changeableGroups();
return !empty( $available['add'] )
or !empty( $available['remove'] )
or ($this->isself and
(!empty( $available['add-self'] )
or !empty( $available['remove-self'] )));
}
/**
* Manage forms to be shown according to posted data.
* Depending on the submit button used, call a form or a save function.
*
* @param mixed $par String if any subpage provided, else null
*/
function execute( $par ) {
// If the visitor doesn't have permissions to assign or remove
// any groups, it's a bit silly to give them the user search prompt.
global $wgUser, $wgRequest;
if( $par ) {
$this->mTarget = $par;
} else {
$this->mTarget = $wgRequest->getVal( 'user' );
}
if (!$this->mTarget) {
/*
* If the user specified no target, and they can only
* edit their own groups, automatically set them as the
* target.
*/
$available = $this->changeableGroups();
if (empty($available['add']) && empty($available['remove']))
$this->mTarget = $wgUser->getName();
}
if ($this->mTarget == $wgUser->getName())
$this->isself = true;
if( !$this->userCanExecute( $wgUser ) ) {
// fixme... there may be intermediate groups we can mention.
global $wgOut;
$wgOut->showPermissionsErrorPage( array(
$wgUser->isAnon()
? 'userrights-nologin'
: 'userrights-notallowed' ) );
return;
}
if ( wfReadOnly() ) {
global $wgOut;
$wgOut->readOnlyPage();
return;
}
$this->outputHeader();
$this->setHeaders();
// show the general form
$this->switchForm();
if( $wgRequest->wasPosted() ) {
// save settings
if( $wgRequest->getCheck( 'saveusergroups' ) ) {
$reason = $wgRequest->getVal( 'user-reason' );
if( $wgUser->matchEditToken( $wgRequest->getVal( 'wpEditToken' ), $this->mTarget ) ) {
$this->saveUserGroups(
$this->mTarget,
$wgRequest->getArray( 'removable' ),
$wgRequest->getArray( 'available' ),
$reason
);
}
}
}
// show some more forms
if( $this->mTarget ) {
$this->editUserGroupsForm( $this->mTarget );
}
}
/**
* Save user groups changes in the database.
* Data comes from the editUserGroupsForm() form function
*
* @param string $username Username to apply changes to.
* @param array $removegroup id of groups to be removed.
* @param array $addgroup id of groups to be added.
* @param string $reason Reason for group change
* @return null
*/
function saveUserGroups( $username, $removegroup, $addgroup, $reason = '') {
global $wgUser, $wgGroupsAddToSelf, $wgGroupsRemoveFromSelf;
$user = $this->fetchUser( $username );
if( !$user ) {
return;
}
// Validate input set...
$changeable = $this->changeableGroups();
if ($wgUser->getId() != 0 && $wgUser->getId() == $user->getId()) {
$addable = array_merge($changeable['add'], $wgGroupsAddToSelf);
$removable = array_merge($changeable['remove'], $wgGroupsRemoveFromSelf);
} else {
$addable = $changeable['add'];
$removable = $changeable['remove'];
}
$removegroup = array_unique(
array_intersect( (array)$removegroup, $removable ) );
$addgroup = array_unique(
array_intersect( (array)$addgroup, $addable ) );
$oldGroups = $user->getGroups();
$newGroups = $oldGroups;
// remove then add groups
if( $removegroup ) {
$newGroups = array_diff($newGroups, $removegroup);
foreach( $removegroup as $group ) {
$user->removeGroup( $group );
}
}
if( $addgroup ) {
$newGroups = array_merge($newGroups, $addgroup);
foreach( $addgroup as $group ) {
$user->addGroup( $group );
}
}
$newGroups = array_unique( $newGroups );
// Ensure that caches are cleared
$user->invalidateCache();
wfDebug( 'oldGroups: ' . print_r( $oldGroups, true ) );
wfDebug( 'newGroups: ' . print_r( $newGroups, true ) );
if( $user instanceof User ) {
// hmmm
wfRunHooks( 'UserRights', array( &$user, $addgroup, $removegroup ) );
}
if( $newGroups != $oldGroups ) {
$log = new LogPage( 'rights' );
global $wgRequest;
$log->addEntry( 'rights',
$user->getUserPage(),
$wgRequest->getText( 'user-reason' ),
array(
$this->makeGroupNameList( $oldGroups ),
$this->makeGroupNameList( $newGroups )
)
);
}
}
/**
* Edit user groups membership
* @param string $username Name of the user.
