UI.php 49 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697989910010110210310410510610710810911011111211311411511611711811912012112212312412512612712812913013113213313413513613713813914014114214314414514614714814915015115215315415515615715815916016116216316416516616716816917017117217317417517617717817918018118218318418518618718818919019119219319419519619719819920020120220320420520620720820921021121221321421521621721821922022122222322422522622722822923023123223323423523623723823924024124224324424524624724824925025125225325425525625725825926026126226326426526626726826927027127227327427527627727827928028128228328428528628728828929029129229329429529629729829930030130230330430530630730830931031131231331431531631731831932032132232332432532632732832933033133233333433533633733833934034134234334434534634734834935035135235335435535635735835936036136236336436536636736836937037137237337437537637737837938038138238338438538638738838939039139239339439539639739839940040140240340440540640740840941041141241341441541641741841942042142242342442542642742842943043143243343443543643743843944044144244344444544644744844945045145245345445545645745845946046146246346446546646746846947047147247347447547647747847948048148248348448548648748848949049149249349449549649749849950050150250350450550650750850951051151251351451551651751851952052152252352452552652752852953053153253353453553653753853954054154254354454554654754854955055155255355455555655755855956056156256356456556656756856957057157257357457557657757857958058158258358458558658758858959059159259359459559659759859960060160260360460560660760860961061161261361461561661761861962062162262362462562662762862963063163263363463563663763863964064164264364464564664764864965065165265365465565665765865966066166266366466566666766866967067167267367467567667767867968068168268368468568668768868969069169269369469569669769869970070170270370470570670770870971071171271371471571671771871972072172272372472572672772872973073173273373473573673773873974074174274374474574674774874975075175275375475575675775875976076176276376476576676776876977077177277377477577677777877978078178278378478578678778878979079179279379479579679779879980080180280380480580680780880981081181281381481581681781881982082182282382482582682782882983083183283383483583683783883984084184284384484584684784884985085185285385485585685785885986086186286386486586686786886987087187287387487587687787887988088188288388488588688788888989089189289389489589689789889990090190290390490590690790890991091191291391491591691791891992092192292392492592692792892993093193293393493593693793893994094194294394494594694794894995095195295395495595695795895996096196296396496596696796896997097197297397497597697797897998098198298398498598698798898999099199299399499599699799899910001001100210031004100510061007100810091010101110121013101410151016101710181019102010211022102310241025102610271028102910301031103210331034103510361037103810391040104110421043104410451046104710481049105010511052105310541055105610571058105910601061106210631064106510661067106810691070107110721073107410751076107710781079108010811082108310841085108610871088108910901091109210931094109510961097109810991100110111021103110411051106110711081109111011111112111311141115111611171118111911201121112211231124112511261127112811291130113111321133113411351136113711381139114011411142114311441145114611471148114911501151115211531154115511561157115811591160116111621163116411651166116711681169117011711172117311741175117611771178117911801181118211831184118511861187118811891190119111921193119411951196119711981199120012011202120312041205120612071208120912101211121212131214121512161217121812191220122112221223122412251226122712281229123012311232123312341235123612371238123912401241124212431244124512461247124812491250125112521253125412551256125712581259126012611262126312641265126612671268126912701271127212731274127512761277127812791280128112821283128412851286128712881289129012911292129312941295129612971298129913001301130213031304130513061307130813091310131113121313131413151316131713181319132013211322132313241325132613271328132913301331133213331334133513361337133813391340
  1. <?php
  2. // Copyright (C) 2010 Combodo SARL
  3. //
  4. // This program is free software; you can redistribute it and/or modify
  5. // it under the terms of the GNU General Public License as published by
  6. // the Free Software Foundation; version 3 of the License.
  7. //
  8. // This program is distributed in the hope that it will be useful,
  9. // but WITHOUT ANY WARRANTY; without even the implied warranty of
  10. // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  11. // GNU General Public License for more details.
  12. //
  13. // You should have received a copy of the GNU General Public License
  14. // along with this program; if not, write to the Free Software
  15. // Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  16. /**
  17. * Main page of iTop
  18. *
  19. * @author Erwan Taloc <erwan.taloc@combodo.com>
  20. * @author Romain Quetiez <romain.quetiez@combodo.com>
  21. * @author Denis Flaven <denis.flaven@combodo.com>
  22. * @license http://www.opensource.org/licenses/gpl-3.0.html LGPL
  23. */
  24. /**
  25. * Perform all the needed checks to delete one (or more) objects
  26. */
  27. function DeleteObjects(WebPage $oP, $sClass, $aObjects, $bDeleteConfirmed)
  28. {
  29. $bFoundManual = false;
  30. $bFoundStopper = false;
  31. $iTotalDelete = 0; // count of object that must be deleted
  32. $iTotalReset = 0; // count of object for which an ext key will be reset (to 0)
  33. $aTotalDeletedObjs = array();
  34. $aTotalResetedObjs = array();
  35. foreach($aObjects as $oObj)
  36. {
  37. // Evaluate the impact on the DB integrity
  38. //
  39. list ($aDeletedObjs, $aResetedObjs) = $oObj->GetDeletionScheme();
  40. // Evaluate feasibility (user access control)
  41. //
  42. foreach ($aDeletedObjs as $sRemoteClass => $aDeletes)
  43. {
  44. $iTotalDelete += count($aDeletes);
  45. foreach ($aDeletes as $iId => $aData)
  46. {
  47. $oToDelete = $aData['to_delete'];
  48. $bDeleteAllowed = UserRights::IsActionAllowed($sClass, UR_ACTION_DELETE, DBObjectSet::FromObject($oToDelete)) && !MetaModel::IsReadOnlyClass($sClass);
  49. $aTotalDeletedObjs[$sRemoteClass][$iId]['auto_delete'] = $aData['auto_delete'];
  50. if (!$bDeleteAllowed)
  51. {
  52. $aTotalDeletedObjs[$sRemoteClass][$iId]['issue'] = Dict::S('UI:Delete:NotAllowedToDelete');
  53. $bFoundStopper = true;
  54. }
  55. else
  56. {
  57. $aTotalDeletedObjs[$sRemoteClass][$iId]['to_delete'] = $oToDelete;
  58. }
  59. $bAutoDel = $aData['auto_delete'];
  60. if (!$bAutoDel)
  61. {
  62. $bFoundManual = true;
  63. }
  64. }
  65. }
  66. foreach ($aResetedObjs as $sRemoteClass => $aToReset)
  67. {
  68. $iTotalReset += count($aToReset);
  69. foreach ($aToReset as $iId => $aData)
  70. {
  71. $oToReset = $aData['to_reset'];
  72. $aExtKeyLabels = array();
  73. $aForbiddenKeys = array(); // keys on which the current user is not allowed to write
  74. foreach ($aData['attributes'] as $sRemoteExtKey => $aRemoteAttDef)
  75. {
  76. $bUpdateAllowed = UserRights::IsActionAllowedOnAttribute($sClass, $sRemoteExtKey, UR_ACTION_MODIFY, DBObjectSet::FromObject($oToReset));
  77. if (!$bUpdateAllowed)
  78. {
  79. $bFoundStopper = true;
  80. $aForbiddenKeys[] = $aRemoteAttDef->GetLabel();
  81. }
  82. $aExtKeyLabels[] = $aRemoteAttDef->GetLabel();
  83. }
  84. $aResetedObjs[$sRemoteClass][$iId]['attributes_list'] = implode(', ', $aExtKeyLabels);
  85. $aTotalResetedObjs[$sRemoteClass][$iId]['attributes_list'] = $aResetedObjs[$sRemoteClass][$iId]['attributes_list'];
  86. if (count($aForbiddenKeys) > 0)
  87. {
  88. $aTotalResetedObjs[$sRemoteClass][$iId]['issue'] = Dict::Format('UI:Delete:NotAllowedToUpdate_Fields',implode(', ', $aForbiddenKeys));
  89. }
  90. else
  91. {
  92. $aTotalResetedObjs[$sRemoteClass][$iId]['to_reset'] = $oToReset;
  93. }
  94. }
  95. }
  96. // Count of dependent objects (+ the current one)
  97. $iTotalTargets = $iTotalDelete + $iTotalReset;
  98. }
  99. if ($bDeleteConfirmed)
  100. {
  101. if (count($aObjects) == 1)
  102. {
  103. $oObj = $aObjects[0];
  104. $oP->add("<h1>".Dict::Format('UI:Title:DeletionOf_Object', $oObj->GetName())."</h1>\n");
  105. }
  106. else
  107. {
  108. $oP->add("<h1>".Dict::Format('UI:Title:BulkDeletionOf_Count_ObjectsOf_Class', count($aObjects), MetaModel::GetName($sClass))."</h1>\n");
  109. }
  110. // Security - do not allow the user to force a forbidden delete by the mean of page arguments...
