piotrpolak/pepiscms

<?php

/**
 * PepisCMS
 *
 * Simple content management system
 *
 * @package             PepisCMS
 * @author              Piotr Polak
 * @copyright           Copyright (c) 2007-2018, Piotr Polak
 * @license             See license.txt
 * @link                http://www.polak.ro/
 */

defined('BASEPATH') or exit('No direct script access allowed');

/**
 * ACL controller
 *
 * @property SecurityPolicy $securitypolicy
 */
class Acl extends AdminController
{
    public function __construct()
    {
        parent::__construct();
        if (!$this->config->item('feature_is_enabled_acl')) {
            show_error($this->lang->line('global_feature_not_enabled'));
        }
        $this->load->language('acl');
        $this->load->library(array('ModuleRunner', 'SimpleSessionMessage', 'SecurityPolicy', 'SecurityPolicyBuilder'));

        $this->assign('use_extended_utilities_view', true)
            ->assign('title', $this->lang->line('acl_label_security_policy'));
    }

    /** Callback * */
    protected function renderMenu()
    {
        $this->load->library('MenuRendor');
        return $this->menurendor->render('utilities', 'index', $this->input->getParam('language_code'));
    }

    public function index()
    {
        $installed_modules = array(
            'core_modules' => array(),
            'userspace_modules' => array()
        );

        $modules = $this->Module_model->getInstalledModules();
        foreach ($modules as $module) {
            if ($this->Module_model->isCoreModule($module->name)) {
                $module_group = 'core_modules';
            } else {
                $module_group = 'userspace_modules';
            }

            $installed_modules[$module_group][] = $module->name;
        }

        $this->assign('installed_modules', $installed_modules)
            ->display();
    }

    public function edit()
    {
        $section = $this->input->getParam('section');
        $is_editable = ($section != 'system' && !$this->Module_model->isCoreModule($section)) || !PEPISCMS_PRODUCTION_RELEASE;

        if ($section == 'system') {
            $entities = $this->securitypolicy->getSystemAvailableEntities();
            $controllers = $this->securitypolicy->describeSystemControllers();
            $security_policy = $this->securitypolicy->getSystemSecurityPolicy();
            $policy_save_path = SecurityPolicy::getSystemPolicyPath();
        } else {
            $entities = $this->securitypolicy->getModuleAvailableEntities($section);
            $controllers = $this->securitypolicy->describeModuleControllers($section);
            $security_policy = $this->securitypolicy->getModuleSecurityPolicy($section);
            $policy_save_path = SecurityPolicy::getModulePolicyPath($section);
        }

        if (isset($_POST) && count($_POST)) {
            $policy_entries = array();
            if (isset($_POST['entity'])) {
                foreach ($_POST['entity'] as $controller => $method_to_entity) {
                    foreach ($method_to_entity as $method => $entity) {
                        $access = isset($_POST['access'][$controller][$method]) ? $_POST['access'][$controller][$method] : 'NONE';

                        $policy_entries[] = array(
                            'controller' => $controller,
                            'method' => $method,
                            'entity' => $entity,
                            'access' => $access);
                    }
                }
            }

            $xml = $this->securitypolicybuilder->build($section, $policy_entries);

            $is_editable = ($section != 'system' && !$this->Module_model->isCoreModule($section)) || !PEPISCMS_PRODUCTION_RELEASE;
            if (!$is_editable) {
                header('Content-type: application/xml');
                die($xml);
            } else {

                $this->load->library('SimpleSessionMessage');
                if (!@file_put_contents($policy_save_path, $xml)) {
                    $this->simplesessionmessage->setFormattingFunction(SimpleSessionMessage::FUNCTION_ERROR)
                        ->setMessage('act_unable_to_write_policy_file');
                } else {
                    SecurityManager::flushCache();
                    // Setting the message and redirecting

                    $this->simplesessionmessage->setFormattingFunction(SimpleSessionMessage::FUNCTION_SUCCESS)
                        ->setMessage('global_header_success');

                    if (!isset($_POST['apply'])) {
                        redirect(admin_url() . 'acl');
                    }
                }
            }

            // Reading one more time after save
            if ($section == 'system') {
                $entities = $this->securitypolicy->getSystemAvailableEntities();
                $security_policy = $this->securitypolicy->getSystemSecurityPolicy();
            } else {
                $entities = $this->securitypolicy->getModuleAvailableEntities($section);
                $security_policy = $this->securitypolicy->getModuleSecurityPolicy($section);
            }
        }

        $gae = explode(',', $this->input->post('available_entities'));
        foreach ($gae as $entity) {
            $entities[] = trim($entity);
        }

        $entities = array_filter($entities);
        $entities = array_unique($entities);

        $this->assign('section', $section)
            ->assign('is_editable', $is_editable)
            ->assign('entities', $entities)
            ->assign('security_policy', $security_policy)
            ->assign('controllers', $controllers)
            ->assign('title', sprintf($this->lang->line('act_security_policy_for'), $section))
            ->display();
    }

    public function checkrights()
    {
        $this->load->library('SecurityPolicy');
        $this->assign('controllers', $this->securitypolicy->describeSystemControllers())
            ->assign('title', $this->lang->line('acl_label_security_policy_check_own_rights'))
            ->display();
    }
}