		 * Settings object set in the constructor. Must be a settings object and cannot be null.
		 * @var settings Settings Object
		 */
		private $settings;

		/**
		 * User UUID set in the constructor. This can be passed in through the $settings_array associative array or set in the session global array
		 * @var string
		 */
		private $user_uuid;

		/**
		 * Domain UUID set in the constructor. This can be passed in through the $settings_array associative array or set in the session global array
		 * @var string
		 */
		private $domain_uuid;

		/**
		 * declare private variables
		 */
		private $permission_prefix;
		private $list_page;
		private $table;
		private $uuid_prefix;

		/**
		 * called when the object is created
		 */
		public function __construct(array $setting_array = []) {
			//set domain and user UUIDs
			$this->domain_uuid = $setting_array['domain_uuid'] ?? $_SESSION['domain_uuid'] ?? '';
			$this->user_uuid = $setting_array['user_uuid'] ?? $_SESSION['user_uuid'] ?? '';

			//set objects
			$config = $setting_array['config'] ?? config::load();
			$this->database = $setting_array['database'] ?? database::new(['config' => $config]);

			//assign private variables
			$this->list_page = 'access_controls.php';
		}

		/**
		 * delete records
		 */
		public function delete($records) {

			//assign private variables
			$this->permission_prefix = 'access_control_';
			$this->table = 'access_controls';
			$this->uuid_prefix = 'access_control_';

			if (permission_exists($this->permission_prefix . 'delete')) {

				//add multi-lingual support
				$language = new text;
				$text = $language->get();

				//validate the token
				$token = new token;
				if (!$token->validate($_SERVER['PHP_SELF'])) {
					message::add($text['message-invalid_token'], 'negative');
					header('Location: ' . $this->list_page);
					exit;
				}

				//delete multiple records
				if (is_array($records) && @sizeof($records) != 0) {

					//build the delete array
					foreach ($records as $x => $record) {
						if ($record['checked'] == 'true' && is_uuid($record['uuid'])) {
							$array[$this->table][$x][$this->uuid_prefix . 'uuid'] = $record['uuid'];
							$array['access_control_nodes'][$x][$this->uuid_prefix . 'uuid'] = $record['uuid'];
						}
					}

					//delete the checked rows
					if (is_array($array) && @sizeof($array) != 0) {

						//grant temporary permissions
						$p = permissions::new();
						$p->add('access_control_node_delete', 'temp');

						//execute delete
						$this->database->delete($array);
						unset($array);

						//revoke temporary permissions
						$p->delete('access_control_node_delete', 'temp');

						//clear the cache
						$cache = new cache;
						$cache->delete("configuration:acl.conf");

						//create the event socket connection
						event_socket::async("reloadacl");

						//set message
						message::add($text['message-delete']);
					}
					unset($records);
				}
			}
		}

		public function delete_nodes($records) {

			//assign private variables
			$this->permission_prefix = 'access_control_node_';
			$this->table = 'access_control_nodes';
			$this->uuid_prefix = 'access_control_node_';

			if (permission_exists($this->permission_prefix . 'delete')) {

				//add multi-lingual support
				$language = new text;
				$text = $language->get();

				//validate the token
				$token = new token;
				if (!$token->validate('/app/access_controls/access_control_nodes.php')) {
					message::add($text['message-invalid_token'], 'negative');
					header('Location: ' . $this->list_page);
					exit;
				}

				//delete multiple records
				if (is_array($records) && @sizeof($records) != 0) {

					//build the delete array
					foreach ($records as $x => $record) {
						if ($record['checked'] == 'true' && is_uuid($record['uuid'])) {
							$array[$this->table][$x][$this->uuid_prefix . 'uuid'] = $record['uuid'];
						}
					}

					//delete the checked rows
					if (is_array($array) && @sizeof($array) != 0) {

						//execute delete
						$this->database->delete($array);
						unset($array);

						//clear the cache
						$cache = new cache;
						$cache->delete("configuration:acl.conf");

						//create the event socket connection
						event_socket::async("reloadacl");

						//set message
						message::add($text['message-delete']);
					}
					unset($records);
				}
			}
		}

		/**
		 * copy records
		 */
		public function copy($records) {

			//assign private variables
			$this->permission_prefix = 'access_control_';
			$this->table = 'access_controls';
			$this->uuid_prefix = 'access_control_';

			if (permission_exists($this->permission_prefix . 'add')) {

				//add multi-lingual support
				$language = new text;
				$text = $language->get();

				//validate the token
				$token = new token;
				if (!$token->validate($_SERVER['PHP_SELF'])) {
					message::add($text['message-invalid_token'], 'negative');
					header('Location: ' . $this->list_page);
					exit;
				}

				//copy the checked records
				if (is_array($records) && @sizeof($records) != 0) {

					//get checked records
					foreach ($records as $x => $record) {
						if ($record['checked'] == 'true' && is_uuid($record['uuid'])) {
							$uuids[] = "'" . $record['uuid'] . "'";
						}
					}

					//create insert array from existing data
					if (is_array($uuids) && @sizeof($uuids) != 0) {

						//primary table
						$sql = "select * from v_" . $this->table . " ";
						$sql .= "where " . $this->uuid_prefix . "uuid in (" . implode(', ', $uuids) . ") ";
						$rows = $this->database->select($sql, $parameters, 'all');
						if (is_array($rows) && @sizeof($rows) != 0) {
							$y = 0;
							foreach ($rows as $x => $row) {
								$primary_uuid = uuid();

								//copy data
								$array[$this->table][$x] = $row;

								//overwrite
								$array[$this->table][$x][$this->uuid_prefix . 'uuid'] = $primary_uuid;
								$array[$this->table][$x]['access_control_description'] = trim($row['access_control_description'] . ' (' . $text['label-copy'] . ')');

								//nodes sub table
								$sql_2 = "select * from v_access_control_nodes where access_control_uuid = :access_control_uuid";
								$parameters_2['access_control_uuid'] = $row['access_control_uuid'];
								$rows_2 = $this->database->select($sql_2, $parameters_2, 'all');
								if (is_array($rows_2) && @sizeof($rows_2) != 0) {
									foreach ($rows_2 as $row_2) {

										//copy data
										$array['access_control_nodes'][$y] = $row_2;

										//overwrite
										$array['access_control_nodes'][$y]['access_control_node_uuid'] = uuid();
										$array['access_control_nodes'][$y]['access_control_uuid'] = $primary_uuid;

										//increment
										$y++;
									}
								}
								unset($sql_2, $parameters_2, $rows_2, $row_2);
							}
						}
						unset($sql, $parameters, $rows, $row);
					}

					//save the changes and set the message
					if (is_array($array) && @sizeof($array) != 0) {

						//grant temporary permissions
						$p = permissions::new();
						$p->add('access_control_node_add', 'temp');

						//save the array
						$this->database->save($array);
						unset($array);

						//revoke temporary permissions
						$p->delete('access_control_node_add', 'temp');

						//clear the cache
						$cache = new cache;
						$cache->delete("configuration:acl.conf");

						//create the event socket connection
						event_socket::async("reloadacl");

						//set message
						message::add($text['message-copy']);
					}
					unset($records);
				}
			}
		}
	}