  111. if ($bFoundStopper)
  112. {
  113. throw new SecurityException(Dict::S('UI:Error:NotEnoughRightsToDelete'));
  114. }
  115. if ($bFoundManual)
  116. {
  117. throw new SecurityException(Dict::S('UI:Error:CannotDeleteBecauseOfDepencies'));
  118. }
  119. // Prepare the change reporting
  120. //
  121. $oMyChange = MetaModel::NewObject("CMDBChange");
  122. $oMyChange->Set("date", time());
  123. if (UserRights::GetUser() != UserRights::GetRealUser())
  124. {
  125. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  126. }
  127. else
  128. {
  129. $sUserString = UserRights::GetUser();
  130. }
  131. $oMyChange->Set("userinfo", $sUserString);
  132. $oMyChange->DBInsert();
  133. // Delete dependencies
  134. //
  135. $aDisplayData = array();
  136. foreach ($aTotalDeletedObjs as $sRemoteClass => $aDeletes)
  137. {
  138. foreach ($aDeletes as $iId => $aData)
  139. {
  140. $oToDelete = $aData['to_delete'];
  141. $aDisplayData[] = array(
  142. 'class' => MetaModel::GetName(get_class($oToDelete)),
  143. 'object' => $oToDelete->GetHyperLink(),
  144. 'consequence' => Dict::S('UI:Delete:AutomaticallyDeleted'),
  145. );
  146. $oToDelete->DBDeleteTracked($oMyChange);
  147. }
  148. }
  149. // Update dependencies
  150. //
  151. foreach ($aTotalResetedObjs as $sRemoteClass => $aToReset)
  152. {
  153. foreach ($aToReset as $iId => $aData)
  154. {
  155. $oToReset = $aData['to_reset'];
  156. $aDisplayData[] = array(
  157. 'class' => MetaModel::GetName(get_class($oToReset)),
  158. 'object' => $oToReset->GetHyperLink(),
  159. 'consequence' => Dict::Format('UI:Delete:AutomaticResetOf_Fields', $aData['attributes_list']),
  160. );
  161. foreach ($aData['attributes'] as $sRemoteExtKey => $aRemoteAttDef)
  162. {
  163. $oToReset->Set($sRemoteExtKey, 0);
  164. $oToReset->DBUpdateTracked($oMyChange);
  165. }
  166. }
  167. }
  168. // Report automatic jobs
  169. //
  170. if ($iTotalTargets > 0)
  171. {
  172. if (count($aObjects) == 1)
  173. {
  174. $oObj = $aObjects[0];
  175. $oP->p(Dict::Format('UI:Delete:CleaningUpRefencesTo_Object', $oObj->GetName()));
  176. }
  177. else
  178. {
  179. $oP->p(Dict::Format('UI:Delete:CleaningUpRefencesTo_Several_ObjectsOf_Class', count($aObjects), MetaModel::GetName($sClass)));
  180. }
  181. $aDisplayConfig = array();
  182. $aDisplayConfig['class'] = array('label' => 'Class', 'description' => '');
  183. $aDisplayConfig['object'] = array('label' => 'Object', 'description' => '');
  184. $aDisplayConfig['consequence'] = array('label' => 'Done', 'description' => Dict::S('UI:Delete:Done+'));
  185. $oP->table($aDisplayConfig, $aDisplayData);
  186. }
  187. foreach($aObjects as $oObj)
  188. {
  189. $sName = $oObj->GetName();
  190. $sClassLabel = MetaModel::GetName(get_class($oObj));
  191. $oObj->DBDeleteTracked($oMyChange);
  192. $oP->add("<h1>".Dict::Format('UI:Delete:_Name_Class_Deleted', $sName, $sClassLabel)."</h1>\n");
  193. }
  194. }
  195. else
  196. {
  197. if (count($aObjects) == 1)
  198. {
  199. $oObj = $aObjects[0];
  200. $oP->add("<h1>".Dict::Format('UI:Delete:ConfirmDeletionOf_Name', $oObj->GetName())."</h1>\n");
  201. }
  202. else
  203. {
  204. $oP->add("<h1>".Dict::Format('UI:Delete:ConfirmDeletionOf_Count_ObjectsOf_Class', count($aObjects), MetaModel::GetName($sClass))."</h1>\n");
  205. }
  206. // Explain what should be done
  207. //
  208. $aDisplayData = array();
  209. foreach ($aTotalDeletedObjs as $sRemoteClass => $aDeletes)
  210. {
  211. foreach ($aDeletes as $iId => $aData)
  212. {
  213. $oToDelete = $aData['to_delete'];
  214. $bAutoDel = $aData['auto_delete'];
  215. if (array_key_exists('issue', $aData))
  216. {
  217. if ($bAutoDel)
  218. {
  219. $sConsequence = Dict::S('UI:Delete:ShouldBeDeletedAtomaticallyButNotAllowed');
  220. }
  221. else
  222. {
  223. $sConsequence = Dict::S('UI:Delete:MustBeDeletedManuallyButNotAllowed');
  224. }
  225. }
  226. else
  227. {
  228. if ($bAutoDel)
  229. {
  230. $sConsequence = Dict::S('UI:Delete:WillBeDeletedAutomatically');
  231. }
  232. else
  233. {
  234. $sConsequence = Dict::S('UI:Delete:MustBeDeletedManually');
  235. }
  236. }
  237. $aDisplayData[] = array(
  238. 'class' => MetaModel::GetName(get_class($oToDelete)),
  239. 'object' => $oToDelete->GetHyperLink(),
  240. 'consequence' => $sConsequence,
  241. );
  242. }
  243. }
  244. foreach ($aTotalResetedObjs as $sRemoteClass => $aToReset)
  245. {
  246. foreach ($aToReset as $iId => $aData)
  247. {
  248. $oToReset = $aData['to_reset'];
  249. if (array_key_exists('issue', $aData))
  250. {
  251. $sConsequence = Dict::Format('UI:Delete:CannotUpdateBecause_Issue', $aData['issue']);
  252. }
  253. else
  254. {
  255. $sConsequence = Dict::Format('UI:Delete:WillAutomaticallyUpdate_Fields', $aData['attributes_list']);
  256. }
  257. $aDisplayData[] = array(
  258. 'class' => MetaModel::GetName(get_class($oToReset)),
  259. 'object' => $oToReset->GetHyperLink(),
  260. 'consequence' => $sConsequence,
  261. );
  262. }
  263. }
  264. if ($iTotalTargets > 0)
  265. {
  266. if (count($aObjects) == 1)
  267. {
  268. $oObj = $aObjects[0];
  269. $oP->p(Dict::Format('UI:Delete:Count_Objects/LinksReferencing_Object', $iTotalTargets, $oObj->GetName()));
  270. }
  271. else
  272. {
  273. $oP->p(Dict::Format('UI:Delete:Count_Objects/LinksReferencingTheObjects', $iTotalTargets));
  274. }
  275. $oP->p(Dict::S('UI:Delete:ReferencesMustBeDeletedToEnsureIntegrity'));
  276. $aDisplayConfig = array();
  277. $aDisplayConfig['class'] = array('label' => 'Class', 'description' => '');
  278. $aDisplayConfig['object'] = array('label' => 'Object', 'description' => '');
  279. $aDisplayConfig['consequence'] = array('label' => 'Consequence', 'description' => Dict::S('UI:Delete:Consequence+'));
