UI.php 51 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398
  1. <?php
  2. // Copyright (C) 2010 Combodo SARL
  3. //
  4. // This program is free software; you can redistribute it and/or modify
  5. // it under the terms of the GNU General Public License as published by
  6. // the Free Software Foundation; version 3 of the License.
  7. //
  8. // This program is distributed in the hope that it will be useful,
  9. // but WITHOUT ANY WARRANTY; without even the implied warranty of
  10. // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  11. // GNU General Public License for more details.
  12. //
  13. // You should have received a copy of the GNU General Public License
  14. // along with this program; if not, write to the Free Software
  15. // Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  16. /**
  17. * Main page of iTop
  18. *
  19. * @author Erwan Taloc <erwan.taloc@combodo.com>
  20. * @author Romain Quetiez <romain.quetiez@combodo.com>
  21. * @author Denis Flaven <denis.flaven@combodo.com>
  22. * @license http://www.opensource.org/licenses/gpl-3.0.html LGPL
  23. */
  24. /**
  25. * Perform all the needed checks to delete one (or more) objects
  26. */
  27. function DeleteObjects(WebPage $oP, $sClass, $aObjects, $bDeleteConfirmed)
  28. {
  29. $bFoundManual = false;
  30. $bFoundStopper = false;
  31. $iTotalDelete = 0; // count of object that must be deleted
  32. $iTotalReset = 0; // count of object for which an ext key will be reset (to 0)
  33. $aTotalDeletedObjs = array();
  34. $aTotalResetedObjs = array();
  35. foreach($aObjects as $oObj)
  36. {
  37. // Evaluate the impact on the DB integrity
  38. //
  39. list ($aDeletedObjs, $aResetedObjs) = $oObj->GetDeletionScheme();
  40. // Evaluate feasibility (user access control)
  41. //
  42. foreach ($aDeletedObjs as $sRemoteClass => $aDeletes)
  43. {
  44. $iTotalDelete += count($aDeletes);
  45. foreach ($aDeletes as $iId => $aData)
  46. {
  47. $oToDelete = $aData['to_delete'];
  48. $bDeleteAllowed = UserRights::IsActionAllowed($sClass, UR_ACTION_DELETE, DBObjectSet::FromObject($oToDelete)) && !MetaModel::IsReadOnlyClass($sClass);
  49. $aTotalDeletedObjs[$sRemoteClass][$iId]['auto_delete'] = $aData['auto_delete'];
  50. if (!$bDeleteAllowed)
  51. {
  52. $aTotalDeletedObjs[$sRemoteClass][$iId]['issue'] = Dict::S('UI:Delete:NotAllowedToDelete');
  53. $bFoundStopper = true;
  54. }
  55. else
  56. {
  57. $aTotalDeletedObjs[$sRemoteClass][$iId]['to_delete'] = $oToDelete;
  58. }
  59. $bAutoDel = $aData['auto_delete'];
  60. if (!$bAutoDel)
  61. {
  62. $bFoundManual = true;
  63. }
  64. }
  65. }
  66. foreach ($aResetedObjs as $sRemoteClass => $aToReset)
  67. {
  68. $iTotalReset += count($aToReset);
  69. foreach ($aToReset as $iId => $aData)
  70. {
  71. $oToReset = $aData['to_reset'];
  72. $aExtKeyLabels = array();
  73. $aForbiddenKeys = array(); // keys on which the current user is not allowed to write
  74. foreach ($aData['attributes'] as $sRemoteExtKey => $aRemoteAttDef)
  75. {
  76. $bUpdateAllowed = UserRights::IsActionAllowedOnAttribute($sClass, $sRemoteExtKey, UR_ACTION_MODIFY, DBObjectSet::FromObject($oToReset));
  77. if (!$bUpdateAllowed)
  78. {
  79. $bFoundStopper = true;
  80. $aForbiddenKeys[] = $aRemoteAttDef->GetLabel();
  81. }
  82. $aExtKeyLabels[] = $aRemoteAttDef->GetLabel();
  83. }
  84. $aResetedObjs[$sRemoteClass][$iId]['attributes_list'] = implode(', ', $aExtKeyLabels);
  85. $aTotalResetedObjs[$sRemoteClass][$iId]['attributes_list'] = $aResetedObjs[$sRemoteClass][$iId]['attributes_list'];
  86. if (count($aForbiddenKeys) > 0)
  87. {
  88. $aTotalResetedObjs[$sRemoteClass][$iId]['issue'] = Dict::Format('UI:Delete:NotAllowedToUpdate_Fields',implode(', ', $aForbiddenKeys));
  89. }
  90. else
  91. {
  92. $aTotalResetedObjs[$sRemoteClass][$iId]['to_reset'] = $oToReset;
  93. }
  94. }
  95. }
  96. // Count of dependent objects (+ the current one)
  97. $iTotalTargets = $iTotalDelete + $iTotalReset;
  98. }
  99. if ($bDeleteConfirmed)
  100. {
  101. if (count($aObjects) == 1)
  102. {
  103. $oObj = $aObjects[0];
  104. $oP->add("<h1>".Dict::Format('UI:Title:DeletionOf_Object', $oObj->GetName())."</h1>\n");
  105. }
  106. else
  107. {
  108. $oP->add("<h1>".Dict::Format('UI:Title:BulkDeletionOf_Count_ObjectsOf_Class', count($aObjects), MetaModel::GetName($sClass))."</h1>\n");
  109. }
  110. // Security - do not allow the user to force a forbidden delete by the mean of page arguments...
