RoleManager.php

<?php
include_once(GALAXIA_LIBRARY.'/src/ProcessManager/BaseManager.php');

class RoleManager extends BaseManager {
    
  function RoleManager($db) 
  {
    if(!$db) {
      die("Invalid db object passed to RoleManager constructor");  
    }
    $this->db = $db;  
  }
  
  function get_role_id($pid,$name)
  {
    $name = addslashes($name);
    return ($this->getOne("select roleId from ".GALAXIA_TABLE_PREFIX."roles where name='$name' and pId=$pid"));
  }
  
  function get_role($pId, $roleId)
  {
    $query = "select * from `".GALAXIA_TABLE_PREFIX."roles` where `pId`=? and `roleId`=?";
  $result = $this->query($query,array($pId, $roleId));
  $res = $result->fetchRow();
  return $res;
  }
  
  function role_name_exists($pid,$name)
  {
    $name = addslashes($name);
    return ($this->getOne("select count(*) from ".GALAXIA_TABLE_PREFIX."roles where pId=$pid and name='$name'"));
  }
  
  function map_user_to_role($pId,$user,$roleId)
  {
  $query = "delete from `".GALAXIA_TABLE_PREFIX."user_roles` where `roleId`=? and `user`=?";
  $this->query($query,array($roleId, $user));
  $query = "insert into `".GALAXIA_TABLE_PREFIX."user_roles`(`pId`, `user`, `roleId`) values(?,?,?)";
  $this->query($query,array($pId,$user,$roleId));
  }
  
  function remove_mapping($user,$roleId)
  { 
  $query = "delete from `".GALAXIA_TABLE_PREFIX."user_roles` where `user`=? and `roleId`=?";
  $this->query($query,array($user, $roleId));
  }
  
  function list_mappings($pId,$offset,$maxRecords,$sort_mode,$find)  {
    $sort_mode = $this->convert_sortmode($sort_mode);
    if($find) {
      // no more quoting here - this is done in bind vars already
      $findesc = '%'.$find.'%';
      $query = "select `name`,`gr`.`roleId`,`user` from `".GALAXIA_TABLE_PREFIX."roles` gr, `".GALAXIA_TABLE_PREFIX."user_roles` gur where `gr`.`roleId`=`gur`.`roleId` and `gur`.`pId`=? and ((`name` like ?) or (`user` like ?) or (`description` like ?)) order by $sort_mode";
      $result = $this->query($query,array($pId,$findesc,$findesc,$findesc), $maxRecords, $offset);
      $query_cant = "select count(*) from `".GALAXIA_TABLE_PREFIX."roles` gr, `".GALAXIA_TABLE_PREFIX."user_roles` gur where `gr`.`roleId`=`gur`.`roleId` and `gur`.`pId`=? and ((`name` like ?) or (`user` like ?) or (`description` like ?))";
      $cant = $this->getOne($query_cant,array($pId,$findesc,$findesc,$findesc));
    } else {
      $query = "select `name`,`gr`.`roleId`,`user` from `".GALAXIA_TABLE_PREFIX."roles` gr, `".GALAXIA_TABLE_PREFIX."user_roles` gur where `gr`.`roleId`=`gur`.`roleId` and `gur`.`pId`=? order by $sort_mode";
      $result = $this->query($query,array($pId), $maxRecords, $offset);
      $query_cant = "select count(*) from `".GALAXIA_TABLE_PREFIX."roles` gr, `".GALAXIA_TABLE_PREFIX."user_roles` gur where `gr`.`roleId`=`gur`.`roleId` and `gur`.`pId`=?";
      $cant = $this->getOne($query_cant,array($pId));
    }
    $ret = Array();
    while($res = $result->fetchRow()) {
      $ret[] = $res;
    }
    $retval = Array();
    $retval["data"] = $ret;
    $retval["cant"] = $cant;
    return $retval;
  }
  
  function list_roles($pId,$offset,$maxRecords,$sort_mode,$find,$where='')
  {
    $sort_mode = $this->convert_sortmode($sort_mode);
    if($find) {
      // no more quoting here - this is done in bind vars already
      $findesc = '%'.$find.'%';
      $mid=" where pId=? and ((name like ?) or (description like ?))";
      $bindvars = array($pId,$findesc,$findesc);
    } else {
      $mid=" where pId=? ";
      $bindvars = array($pId);
    }
    if($where) {
      $mid.= " and ($where) ";
    }
    $query = "select * from ".GALAXIA_TABLE_PREFIX."roles $mid order by $sort_mode";
    $query_cant = "select count(*) from ".GALAXIA_TABLE_PREFIX."roles $mid";
    $result = $this->query($query,$bindvars,$maxRecords,$offset);
    $cant = $this->getOne($query_cant,$bindvars);
    $ret = Array();
    while($res = $result->fetchRow()) {
      $ret[] = $res;
    }
    $retval = Array();
    $retval["data"] = $ret;
    $retval["cant"] = $cant;
    return $retval;
  }
  
  
  
  function remove_role($pId, $roleId)
  {
    $query = "delete from `".GALAXIA_TABLE_PREFIX."roles` where `pId`=? and `roleId`=?";
    $this->query($query,array($pId, $roleId));
    $query = "delete from `".GALAXIA_TABLE_PREFIX."activity_roles` where `roleId`=?";
    $this->query($query,array($roleId));
    $query = "delete from `".GALAXIA_TABLE_PREFIX."user_roles` where `roleId`=?";
    $this->query($query,array($roleId));
  }
  
  function replace_role($pId, $roleId, $vars)
  {
    $TABLE_NAME = GALAXIA_TABLE_PREFIX."roles";
    $now = date("U");
    $vars['lastModif']=$now;
    $vars['pId']=$pId;
    
    foreach($vars as $key=>$value)
    {
      $vars[$key]=addslashes($value);
    }
  
    if($roleId) {
      // update mode
      $first = true;
      $query ="update $TABLE_NAME set";
      foreach($vars as $key=>$value) {
        if(!$first) $query.= ',';
        if(!is_numeric($value)) $value="'".$value."'";
        $query.= " $key=$value ";
        $first = false;
      }
      $query .= " where pId=$pId and roleId=$roleId ";
      $this->query($query);
    } else {
      $name = $vars['name'];
      if ($this->getOne("select count(*) from ".GALAXIA_TABLE_PREFIX."roles where pId=$pId and name='$name'")) {
        return false;
      }
      unset($vars['roleId']);
      // insert mode
      $first = true;
      $query = "insert into $TABLE_NAME(";
      foreach(array_keys($vars) as $key) {
        if(!$first) $query.= ','; 
        $query.= "$key";
        $first = false;
      } 
      $query .=") values(";
      $first = true;
      foreach(array_values($vars) as $value) {
        if(!$first) $query.= ','; 
        if(!is_numeric($value)) $value="'".$value."'";
        $query.= "$value";
        $first = false;
      } 
      $query .=")";
      $this->query($query);
      $roleId = $this->getOne("select max(roleId) from $TABLE_NAME where pId=$pId and lastModif=$now"); 
    }
    // Get the id
    return $roleId;
  }
}

?>

---