  280. $oP->table($aDisplayConfig, $aDisplayData);
  281. }
  282. if ($iTotalTargets > 0 && ($bFoundManual || $bFoundStopper))
  283. {
  284. if ($bFoundStopper)
  285. {
  286. $oP->p(Dict::S('UI:Delete:SorryDeletionNotAllowed'));
  287. }
  288. elseif ($bFoundManual)
  289. {
  290. $oP->p(Dict::S('UI:Delete:PleaseDoTheManualOperations'));
  291. }
  292. $oP->add("<form method=\"post\">\n");
  293. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::ReadParam('transaction_id')."\">\n");
  294. $oP->add("<input type=\"button\" onclick=\"window.history.back();\" value=\"".Dict::S('UI:Button:Back')."\">\n");
  295. $oP->add("<input DISABLED type=\"submit\" name=\"\" value=\"".Dict::S('UI:Button:Delete')."\">\n");
  296. $oP->add("</form>\n");
  297. }
  298. else
  299. {
  300. if (count($aObjects) == 1)
  301. {
  302. $oObj = $aObjects[0];
  303. $id = $oObj->GetKey();
  304. $oP->p('<h1>'.Dict::Format('UI:Delect:Confirm_Object', $oObj->GetHyperLink()).'</h1>');
  305. $oP->add("<form method=\"post\">\n");
  306. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::ReadParam('transaction_id')."\">\n");
  307. $oP->add("<input type=\"hidden\" name=\"operation\" value=\"delete_confirmed\">\n");
  308. $oP->add("<input type=\"hidden\" name=\"class\" value=\"$sClass\">\n");
  309. $oP->add("<input type=\"hidden\" name=\"id\" value=\"$id\">\n");
  310. $oP->add("<input type=\"button\" onclick=\"window.history.back();\" value=\"".Dict::S('UI:Button:Back')."\">\n");
  311. $oP->add("<input type=\"submit\" name=\"\" value=\"".Dict::S('UI:Button:Delete')."\">\n");
  312. $oP->add("</form>\n");
  313. }
  314. else
  315. {
  316. $oP->p('<h1>'.Dict::Format('UI:Delect:Confirm_Count_ObjectsOf_Class', count($aObjects), MetaModel::GetName($sClass)).'</h1>');
  317. $oSet = CMDBobjectSet::FromArray($sClass, $aObjects);
  318. CMDBAbstractObject::DisplaySet($oP, $oSet, array('display_limit' => false, 'menu' => false));
  319. $oP->add("<form method=\"post\">\n");
  320. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::ReadParam('transaction_id')."\">\n");
  321. $oP->add("<input type=\"hidden\" name=\"operation\" value=\"bulk_delete_confirmed\">\n");
  322. $oP->add("<input type=\"hidden\" name=\"class\" value=\"$sClass\">\n");
  323. foreach($aObjects as $oObj)
  324. {
  325. $oP->add("<input type=\"hidden\" name=\"selectObject[]\" value=\"".$oObj->GetKey()."\">\n");
  326. }
  327. $oP->add("<input type=\"button\" onclick=\"window.history.back();\" value=\"".Dict::S('UI:Button:Back')."\">\n");
  328. $oP->add("<input type=\"submit\" name=\"\" value=\"".Dict::S('UI:Button:Delete')."\">\n");
  329. $oP->add("</form>\n");
  330. }
  331. }
  332. }
  333. }
  334. /**
  335. * Updates an object from the POSTed parameters
  336. */
  337. function UpdateObject(&$oObj)
  338. {
  339. foreach(MetaModel::ListAttributeDefs(get_class($oObj)) as $sAttCode=>$oAttDef)
  340. {
  341. if ($oAttDef->IsLinkSet())
  342. {
  343. // Link set, the data is a set of link objects, encoded in JSON
  344. $aAttributes[$sAttCode] = trim(utils::ReadPostedParam("attr_$sAttCode", ''));
  345. if (!empty($aAttributes[$sAttCode]))
  346. {
  347. $oLinkSet = WizardHelper::ParseJsonSet($oObj, $oAttDef->GetLinkedClass(), $oAttDef->GetExtKeyToMe(), $aAttributes[$sAttCode]);
  348. $oObj->Set($sAttCode, $oLinkSet);
  349. // TO DO: detect a real modification, for now always update !!
  350. }
  351. }
  352. else if ($oAttDef->IsWritable())
  353. {
  354. $iFlags = $oObj->GetAttributeFlags($sAttCode);
  355. if ($iFlags & (OPT_ATT_HIDDEN | OPT_ATT_READONLY))
  356. {
  357. // Non-visible, or read-only attribute, do nothing
  358. }
  359. else if ($oAttDef->GetEditClass() == 'Document')
  360. {
  361. // There should be an uploaded file with the named attr_<attCode>
  362. $oDocument = utils::ReadPostedDocument('file_'.$sAttCode);
  363. if (!$oDocument->IsEmpty())
  364. {
  365. // A new file has been uploaded
  366. $oObj->Set($sAttCode, $oDocument);
  367. }
  368. }
  369. else
  370. {
  371. $rawValue = utils::ReadPostedParam("attr_$sAttCode", null);
  372. if (!is_null($rawValue))
  373. {
  374. $aAttributes[$sAttCode] = trim($rawValue);
  375. $previousValue = $oObj->Get($sAttCode);
  376. if ($previousValue !== $aAttributes[$sAttCode])
  377. {
  378. $oObj->Set($sAttCode, $aAttributes[$sAttCode]);
  379. }
  380. }
  381. }
  382. }
  383. }
  384. }
  385. /***********************************************************************************
  386. *
  387. * Main user interface page, starts here
  388. *
  389. * ***********************************************************************************/
  390. try
  391. {
  392. require_once('../application/application.inc.php');
  393. require_once('../application/itopwebpage.class.inc.php');
  394. require_once('../application/wizardhelper.class.inc.php');
  395. require_once('../application/startup.inc.php');
  396. $oContext = new UserContext();
  397. $oAppContext = new ApplicationContext();
  398. $currentOrganization = utils::ReadParam('org_id', '');
  399. $operation = utils::ReadParam('operation', '');
  400. require_once('../application/loginwebpage.class.inc.php');
  401. LoginWebPage::DoLogin(); // Check user rights and prompt if needed
  402. $oP = new iTopWebPage(Dict::S('UI:WelcomeToITop'), $currentOrganization);
  403. switch($operation)
  404. {
  405. case 'details':
  406. $sClass = utils::ReadParam('class', '');
  407. $sClassLabel = MetaModel::GetName($sClass);
  408. $id = utils::ReadParam('id', '');
  409. $oSearch = new DBObjectSearch($sClass);
  410. $oBlock = new DisplayBlock($oSearch, 'search', false);
  411. $oBlock->Display($oP, 0);
  412. if ( empty($sClass) || empty($id)) // TO DO: check that the class name is valid !