  111. if ($bFoundStopper)
  112. {
  113. throw new SecurityException(Dict::S('UI:Error:NotEnoughRightsToDelete'));
  114. }
  115. if ($bFoundManual)
  116. {
  117. throw new SecurityException(Dict::S('UI:Error:CannotDeleteBecauseOfDepencies'));
  118. }
  119. // Prepare the change reporting
  120. //
  121. $oMyChange = MetaModel::NewObject("CMDBChange");
  122. $oMyChange->Set("date", time());
  123. if (UserRights::GetUser() != UserRights::GetRealUser())
  124. {
  125. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  126. }
  127. else
  128. {
  129. $sUserString = UserRights::GetUser();
  130. }
  131. $oMyChange->Set("userinfo", $sUserString);
  132. $oMyChange->DBInsert();
  133. // Delete dependencies
  134. //
  135. $aDisplayData = array();
  136. foreach ($aTotalDeletedObjs as $sRemoteClass => $aDeletes)
  137. {
  138. foreach ($aDeletes as $iId => $aData)
  139. {
  140. $oToDelete = $aData['to_delete'];
  141. $aDisplayData[] = array(
  142. 'class' => MetaModel::GetName(get_class($oToDelete)),
  143. 'object' => $oToDelete->GetHyperLink(),
  144. 'consequence' => Dict::S('UI:Delete:AutomaticallyDeleted'),
  145. );
  146. $oToDelete->DBDeleteTracked($oMyChange);
  147. }
  148. }
  149. // Update dependencies
  150. //
  151. foreach ($aTotalResetedObjs as $sRemoteClass => $aToReset)
  152. {
  153. foreach ($aToReset as $iId => $aData)
  154. {
  155. $oToReset = $aData['to_reset'];
  156. $aDisplayData[] = array(
  157. 'class' => MetaModel::GetName(get_class($oToReset)),
  158. 'object' => $oToReset->GetHyperLink(),
  159. 'consequence' => Dict::Format('UI:Delete:AutomaticResetOf_Fields', $aData['attributes_list']),
  160. );
  161. foreach ($aData['attributes'] as $sRemoteExtKey => $aRemoteAttDef)
  162. {
  163. $oToReset->Set($sRemoteExtKey, 0);
  164. $oToReset->DBUpdateTracked($oMyChange);
  165. }
  166. }
  167. }
  168. // Report automatic jobs
  169. //
  170. if ($iTotalTargets > 0)
  171. {
  172. if (count($aObjects) == 1)
  173. {
  174. $oObj = $aObjects[0];
  175. $oP->p(Dict::Format('UI:Delete:CleaningUpRefencesTo_Object', $oObj->GetName()));
  176. }
  177. else
  178. {
  179. $oP->p(Dict::Format('UI:Delete:CleaningUpRefencesTo_Several_ObjectsOf_Class', count($aObjects), MetaModel::GetName($sClass)));
  180. }
  181. $aDisplayConfig = array();
  182. $aDisplayConfig['class'] = array('label' => 'Class', 'description' => '');
  183. $aDisplayConfig['object'] = array('label' => 'Object', 'description' => '');
  184. $aDisplayConfig['consequence'] = array('label' => 'Done', 'description' => Dict::S('UI:Delete:Done+'));
  185. $oP->table($aDisplayConfig, $aDisplayData);
  186. }
  187. foreach($aObjects as $oObj)
  188. {
  189. $sName = $oObj->GetName();
  190. $sClassLabel = MetaModel::GetName(get_class($oObj));
  191. $oObj->DBDeleteTracked($oMyChange);
