%PDF-
%PDF-
Mini Shell
Mini Shell
<?php
namespace Bitrix\Sender\Security\Role;
use Bitrix\Main\Loader;
use Bitrix\Main\Application;
use Bitrix\Main\ArgumentException;
use Bitrix\Main\Entity\AddResult;
use Bitrix\Main\Localization\Loc;
use Bitrix\Sender\Internals\Model;
use Bitrix\Bitrix24\Feature;
Loc::loadMessages(__FILE__);
/**
* Class Manager
*
* @package Bitrix\Sender\Security\Role
*/
class Manager
{
/** @var array $userRoles User roles. */
protected static $userRoles = []; // 'USER_ID' => 'ROLE_ID'
/**
* Clean menu cache.
*
* @return void
*/
public static function clearMenuCache()
{
Application::getInstance()->getTaggedCache()->clearByTag('bitrix:menu');
}
/**
* Return true if can use role access.
*
* @return bool
*/
public static function canUse()
{
if(!Loader::includeModule('bitrix24'))
{
return true;
}
return Feature::isFeatureEnabled('sender_security');
}
/**
* Return true if can use role access.
*
* @return bool
*/
public static function getTrialText()
{
return Loc::getMessage('SENDER_SECURITY_ROLE_MANAGER_TRIAL_TEXT');
}
/**
* Get role list.
*
* @param array $parameters Parameters.
* @return \Bitrix\Main\DB\Result
*/
public static function getRoleList(array $parameters = [])
{
return Model\Role\RoleTable::getList($parameters);
}
/**
* Get access list.
*
* @param array $parameters Parameters.
* @return \Bitrix\Main\DB\Result
*/
public static function getAccessList(array $parameters = [])
{
return Model\Role\AccessTable::getList($parameters);
}
/**
* Set access codes.
*
* @param array $list List.
* @return AddResult
*/
public static function setAccessCodes(array $list = [])
{
self::clearMenuCache();
Model\Role\AccessTable::truncate();
foreach ($list as $item)
{
$result = Model\Role\AccessTable::add(array(
'ROLE_ID' => $item['ROLE_ID'],
'ACCESS_CODE' => $item['ACCESS_CODE']
));
if(!$result->isSuccess())
{
return $result;
}
}
return new AddResult();
}
/**
* Get roles by user ID.
*
* @param int $userId User ID.
* @return array
* @throws \Bitrix\Main\ArgumentException
* @internal
*/
public static function getRolesByUserId($userId)
{
if(isset(self::$userRoles[$userId]))
return self::$userRoles[$userId];
$result = [];
$userAccessCodes = \CAccess::getUserCodesArray($userId);
if(!is_array($userAccessCodes) || count($userAccessCodes) === 0)
return [];
$cursor = Model\Role\AccessTable::getList([
'filter' => [
'=ACCESS_CODE' => $userAccessCodes
]
]);
while($row = $cursor->fetch())
{
$result[] = $row['ROLE_ID'];
}
self::$userRoles[$userId] = $result;
return $result;
}
/**
* Get role permissions.
*
* @param int $roleId Role ID.
* @return array
*/
public static function getRolePermissions($roleId)
{
$result = [];
$list = Model\Role\PermissionTable::getList(['filter' => ['=ROLE_ID' => $roleId]]);
foreach ($list as $row)
{
$result[$row['ENTITY']][$row['ACTION']] = $row['PERMISSION'];
}
return Permission::normalize($result);
}
/**
* Set role permissions. Add or update role
*
* @param int|null $roleId Role ID.
* @param array $roleFields Role fields.
* @param array $permissions Permissions.
* @return AddResult|\Bitrix\Main\Entity\UpdateResult
* @throws ArgumentException
*/
public static function setRolePermissions($roleId = null, array $roleFields = [], array $permissions)
{
$roleId = (int) $roleId;
if ($roleId <= 0 && empty($roleFields))
{
throw new ArgumentException('Role id should be greater than zero', 'roleId');
}
if(Model\Role\RoleTable::getRowById($roleId))
{
if (!empty($roleFields))
{
$result = Model\Role\RoleTable::update($roleId, $roleFields);
if (!$result->isSuccess())
{
return $result;
}
}
}
else
{
$result = Model\Role\RoleTable::add($roleFields);
if (!$result->isSuccess())
{
return $result;
}
$roleId = $result->getId();
}
$normalizedPermissions = Permission::normalize($permissions);
Model\Role\PermissionTable::deleteByRoleId($roleId);
foreach ($normalizedPermissions as $entity => $actions)
{
foreach ($actions as $action => $permission)
{
$result = Model\Role\PermissionTable::add(array(
'ROLE_ID' => $roleId,
'ENTITY' => $entity,
'ACTION' => $action,
'PERMISSION' => $permission
));
if (!$result->isSuccess())
{
return $result;
}
}
}
self::clearMenuCache();
$result = new AddResult();
$result->setId($roleId);
return $result;
}
/**
* Deletes role and all dependent records.