  413. {
  414. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'id'));
  415. }
  416. $oObj = $oContext->GetObject($sClass, $id);
  417. if ($oObj != null)
  418. {
  419. $oP->set_title(Dict::Format('UI:DetailsPageTitle', $oObj->GetDisplayName(), $sClassLabel));
  420. $oObj->DisplayDetails($oP);
  421. }
  422. else
  423. {
  424. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  425. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  426. }
  427. break;
  428. case 'search_oql':
  429. $sOQLClass = utils::ReadParam('oql_class', '');
  430. $sOQLClause = utils::ReadParam('oql_clause', '');
  431. $sFormat = utils::ReadParam('format', '');
  432. $bSearchForm = utils::ReadParam('search_form', true);
  433. if (empty($sOQLClass))
  434. {
  435. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'oql_class'));
  436. }
  437. $oP->set_title(Dict::S('UI:SearchResultsPageTitle'));
  438. $sOQL = "SELECT $sOQLClass $sOQLClause";
  439. try
  440. {
  441. $oFilter = DBObjectSearch::FromOQL($sOQL); // To Do: Make sure we don't bypass security
  442. $oSet = new DBObjectSet($oFilter);
  443. if ($bSearchForm)
  444. {
  445. $oBlock = new DisplayBlock($oFilter, 'search', false);
  446. $oBlock->Display($oP, 0);
  447. }
  448. if (strtolower($sFormat) == 'csv')
  449. {
  450. $oBlock = new DisplayBlock($oFilter, 'csv', false);
  451. $oBlock->Display($oP, 'csv');
  452. $oPage->add_ready_script(" $('#csv').css('height', '95%');"); // adjust the size of the block
  453. }
  454. else
  455. {
  456. $oBlock = new DisplayBlock($oFilter, 'list', false);
  457. $oBlock->Display($oP, 1);
  458. }
  459. }
  460. catch(CoreException $e)
  461. {
  462. $oFilter = new DBObjectSearch($sOQLClass); // To Do: Make sure we don't bypass security
  463. $oSet = new DBObjectSet($oFilter);
  464. if ($bSearchForm)
  465. {
  466. $oBlock = new DisplayBlock($oFilter, 'search', false);
  467. $oBlock->Display($oP, 0);
  468. }
  469. $oP->P('<b>'.Dict::Format('UI:Error:IncorrectOQLQuery_Message', $e->getHtmlDesc()).'</b>');
  470. }
  471. catch(Exception $e)
  472. {
  473. $oP->P('<b>'.Dict::Format('UI:Error:AnErrorOccuredWhileRunningTheQuery_Message', $e->getMessage()).'</b>');
  474. }
  475. break;
  476. case 'search_form':
  477. $sClass = utils::ReadParam('class', '');
  478. $sFormat = utils::ReadParam('format', 'html');
  479. $bSearchForm = utils::ReadParam('search_form', true);
  480. if (empty($sClass))
  481. {
  482. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'class'));
  483. }
  484. $oP->set_title(Dict::S('UI:SearchResultsPageTitle'));
  485. $oFilter = $oContext->NewFilter($sClass);
  486. $oSet = new DBObjectSet($oFilter);
  487. if ($bSearchForm)
  488. {
  489. $oBlock = new DisplayBlock($oFilter, 'search', false /* Asynchronous */, array('open' => true));
  490. $oBlock->Display($oP, 0);
  491. }
  492. if (strtolower($sFormat) == 'csv')
  493. {
  494. $oBlock = new DisplayBlock($oFilter, 'csv', false);
  495. $oBlock->Display($oP, 1);
  496. $oP->add_ready_script(" $('#csv').css('height', '95%');"); // adjust the size of the block
  497. }
  498. else
  499. {
  500. $oBlock = new DisplayBlock($oFilter, 'list', false);
  501. $oBlock->Display($oP, 1);
  502. }
  503. break;
  504. case 'search':
  505. $sFilter = utils::ReadParam('filter', '');
  506. $sFormat = utils::ReadParam('format', '');
  507. $bSearchForm = utils::ReadParam('search_form', true);
  508. if (empty($sFilter))
  509. {
  510. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'filter'));
  511. }
  512. $oP->set_title(Dict::S('UI:SearchResultsPageTitle'));
  513. // TO DO: limit the search filter by the user context
  514. $oFilter = CMDBSearchFilter::unserialize($sFilter); // TO DO : check that the filter is valid
  515. $oSet = new DBObjectSet($oFilter);
  516. if ($bSearchForm)
  517. {
  518. $oBlock = new DisplayBlock($oFilter, 'search', false);
  519. $oBlock->Display($oP, 0);
  520. }
  521. if (strtolower($sFormat) == 'csv')
  522. {
  523. $oBlock = new DisplayBlock($oFilter, 'csv', false);
  524. $oBlock->Display($oP, 'csv');
  525. $oP->add_ready_script(" $('#csv').css('height', '95%');"); // adjust the size of the block
  526. }
  527. else
  528. {
  529. $oBlock = new DisplayBlock($oFilter, 'list', false);
  530. $oBlock->Display($oP, 1);
  531. }
  532. break;
  533. case 'full_text':
  534. $sFullText = trim(utils::ReadParam('text', ''));
  535. if (empty($sFullText))
  536. {
  537. $oP->p(Dict::S('UI:Search:NoSearch'));
  538. }
  539. else
  540. {
  541. $oP->set_title(Dict::S('UI:SearchResultsPageTitle'));
  542. $oP->p("<h1>".Dict::Format('UI:FullTextSearchTitle_Text', $sFullText)."</h1>");
  543. $iCount = 0;
  544. $iBlock = 0;
  545. // Search in full text mode in all the classes
  546. $aMatches = array();
  547. if (preg_match('/^"(.*)"$/', $sFullText, $aMatches))
  548. {
  549. // The text is surrounded by double-quotes, remove the quotes and treat it as one single expression
  550. $aFullTextNeedles = array($aMatches[1]);
  551. }
  552. else
  553. {
  554. // Split the text on the blanks and treat this as a search for <word1> AND <word2> AND <word3>
  555. $aFullTextNeedles = explode(' ', $sFullText);
  556. }
  557. foreach(MetaModel::GetClasses('bizmodel') as $sClassName)
  558. {
  559. $oFilter = new DBObjectSearch($sClassName);
  560. foreach($aFullTextNeedles as $sSearchText)
  561. {
  562. $oFilter->AddCondition_FullText($sSearchText);
  563. }
  564. $oSet = new DBObjectSet($oFilter);
  565. if ($oSet->Count() > 0)
  566. {
  567. $aLeafs = array();
  568. while($oObj = $oSet->Fetch())
  569. {
  570. if (get_class($oObj) == $sClassName)
  571. {
  572. $aLeafs[] = $oObj->GetKey();
  573. }
  574. }
  575. $oLeafsFilter = new DBObjectSearch($sClassName);
  576. if (count($aLeafs) > 0)
  577. {
  578. $iCount += count($aLeafs);
  579. $oP->add("<div class=\"page_header\">\n");
  580. $oP->add("<h2><img style=\"vertical-align:middle;\" src=\"".MetaModel::GetClassIcon($sClassName)."\"><span class=\"hilite\">".Dict::Format('UI:Search:Count_ObjectsOf_Class_Found', count($aLeafs), Metamodel::GetName($sClassName))."</h2>\n");
  581. $oP->add("</div>\n");
  582. $oLeafsFilter->AddCondition('id', $aLeafs, 'IN');
  583. $oBlock = new DisplayBlock($oLeafsFilter, 'list', false);
  584. $oBlock->Display($oP, $iBlock++);
  585. $oP->P('&nbsp;'); // Some space ?
  586. }
  587. }
  588. }
  589. if ($iCount == 0)
  590. {
  591. $oP->p(Dict::S('UI:Search:NoObjectFound'));
  592. }
  593. }
  594. break;
  595. case 'modify':
  596. $oP->add_linked_script("../js/json.js");
  597. $oP->add_linked_script("../js/forms-json-utils.js");
  598. $oP->add_linked_script("../js/wizardhelper.js");
  599. $oP->add_linked_script("../js/wizard.utils.js");
  600. $oP->add_linked_script("../js/linkswidget.js");
  601. $oP->add_linked_script("../js/jquery.blockUI.js");
  602. $sClass = utils::ReadParam('class', '');
  603. $sClassLabel = MetaModel::GetName($sClass);
  604. $id = utils::ReadParam('id', '');
  605. if ( empty($sClass) || empty($id)) // TO DO: check that the class name is valid !
  606. {
  607. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'id'));
  608. }
  609. // Check if the user can modify this object
  610. $oSearch = new DBObjectSearch($sClass);
  611. $oSearch->AddCondition('id', $id, '=');
  612. $oSet = new CMDBObjectSet($oSearch);
  613. if ($oSet->Count() > 0)
  614. {
  615. $oObj = $oSet->Fetch();
  616. }
  617. $bIsModifiedAllowed = (UserRights::IsActionAllowed($sClass, UR_ACTION_MODIFY, $oSet) == UR_ALLOWED_YES) && !MetaModel::IsReadOnlyClass($sClass);
  618. $bIsReadAllowed = (UserRights::IsActionAllowed($sClass, UR_ACTION_READ, $oSet) == UR_ALLOWED_YES);
  619. if( ($oObj != null) && ($bIsModifiedAllowed) && ($bIsReadAllowed))
  620. {
  621. $oP->set_title(Dict::Format('UI:ModificationPageTitle_Object_Class', $oObj->GetName(), $sClassLabel));
  622. $oP->add("<div class=\"page_header\">\n");
  623. $oP->add("<h1><img src=\"".$oObj->GetIcon()."\" style=\"vertical-align:middle\"> ".Dict::Format('UI:ModificationTitle_Class_Object', $sClassLabel, $oObj->GetName())."</h1>\n");
  624. $oP->add("</div>\n");
  625. $oP->add("<div class=\"wizContainer\">\n");
  626. $oObj->DisplayModifyForm($oP);
  627. $oP->add("</div>\n");
  628. }
  629. else
  630. {
  631. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  632. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  633. }
  634. break;
  635. case 'clone':
  636. $sClass = utils::ReadParam('class', '');
  637. $sClassLabel = MetaModel::GetName($sClass);
  638. $id = utils::ReadParam('id', '');
  639. if ( empty($sClass) || empty($id)) // TO DO: check that the class name is valid !