*/
function editUserGroupsForm( $username ) {
global $wgOut;
$user = $this->fetchUser( $username );
if( !$user ) {
return;
}
$groups = $user->getGroups();
$this->showEditUserGroupsForm( $user, $groups );
// This isn't really ideal logging behavior, but let's not hide the
// interwiki logs if we're using them as is.
$this->showLogFragment( $user, $wgOut );
}
/**
* Normalize the input username, which may be local or remote, and
* return a user (or proxy) object for manipulating it.
*
* Side effects: error output for invalid access
* @return mixed User, UserRightsProxy, or null
*/
function fetchUser( $username ) {
global $wgOut, $wgUser;
$parts = explode( '@', $username );
if( count( $parts ) < 2 ) {
$name = trim( $username );
$database = '';
} else {
list( $name, $database ) = array_map( 'trim', $parts );
if( !$wgUser->isAllowed( 'userrights-interwiki' ) ) {
$wgOut->addWikiMsg( 'userrights-no-interwiki' );
return null;
}
if( !UserRightsProxy::validDatabase( $database ) ) {
$wgOut->addWikiMsg( 'userrights-nodatabase', $database );
return null;
}
}
if( $name == '' ) {
$wgOut->addWikiMsg( 'nouserspecified' );
return false;
}
if( $name{0} == '#' ) {
// Numeric ID can be specified...
// We'll do a lookup for the name internally.
$id = intval( substr( $name, 1 ) );
if( $database == '' ) {
$name = User::whoIs( $id );
} else {
$name = UserRightsProxy::whoIs( $database, $id );
}
if( !$name ) {
$wgOut->addWikiMsg( 'noname' );
return null;
}
}
if( $database == '' ) {
$user = User::newFromName( $name );
} else {
$user = UserRightsProxy::newFromName( $database, $name );
}
if( !$user || $user->isAnon() ) {
$wgOut->addWikiMsg( 'nosuchusershort', $username );
return null;
}
return $user;
}
function makeGroupNameList( $ids ) {
return implode( ', ', $ids );
}
/**
* Output a form to allow searching for a user
*/
function switchForm() {
global $wgOut, $wgScript;
$form = Xml::openElement( 'form', array( 'method' => 'get', 'action' => $wgScript, 'name' => 'uluser' ) );
$form .= Xml::hidden( 'title', 'Special:Userrights' );
$form .= '';
$form .= '';
$wgOut->addHTML( $form );
}
/**
* Go through used and available groups and return the ones that this
* form will be able to manipulate based on the current user's system
* permissions.
*
* @param $groups Array: list of groups the given user is in
* @return Array: Tuple of addable, then removable groups
*/
protected function splitGroups( $groups ) {
global $wgGroupsAddToSelf, $wgGroupsRemoveFromSelf;
list($addable, $removable) = array_values( $this->changeableGroups() );
$removable = array_intersect(
array_merge($this->isself ? $wgGroupsRemoveFromSelf : array(), $removable),
$groups ); // Can't remove groups the user doesn't have
$addable = array_diff(
array_merge($this->isself ? $wgGroupsAddToSelf : array(), $addable),
$groups ); // Can't add groups the user does have
return array( $addable, $removable );
}
/**
* Show the form to edit group memberships.
*
* @todo make all CSS-y and semantic
* @param $user User or UserRightsProxy you're editing
* @param $groups Array: Array of groups the user is in
*/
protected function showEditUserGroupsForm( $user, $groups ) {
global $wgOut, $wgUser;
list( $addable, $removable ) = $this->splitGroups( $groups );
$list = array();
foreach( $user->getGroups() as $group )
$list[] = self::buildGroupLink( $group );
$grouplist = '';
if( count( $list ) > 0 ) {
$grouplist = '