*
* @param int $roleId Id of the role.
* @return void
*/
public static function deleteRole($roleId)
{
Model\Role\PermissionTable::deleteByRoleId($roleId);
Model\Role\AccessTable::deleteByRoleId($roleId);
Model\Role\RoleTable::delete($roleId);
self::clearMenuCache();
}
/**
* Install roles.
*
* @return string
*/
public static function installRolesAgent()
{
self::installRoles();
return '';
}
/**
* Install roles.
*
* @return void
*/
public static function installRoles()
{
$roleRow = Model\Role\RoleTable::getRow([]);
if($roleRow)
{
return;
}
$defaultRoles = array(
'ADMIN' => array(
'NAME' => Loc::getMessage('SENDER_SECURITY_ROLE_MANAGER_INSTALLER_ADMIN'),
'PERMISSIONS' => array(
Permission::ENTITY_AD => array(
Permission::ACTION_VIEW => Permission::PERMISSION_ANY,
Permission::ACTION_MODIFY => Permission::PERMISSION_ANY,
),
Permission::ENTITY_RC => array(
Permission::ACTION_VIEW => Permission::PERMISSION_ANY,
Permission::ACTION_MODIFY => Permission::PERMISSION_ANY,
),
Permission::ENTITY_LETTER => array(
Permission::ACTION_VIEW => Permission::PERMISSION_ANY,
Permission::ACTION_MODIFY => Permission::PERMISSION_ANY,
),
Permission::ENTITY_SEGMENT => array(
Permission::ACTION_VIEW => Permission::PERMISSION_ANY,
Permission::ACTION_MODIFY => Permission::PERMISSION_ANY,
),
Permission::ENTITY_BLACKLIST => array(
Permission::ACTION_VIEW => Permission::PERMISSION_ANY,
Permission::ACTION_MODIFY => Permission::PERMISSION_ANY,
),
Permission::ENTITY_SETTINGS => array(
Permission::ACTION_MODIFY => Permission::PERMISSION_ANY,
),
)
),
'MANAGER' => array(
'NAME' => Loc::getMessage('SENDER_SECURITY_ROLE_MANAGER_INSTALLER_MANAGER'),
'PERMISSIONS' => array(
Permission::ENTITY_AD => array(
Permission::ACTION_VIEW => Permission::PERMISSION_ANY,
Permission::ACTION_MODIFY => Permission::PERMISSION_ANY,
),
Permission::ENTITY_RC => array(
Permission::ACTION_VIEW => Permission::PERMISSION_ANY,
Permission::ACTION_MODIFY => Permission::PERMISSION_ANY,
),
Permission::ENTITY_LETTER => array(
Permission::ACTION_VIEW => Permission::PERMISSION_ANY,
Permission::ACTION_MODIFY => Permission::PERMISSION_ANY,
),
Permission::ENTITY_SEGMENT => array(
Permission::ACTION_VIEW => Permission::PERMISSION_ANY,
Permission::ACTION_MODIFY => Permission::PERMISSION_NONE,
),
Permission::ENTITY_BLACKLIST => array(
Permission::ACTION_VIEW => Permission::PERMISSION_ANY,
Permission::ACTION_MODIFY => Permission::PERMISSION_ANY,
),
Permission::ENTITY_SETTINGS => array(
Permission::ACTION_MODIFY => Permission::PERMISSION_NONE,
),
)
)
);
$roleIds = array();
foreach ($defaultRoles as $roleCode => $role)
{
$addResult = Model\Role\RoleTable::add(array(
'NAME' => $role['NAME'],
'XML_ID' => $roleCode,
));
$roleId = $addResult->getId();
if ($roleId)
{
$roleIds[$roleCode] = $roleId;
Manager::setRolePermissions($roleId, [], $role['PERMISSIONS']);
}
}
if (isset($roleIds['ADMIN']))
{
Model\Role\AccessTable::add(array(
'ROLE_ID' => $roleIds['ADMIN'],
'ACCESS_CODE' => 'G1'
));
}
if (isset($roleIds['MANAGER']) && Loader::includeModule('intranet'))
{
$departmentTree = \CIntranetUtils::getDeparmentsTree();
$rootDepartment = (int)$departmentTree[0][0];
if ($rootDepartment > 0)
{
Model\Role\AccessTable::add(array(
'ROLE_ID' => $roleIds['MANAGER'],
'ACCESS_CODE' => 'DR'.$rootDepartment
));
}
}
}
}
Zerion Mini Shell 1.0