  640. {
  641. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'id'));
  642. }
  643. // Check if the user can modify this object
  644. $oSearch = new DBObjectSearch($sClass);
  645. $oSearch->AddCondition('id', $id, '=');
  646. $oSet = new CMDBObjectSet($oSearch);
  647. if ($oSet->Count() > 0)
  648. {
  649. $oObjToClone = $oSet->Fetch();
  650. }
  651. $bIsModifiedAllowed = (UserRights::IsActionAllowed($sClass, UR_ACTION_MODIFY, $oSet) == UR_ALLOWED_YES) && !MetaModel::IsReadOnlyClass($sClass);
  652. $bIsReadAllowed = (UserRights::IsActionAllowed($sClass, UR_ACTION_READ, $oSet) == UR_ALLOWED_YES);
  653. if( ($oObjToClone != null) && ($bIsModifiedAllowed) && ($bIsReadAllowed))
  654. {
  655. $oP->add_linked_script("../js/json.js");
  656. $oP->add_linked_script("../js/forms-json-utils.js");
  657. $oP->add_linked_script("../js/wizardhelper.js");
  658. $oP->add_linked_script("../js/wizard.utils.js");
  659. $oP->add_linked_script("../js/linkswidget.js");
  660. $oP->add_linked_script("../js/jquery.blockUI.js");
  661. $oP->set_title(Dict::Format('UI:ClonePageTitle_Object_Class', $oObj->GetName(), $sClassLabel));
  662. $oP->add("<div class=\"page_header\">\n");
  663. $oP->add("<h1>".Dict::Format('UI:CloneTitle_Class_Object', $sClassLabel, $oObj->GetName())."</h1>\n");
  664. $oP->add("</div>\n");
  665. $oP->add("<img src=\"".$oObjToClone->GetIcon()."\" style=\"margin-top:-30px; margin-right:10px; float:right\">\n");
  666. $oP->add("<div class=\"wizContainer\">\n");
  667. $aDefaults = utils::ReadParam('default', array());
  668. $aContext = $oAppContext->GetAsHash();
  669. foreach($aContext as $key => $value)
  670. {
  671. $aDefaults[$key] = $value;
  672. }
  673. cmdbAbstractObject::DisplayCreationForm($oP, $sClass, $oObjToClone, array( 'default' => $aDefaults));
  674. $oP->add("</div>\n");
  675. }
  676. else
  677. {
  678. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  679. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  680. }
  681. break;
  682. case 'new':
  683. $sClass = utils::ReadParam('class', '');
  684. $sStateCode = utils::ReadParam('state', '');
  685. if ( empty($sClass) )
  686. {
  687. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'class'));
  688. }
  689. $oP->add_linked_script("../js/json.js");
  690. $oP->add_linked_script("../js/forms-json-utils.js");
  691. $oP->add_linked_script("../js/wizardhelper.js");
  692. $oP->add_linked_script("../js/wizard.utils.js");
  693. $oP->add_linked_script("../js/linkswidget.js");
  694. $oP->add_linked_script("../js/jquery.blockUI.js");
  695. $oContext = new UserContext();
  696. $aArgs = array_merge($oAppContext->GetAsHash(), utils::ReadParam('default', array()));
  697. $sClassLabel = MetaModel::GetName($sClass);
  698. $oP->set_title(Dict::Format('UI:CreationPageTitle_Class', $sClassLabel));
  699. $oP->add("<h1><img src=\"".MetaModel::GetClassIcon($sClass)."\" style=\"vertical-align:middle;\">".Dict::Format('UI:CreationTitle_Class', $sClassLabel)."</h1>\n");
  700. $oP->add("<div class=\"wizContainer\">\n");
  701. $aDefaults = utils::ReadParam('default', array());
  702. $aContext = $oAppContext->GetAsHash();
  703. foreach($aContext as $key => $value)
  704. {
  705. $aDefaults[$key] = $value;
  706. }
  707. cmdbAbstractObject::DisplayCreationForm($oP, $sClass, null /* $oObjToClone */, array('default' => $aDefaults));
  708. $oP->add("</div>\n");
  709. break;
  710. case 'apply_modify':
  711. $sClass = utils::ReadPostedParam('class', '');
  712. $sClassLabel = MetaModel::GetName($sClass);
  713. $id = utils::ReadPostedParam('id', '');
  714. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  715. if ( empty($sClass) || empty($id)) // TO DO: check that the class name is valid !
  716. {
  717. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'id'));
  718. }
  719. $oObj = $oContext->GetObject($sClass, $id);
  720. if (!utils::IsTransactionValid($sTransactionId))
  721. {
  722. $oP->p("<strong>".Dict::S('UI:Error:ObjectAlreadyUpdated')."</strong>\n");
  723. }
  724. else
  725. {
  726. if ($oObj != null)
  727. {
  728. $oP->set_title(Dict::Format('UI:ModificationPageTitle_Object_Class', $oObj->GetName(), $sClassLabel));
  729. $oP->add("<h1>".Dict::Format('UI:ModificationTitle_Class_Object', $sClassLabel, $oObj->GetName())."</h1>\n");
  730. UpdateObject($oObj);
  731. if (!$oObj->IsModified())
  732. {
  733. $oP->p(Dict::Format('UI:Class_Object_NotUpdated', MetaModel::GetName(get_class($oObj)), $oObj->GetName()));
  734. }
  735. else if ($oObj->CheckToUpdate())
  736. {
  737. $oMyChange = MetaModel::NewObject("CMDBChange");
  738. $oMyChange->Set("date", time());
  739. if (UserRights::GetUser() != UserRights::GetRealUser())
  740. {
  741. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  742. }
  743. else
  744. {
  745. $sUserString = UserRights::GetUser();
  746. }
  747. $oMyChange->Set("userinfo", $sUserString);
  748. $iChangeId = $oMyChange->DBInsert();
  749. $oObj->DBUpdateTracked($oMyChange);
  750. $oP->p(Dict::Format('UI:Class_Object_Updated', MetaModel::GetName(get_class($oObj)), $oObj->GetName()));
  751. }
  752. else
  753. {
  754. $oP->p("<strong>".Dict::S('UI:Error:ObjectCannotBeUpdated')."</strong>\n");
  755. }
  756. }
  757. else
  758. {
  759. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  760. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  761. }
  762. }
  763. $oObj->DisplayDetails($oP);
  764. break;
  765. case 'select_for_deletion':
  766. $sFilter = utils::ReadParam('filter', '');
  767. $sFormat = utils::ReadParam('format', '');
  768. if (empty($sFilter))
  769. {
  770. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'filter'));
  771. }
  772. $oP->set_title(Dict::S('UI:BulkDeletePageTitle'));
  773. $oP->add("<h1>".Dict::S('UI:BulkDeleteTitle')."</h1>\n");
  774. // TO DO: limit the search filter by the user context
  775. $oFilter = CMDBSearchFilter::unserialize($sFilter); // TO DO : check that the filter is valid
  776. $oSet = new DBObjectSet($oFilter);
  777. $oBlock = new DisplayBlock($oFilter, 'list', false);
  778. $oP->add("<form method=\"post\">\n");
  779. $oP->add("<input type=\"hidden\" name=\"operation\" value=\"bulk_delete\">\n");
  780. $oP->add("<input type=\"hidden\" name=\"class\" value=\"".$oFilter->GetClass()."\">\n");
  781. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::GetNewTransactionId()."\">\n");
  782. $oBlock->Display($oP, 1, array('selection_type' => 'multiple', 'selection_mode' => true, 'display_limit' => false, 'menu' => false));
  783. $oP->add("<input type=\"button\" value=\"".Dict::S('UI:Button:Cancel')."\" onClick=\"window.history.back()\">&nbsp;&nbsp;<input type=\"submit\" value=\"".Dict::S('UI:Button:Next')."\">\n");
  784. $oP->add("</form>\n");
  785. break;
  786. case 'bulk_delete_confirmed':
  787. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  788. if (!utils::IsTransactionValid($sTransactionId))
  789. {
  790. throw new ApplicationException(Dict::S('UI:Error:ObjectsAlreadyDeleted'));
  791. }
  792. case 'bulk_delete':
  793. $sClass = utils::ReadPostedParam('class', '');
  794. $sClassLabel = MetaModel::GetName($sClass);
  795. $aSelectObject = utils::ReadPostedParam('selectObject', '');
  796. $aObjects = array();
  797. if ( empty($sClass) || empty($aSelectObject)) // TO DO: check that the class name is valid !
  798. {
  799. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'selectObject[]'));
  800. }
  801. foreach($aSelectObject as $iId)
  802. {
  803. $aObjects[] = $oContext->GetObject($sClass, $iId);
  804. }
  805. if (MetaModel::IsReadOnlyClass($sClass) || !UserRights::IsActionAllowed($sClass, UR_ACTION_BULK_DELETE, DBObjectSet::FromArray($sClass, $aObjects)))
  806. {
  807. throw new SecurityException(Dict::S('UI:Error:BulkDeleteNotAllowedOn_Class'), $sClass);
  808. }
  809. $oP->set_title(Dict::S('UI:BulkDeletePageTitle'));
  810. DeleteObjects($oP, $sClass, $aObjects, ($operation == 'bulk_delete_confirmed'));
  811. break;
  812. case 'delete':
  813. case 'delete_confirmed':
  814. $sClass = utils::ReadParam('class', '');
  815. $sClassLabel = MetaModel::GetName($sClass);
  816. $id = utils::ReadParam('id', '');
  817. $oObj = $oContext->GetObject($sClass, $id);
  818. if (MetaModel::IsReadOnlyClass($sClass) || !UserRights::IsActionAllowed($sClass, UR_ACTION_MODIFY, DBObjectSet::FromObject($oObj)))
  819. {
  820. throw new SecurityException(Dict::S('UI:Error:DeleteNotAllowedOn_Class'), $sClass);
  821. }
  822. DeleteObjects($oP, $sClass, array($oObj), ($operation == 'delete_confirmed'));
  823. break;
  824. case 'apply_clone':
  825. $sClass = utils::ReadPostedParam('class', '');
  826. $sClassLabel = MetaModel::GetName($sClass);
  827. $iCloneId = utils::ReadPostedParam('clone_id', '');
  828. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  829. if (!utils::IsTransactionValid($sTransactionId))
  830. {
  831. $oP->p(Dict::S('UI:Error:ObjectAlreadyCloned'));
  832. }
  833. else
  834. {
  835. $oObj = $oContext->GetObject($sClass, $iCloneId);
  836. $oMyChange = MetaModel::NewObject("CMDBChange");
  837. $oMyChange->Set("date", time());
  838. if (UserRights::GetUser() != UserRights::GetRealUser())
  839. {
  840. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  841. }
  842. else
  843. {
  844. $sUserString = UserRights::GetUser();
  845. }
  846. $oMyChange->Set("userinfo", $sUserString);
  847. $iChangeId = $oMyChange->DBInsert();
  848. $sStateAttCode = MetaModel::GetStateAttributeCode(get_class($oObj));
  849. UpdateObject($oObj);
  850. $oObj->DBCloneTracked($oMyChange);
  851. $oP->set_title(Dict::S('UI:PageTitle:ObjectCreated'));
  852. $oP->add("<h1>".Dict::Format('UI:Title:Object_Of_Class_Created', $oObj->GetName(), $sClassLabel)."</h1>\n");
  853. $oObj->DisplayDetails($oP);
  854. }
  855. break;
  856. case 'apply_new':
  857. $sClass = utils::ReadPostedParam('class', '');
  858. $sClassLabel = MetaModel::GetName($sClass);
  859. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  860. if ( empty($sClass) ) // TO DO: check that the class name is valid !
  861. {
  862. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'class'));
  863. }
  864. if (!utils::IsTransactionValid($sTransactionId))
  865. {
  866. $oP->p("<strong>".Dict::S('UI:Error:ObjectAlreadyCreated')."</strong>\n");
  867. }
  868. else
  869. {
  870. $oObj = MetaModel::NewObject($sClass);
  871. UpdateObject($oObj);
  872. }
  873. if (isset($oObj) && is_object($oObj))
  874. {
  875. $sClass = get_class($oObj);
  876. $sClassLabel = MetaModel::GetName($sClass);
  877. $oMyChange = MetaModel::NewObject("CMDBChange");
  878. $oMyChange->Set("date", time());
  879. if (UserRights::GetUser() != UserRights::GetRealUser())
  880. {
  881. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  882. }
  883. else
  884. {
  885. $sUserString = UserRights::GetUser();
  886. }
  887. $oMyChange->Set("userinfo", $sUserString);
  888. $iChangeId = $oMyChange->DBInsert();
  889. $oObj->DBInsertTracked($oMyChange);
  890. $oP->set_title(Dict::S('UI:PageTitle:ObjectCreated'));
  891. $oP->add("<h1>".Dict::Format('UI:Title:Object_Of_Class_Created', $oObj->GetName(), $sClassLabel)."</h1>\n");
  892. $oObj->DisplayDetails($oP);
  893. }
  894. break;
  895. case 'wizard_apply_new':
  896. $sJson = utils::ReadPostedParam('json_obj', '');
  897. $oWizardHelper = WizardHelper::FromJSON($sJson);
  898. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  899. if (!utils::IsTransactionValid($sTransactionId))
  900. {
  901. $oP->p(Dict::S('UI:Error:ObjectAlreadyCreated'));
  902. }
  903. else
  904. {
  905. $oObj = $oWizardHelper->GetTargetObject(true /* read uploaded files */);
  906. if (is_object($oObj))
  907. {
  908. $sClass = get_class($oObj);
  909. $sClassLabel = MetaModel::GetName($sClass);
  910. $oMyChange = MetaModel::NewObject("CMDBChange");
  911. $oMyChange->Set("date", time());
  912. if (UserRights::GetUser() != UserRights::GetRealUser())
  913. {
  914. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  915. }
  916. else
  917. {
  918. $sUserString = UserRights::GetUser();
  919. }
  920. $oMyChange->Set("userinfo", $sUserString);
  921. $iChangeId = $oMyChange->DBInsert();
  922. $oObj->DBInsertTracked($oMyChange);
  923. $oP->set_title(Dict::S('UI:PageTitle:ObjectCreated'));
  924. $oP->add("<h1>".Dict::Format('UI:Title:Object_Of_Class_Created', $oObj->GetName(), $sClassLabel)."</h1>\n");
  925. $oObj->DisplayDetails($oP);
  926. }
  927. }
  928. break;
  929. case 'stimulus':
  930. $sClass = utils::ReadParam('class', '');
  931. $id = utils::ReadParam('id', '');
  932. $sStimulus = utils::ReadParam('stimulus', '');
  933. if ( empty($sClass) || empty($id) || empty($sStimulus) ) // TO DO: check that the class name is valid !
  934. {
  935. throw new ApplicationException(Dict::Format('UI:Error:3ParametersMissing', 'class', 'id', 'stimulus'));
  936. }
  937. $oObj = $oContext->GetObject($sClass, $id);
  938. if ($oObj != null)
  939. {
  940. $aTransitions = $oObj->EnumTransitions();
  941. $aStimuli = MetaModel::EnumStimuli($sClass);
  942. if (!isset($aTransitions[$sStimulus]))
  943. {
  944. // Invalid stimulus
  945. throw new ApplicationException(Dict::Format('UI:Error:Invalid_Stimulus_On_Object_In_State', $sStimulus, $oObj->GetName(), $oObj->GetStateLabel()));
  946. }
  947. $sActionLabel = $aStimuli[$sStimulus]->GetLabel();
  948. $sActionDetails = $aStimuli[$sStimulus]->GetDescription();
  949. $aTransition = $aTransitions[$sStimulus];
  950. $sTargetState = $aTransition['target_state'];
  951. $aTargetStates = MetaModel::EnumStates($sClass);
  952. $oP->add_linked_script("../js/json.js");
  953. $oP->add_linked_script("../js/forms-json-utils.js");
  954. $oP->add_linked_script("../js/wizardhelper.js");
  955. $oP->add_linked_script("../js/wizard.utils.js");
  956. $oP->add_linked_script("../js/linkswidget.js");
  957. $oP->add_linked_script("../js/jquery.blockUI.js");
  958. $oP->add("<div class=\"page_header\">\n");
  959. $oP->add("<h1>$sActionLabel - <span class=\"hilite\">{$oObj->GetName()}</span></h1>\n");
  960. $oP->set_title($sActionLabel);
  961. $oP->add("</div>\n");
  962. $oObj->DisplayBareProperties($oP);
  963. $aTargetState = $aTargetStates[$sTargetState];
  964. $aExpectedAttributes = $aTargetState['attribute_list'];
  965. $oP->add("<h1>$sActionDetails</h1>\n");
  966. $oP->add("<div class=\"wizContainer\">\n");
  967. $oP->add("<form id=\"apply_stimulus\" method=\"post\" onSubmit=\"return CheckFields('apply_stimulus', true);\">\n");
  968. $aDetails = array();
  969. $iFieldIndex = 0;
  970. $aFieldsMap = array();
  971. foreach($aExpectedAttributes as $sAttCode => $iExpectCode)
  972. {
  973. // Prompt for an attribute if
  974. // - the attribute must be changed or must be displayed to the user for confirmation
  975. // - or the field is mandatory and currently empty
  976. if ( ($iExpectCode & (OPT_ATT_MUSTCHANGE | OPT_ATT_MUSTPROMPT)) ||
  977. (($iExpectCode & OPT_ATT_MANDATORY) && ($oObj->Get($sAttCode) == '')) )
  978. {
  979. $aAttributesDef = MetaModel::ListAttributeDefs($sClass);
  980. $oAttDef = $aAttributesDef[$sAttCode];
  981. $aArgs = array('this' => $oObj);
  982. $sHTMLValue = cmdbAbstractObject::GetFormElementForField($oP, $sClass, $sAttCode, $oAttDef, $oObj->Get($sAttCode), $oObj->GetEditValue($sAttCode), 'att_'.$iFieldIndex, '', $iExpectCode, $aArgs);
  983. $aDetails[] = array('label' => $oAttDef->GetLabel(), 'value' => "<span id=\"field_att_$iFieldIndex\">$sHTMLValue</span>");
  984. $aFieldsMap[$sAttCode] = 'att_'.$iFieldIndex;
  985. $iFieldIndex++;
  986. }
  987. }
  988. $oP->details($aDetails);
  989. $oP->add("<input type=\"hidden\" name=\"id\" value=\"$id\" id=\"id\">\n");
  990. $aFieldsMap['id'] = 'id';
  991. $oP->add("<input type=\"hidden\" name=\"class\" value=\"$sClass\">\n");
  992. $oP->add("<input type=\"hidden\" name=\"operation\" value=\"apply_stimulus\">\n");
  993. $oP->add("<input type=\"hidden\" name=\"stimulus\" value=\"$sStimulus\">\n");
  994. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::GetNewTransactionId()."\">\n");
  995. $oP->add($oAppContext->GetForForm());
  996. $oP->add("<button type=\"button\" class=\"action\" onClick=\"BackToDetails('$sClass', $id)\"><span>".Dict::S('UI:Button:Cancel')."</span></button>&nbsp;&nbsp;&nbsp;&nbsp;\n");
  997. $oP->add("<button type=\"submit\" class=\"action\"><span>$sActionLabel</span></button>\n");
  998. $oP->add("</form>\n");
  999. $oP->add("</div>\n");
  1000. $iFieldsCount = count($aFieldsMap);
  1001. $sJsonFieldsMap = json_encode($aFieldsMap);
  1002. $oP->add_script(
  1003. <<<EOF
  1004. // Initializes the object once at the beginning of the page...
  1005. var oWizardHelper = new WizardHelper('$sClass');
  1006. oWizardHelper.SetFieldsMap($sJsonFieldsMap);
  1007. oWizardHelper.SetFieldsCount($iFieldsCount);
  1008. EOF
  1009. );
  1010. }
  1011. else
  1012. {
  1013. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  1014. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  1015. }
  1016. break;
  1017. case 'apply_stimulus':
  1018. $sClass = utils::ReadPostedParam('class', '');
  1019. $id = utils::ReadPostedParam('id', '');
  1020. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  1021. $sStimulus = utils::ReadPostedParam('stimulus', '');
  1022. if ( empty($sClass) || empty($id) || empty($sStimulus) ) // TO DO: check that the class name is valid !
  1023. {
  1024. throw new ApplicationException(Dict::Format('UI:Error:3ParametersMissing', 'class', 'id', 'stimulus'));
  1025. }
  1026. $oObj = $oContext->GetObject($sClass, $id);
  1027. if ($oObj != null)
  1028. {
  1029. $aTransitions = $oObj->EnumTransitions();
  1030. $aStimuli = MetaModel::EnumStimuli($sClass);
  1031. if (!isset($aTransitions[$sStimulus]))
  1032. {
  1033. throw new ApplicationException(Dict::Format('UI:Error:Invalid_Stimulus_On_Object_In_State', $sStimulus, $oObj->GetName(), $oObj->GetStateLabel()));
  1034. }
  1035. if (!utils::IsTransactionValid($sTransactionId))
  1036. {
  1037. $oP->p(Dict::S('UI:Error:ObjectAlreadyUpdated'));
  1038. }
  1039. else
  1040. {
  1041. $sActionLabel = $aStimuli[$sStimulus]->GetLabel();
  1042. $sActionDetails = $aStimuli[$sStimulus]->GetDescription();
  1043. $aTransition = $aTransitions[$sStimulus];
  1044. $sTargetState = $aTransition['target_state'];
  1045. $aTargetStates = MetaModel::EnumStates($sClass);
  1046. $oP->add("<div class=\"page_header\">\n");
  1047. $oP->add("<h1>$sActionLabel - <span class=\"hilite\">{$oObj->GetName()}</span></h1>\n");
  1048. $oP->add("<p>$sActionDetails</p>\n");
  1049. $oP->p(Dict::Format('UI:Apply_Stimulus_On_Object_In_State_ToTarget_State', $sActionLabel, $oObj->GetName(), $oObj->GetStateLabel(), $sTargetState));
  1050. $oP->add("</div>\n");
  1051. $aTargetState = $aTargetStates[$sTargetState];
  1052. $aExpectedAttributes = $aTargetState['attribute_list'];
  1053. $aDetails = array();
  1054. foreach($aExpectedAttributes as $sAttCode => $iExpectCode)
  1055. {
  1056. if (($iExpectCode & (OPT_ATT_MUSTCHANGE|OPT_ATT_MUSTPROMPT)) || ($oObj->Get($sAttCode) == '') )
  1057. {
  1058. $paramValue = utils::ReadPostedParam("attr_$sAttCode", '');
  1059. $oObj->Set($sAttCode, $paramValue);
  1060. }
  1061. }
  1062. if ($oObj->ApplyStimulus($sStimulus) && $oObj->CheckToUpdate())
  1063. {
  1064. $oMyChange = MetaModel::NewObject("CMDBChange");
  1065. $oMyChange->Set("date", time());
  1066. if (UserRights::GetUser() != UserRights::GetRealUser())
  1067. {
  1068. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  1069. }
  1070. else
  1071. {
  1072. $sUserString = UserRights::GetUser();
  1073. }
  1074. $oMyChange->Set("userinfo", $sUserString);
  1075. $iChangeId = $oMyChange->DBInsert();
  1076. $oObj->DBUpdateTracked($oMyChange);
  1077. $oP->p(Dict::Format('UI:Class_Object_Updated', get_class($oObj), $oObj->GetName()));
  1078. }
  1079. }
  1080. $oObj->DisplayDetails($oP);
  1081. }
  1082. else
  1083. {
  1084. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  1085. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  1086. }
  1087. break;
  1088. case 'modify_links':
  1089. $sClass = utils::ReadParam('class', '');
  1090. $sLinkAttr = utils::ReadParam('link_attr', '');
  1091. $sTargetClass = utils::ReadParam('target_class', '');
  1092. $id = utils::ReadParam('id', '');
  1093. $bAddObjects = utils::ReadParam('addObjects', false);
  1094. if ( empty($sClass) || empty($id) || empty($sLinkAttr) || empty($sTargetClass)) // TO DO: check that the class name is valid !
  1095. {
  1096. throw new ApplicationException(Dict::Format('UI:Error:4ParametersMissing', 'class', 'id', 'target_class', 'link_attr'));
  1097. }
  1098. require_once('../application/uilinkswizard.class.inc.php');
  1099. $oWizard = new UILinksWizard($sClass, $sLinkAttr, $id, $sTargetClass);
  1100. $oWizard->Display($oP, $oContext, array('StartWithAdd' => $bAddObjects));
  1101. break;
  1102. case 'do_modify_links':
  1103. $aLinks = utils::ReadParam('linkId', array(), 'post');
  1104. $sLinksToRemove = trim(utils::ReadParam('linksToRemove', '', 'post'));
  1105. $aLinksToRemove = array();
  1106. if (!empty($sLinksToRemove))
  1107. {
  1108. $aLinksToRemove = explode(' ', trim($sLinksToRemove));
  1109. }
  1110. $sClass = utils::ReadParam('class', '', 'post');
  1111. $sLinkageAtt = utils::ReadParam('linkage', '', 'post');
  1112. $iObjectId = utils::ReadParam('object_id', '', 'post');
  1113. $sLinkingAttCode = utils::ReadParam('linking_attcode', '', 'post');
  1114. $oMyChange = MetaModel::NewObject("CMDBChange");
  1115. $oMyChange->Set("date", time());
  1116. if (UserRights::GetUser() != UserRights::GetRealUser())
  1117. {
  1118. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  1119. }
  1120. else
  1121. {
  1122. $sUserString = UserRights::GetUser();
  1123. }
  1124. $oMyChange->Set("userinfo", $sUserString);
  1125. $iChangeId = $oMyChange->DBInsert();
  1126. // Delete links that are to be deleted
  1127. foreach($aLinksToRemove as $iLinkId)
  1128. {
  1129. if ($iLinkId > 0) // Negative IDs are objects that were not even created
  1130. {
  1131. $oLink = $oContext->GetObject($sClass, $iLinkId);
  1132. $oLink->DBDeleteTracked($oMyChange);
  1133. }
  1134. }
  1135. $aEditableFields = array();
  1136. $aData = array();
  1137. foreach(MetaModel::GetAttributesList($sClass) as $sAttCode)
  1138. {
  1139. $oAttDef = MetaModel::GetAttributeDef($sClass, $sAttCode);
  1140. if ( (!$oAttDef->IsExternalKey()) && (!$oAttDef->IsExternalField()))
  1141. {
  1142. $aEditableFields[] = $sAttCode;
  1143. $aData[$sAttCode] = utils::ReadParam('attr_'.$sAttCode, array(), 'post');
  1144. }
  1145. }
  1146. // Update existing links or create new links
  1147. foreach($aLinks as $iLinkId)
  1148. {
  1149. if ($iLinkId > 0)
  1150. {
  1151. // This is an existing link to be modified
  1152. $oLink = $oContext->GetObject($sClass, $iLinkId);
  1153. // Update all the attributes of the link
  1154. foreach($aEditableFields as $sAttCode)
  1155. {
  1156. $value = $aData[$sAttCode][$iLinkId];
  1157. $oLink->Set($sAttCode, $value);
  1158. }
  1159. if ($oLink->IsModified())
  1160. {
  1161. $oLink->DBUpdateTracked($oMyChange);
  1162. }
  1163. //echo "Updated link:<br/>\n";
  1164. //var_dump($oLink);
  1165. }
  1166. else
  1167. {
  1168. // A new link must be created
  1169. $oLink = MetaModel::NewObject($sClass);
  1170. $oLinkedObjectId = -$iLinkId;
  1171. // Set all the attributes of the link
  1172. foreach($aEditableFields as $sAttCode)
  1173. {
  1174. $value = $aData[$sAttCode][$iLinkId];
  1175. $oLink->Set($sAttCode, $value);
  1176. }
  1177. // And the two external keys
  1178. $oLink->Set($sLinkageAtt, $iObjectId);
  1179. $oLink->Set($sLinkingAttCode, $oLinkedObjectId);
  1180. // then save it
  1181. //echo "Created link:<br/>\n";
  1182. //var_dump($oLink);
  1183. $oLink->DBInsertTracked($oMyChange);
  1184. }
  1185. }
  1186. // Display again the details of the linked object
  1187. $oAttDef = MetaModel::GetAttributeDef($sClass, $sLinkageAtt);
  1188. $sTargetClass = $oAttDef->GetTargetClass();
  1189. $oObj = $oContext->GetObject($sTargetClass, $iObjectId);
  1190. $oSearch = $oContext->NewFilter(get_class($oObj));
  1191. $oBlock = new DisplayBlock($oSearch, 'search', false);
  1192. $oBlock->Display($oP, 0);
  1193. $oObj->DisplayDetails($oP);
  1194. break;
  1195. case 'swf_navigator':
  1196. $sClass = utils::ReadParam('class', '');
  1197. $id = utils::ReadParam('id', 0);
  1198. $sRelation = utils::ReadParam('relation', 'neighbours');
  1199. $width = 1000;
  1200. $height = 700;
  1201. $sParams = "pWidth=$width&pHeight=$height&drillUrl=".urlencode('../pages/UI.php?operation=details')."&displayController=false&xmlUrl=".urlencode("./xml.navigator.php")."&obj_class=$sClass&obj_id=$id&relation=$sRelation";
  1202. $oP->add("<object classid=\"clsid:d27cdb6e-ae6d-11cf-96b8-444553540000\" codebase=\"http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0\" width=\"$width\" height=\"$height\" id=\"navigator\" align=\"middle\">
  1203. <param name=\"allowScriptAccess\" value=\"sameDomain\" />
  1204. <param name=\"allowFullScreen\" value=\"false\" />
  1205. <param name=\"FlashVars\" value=\"$sParams\" />
  1206. <param name=\"movie\" value=\"../navigator/navigator.swf\" /><param name=\"quality\" value=\"high\" /><param name=\"bgcolor\" value=\"#ffffff\" />
  1207. <embed src=\"../navigator/navigator.swf\" flashVars=\"$sParams\" quality=\"high\" bgcolor=\"#ffffff\" width=\"$width\" height=\"$height\" name=\"navigator\" align=\"middle\" allowScriptAccess=\"sameDomain\" allowFullScreen=\"false\" type=\"application/x-shockwave-flash\" pluginspage=\"http://www.adobe.com/go/getflashplayer\" />
  1208. </object>\n");
  1209. break;
  1210. default:
  1211. $oMenuNode = ApplicationMenu::GetMenuNode(ApplicationMenu::GetActiveNodeId());
  1212. if (is_object($oMenuNode))
  1213. {
  1214. $oMenuNode->RenderContent($oP, $oAppContext->GetAsHash());
  1215. $oP->set_title($oMenuNode->GetLabel());
  1216. }
  1217. }
  1218. ////MetaModel::ShowQueryTrace();
  1219. $oP->output();
  1220. }
  1221. catch(CoreException $e)
  1222. {
  1223. require_once('../setup/setuppage.class.inc.php');
  1224. $oP = new SetupWebPage(Dict::S('UI:PageTitle:FatalError'));
  1225. $oP->add("<h1>".Dict::S('UI:FatalErrorMessage')."</h1>\n");
  1226. $oP->error(Dict::Format('UI:Error_Details', $e->getHtmlDesc()));
  1227. $oP->output();
  1228. if (MetaModel::IsLogEnabledIssue())
  1229. {
  1230. if (MetaModel::IsValidClass('EventIssue'))
  1231. {
  1232. $oLog = new EventIssue();
  1233. $oLog->Set('message', $e->getMessage());
  1234. $oLog->Set('userinfo', '');
  1235. $oLog->Set('issue', $e->GetIssue());
  1236. $oLog->Set('impact', 'Page could not be displayed');
  1237. $oLog->Set('callstack', $e->getTrace());
  1238. $oLog->Set('data', $e->getContextData());
  1239. $oLog->DBInsertNoReload();
  1240. }
  1241. IssueLog::Error($e->getMessage());
  1242. }
  1243. // For debugging only
  1244. //throw $e;
  1245. }
  1246. catch(Exception $e)
  1247. {
  1248. require_once('../setup/setuppage.class.inc.php');
  1249. $oP = new SetupWebPage(Dict::S('UI:PageTitle:FatalError'));
  1250. $oP->add("<h1>".Dict::S('UI:FatalErrorMessage')."</h1>\n");
  1251. $oP->error(Dict::Format('UI:Error_Details', $e->getMessage()));
  1252. $oP->output();
  1253. if (MetaModel::IsLogEnabledIssue())
  1254. {
  1255. if (MetaModel::IsValidClass('EventIssue'))
  1256. {
  1257. $oLog = new EventIssue();
  1258. $oLog->Set('message', $e->getMessage());
  1259. $oLog->Set('userinfo', '');
  1260. $oLog->Set('issue', 'PHP Exception');
  1261. $oLog->Set('impact', 'Page could not be displayed');
  1262. $oLog->Set('callstack', $e->getTrace());
  1263. $oLog->Set('data', array());
  1264. $oLog->DBInsertNoReload();
  1265. }
  1266. IssueLog::Error($e->getMessage());
  1267. }
  1268. }
  1269. ?>