  192. $oP->add("<h1>".Dict::Format('UI:Delete:_Name_Class_Deleted', $sName, $sClassLabel)."</h1>\n");
  193. }
  194. }
  195. else
  196. {
  197. if (count($aObjects) == 1)
  198. {
  199. $oObj = $aObjects[0];
  200. $oP->add("<h1>".Dict::Format('UI:Delete:ConfirmDeletionOf_Name', $oObj->GetName())."</h1>\n");
  201. }
  202. else
  203. {
  204. $oP->add("<h1>".Dict::Format('UI:Delete:ConfirmDeletionOf_Count_ObjectsOf_Class', count($aObjects), MetaModel::GetName($sClass))."</h1>\n");
  205. }
  206. // Explain what should be done
  207. //
  208. $aDisplayData = array();
  209. foreach ($aTotalDeletedObjs as $sRemoteClass => $aDeletes)
  210. {
  211. foreach ($aDeletes as $iId => $aData)
  212. {
  213. $oToDelete = $aData['to_delete'];
  214. $bAutoDel = $aData['auto_delete'];
  215. if (array_key_exists('issue', $aData))
  216. {
  217. if ($bAutoDel)
  218. {
  219. $sConsequence = Dict::S('UI:Delete:ShouldBeDeletedAtomaticallyButNotAllowed');
  220. }
  221. else
  222. {
  223. $sConsequence = Dict::S('UI:Delete:MustBeDeletedManuallyButNotAllowed');
  224. }
  225. }
  226. else
  227. {
  228. if ($bAutoDel)
  229. {
  230. $sConsequence = Dict::S('UI:Delete:WillBeDeletedAutomatically');
  231. }
  232. else
  233. {
  234. $sConsequence = Dict::S('UI:Delete:MustBeDeletedManually');
  235. }
  236. }
  237. $aDisplayData[] = array(
  238. 'class' => MetaModel::GetName(get_class($oToDelete)),
  239. 'object' => $oToDelete->GetHyperLink(),
  240. 'consequence' => $sConsequence,
  241. );
  242. }
  243. }
  244. foreach ($aTotalResetedObjs as $sRemoteClass => $aToReset)
  245. {
  246. foreach ($aToReset as $iId => $aData)
  247. {
  248. $oToReset = $aData['to_reset'];
  249. if (array_key_exists('issue', $aData))
  250. {
  251. $sConsequence = Dict::Format('UI:Delete:CannotUpdateBecause_Issue', $aData['issue']);
  252. }
  253. else
  254. {
  255. $sConsequence = Dict::Format('UI:Delete:WillAutomaticallyUpdate_Fields', $aData['attributes_list']);
  256. }
  257. $aDisplayData[] = array(
  258. 'class' => MetaModel::GetName(get_class($oToReset)),
  259. 'object' => $oToReset->GetHyperLink(),
  260. 'consequence' => $sConsequence,
  261. );
  262. }
  263. }
  264. if ($iTotalTargets > 0)
  265. {
  266. if (count($aObjects) == 1)
  267. {
  268. $oObj = $aObjects[0];
  269. $oP->p(Dict::Format('UI:Delete:Count_Objects/LinksReferencing_Object', $iTotalTargets, $oObj->GetName()));
  270. }
  271. else
  272. {
  273. $oP->p(Dict::Format('UI:Delete:Count_Objects/LinksReferencingTheObjects', $iTotalTargets));
  274. }
  275. $oP->p(Dict::S('UI:Delete:ReferencesMustBeDeletedToEnsureIntegrity'));
  276. $aDisplayConfig = array();
  277. $aDisplayConfig['class'] = array('label' => 'Class', 'description' => '');
  278. $aDisplayConfig['object'] = array('label' => 'Object', 'description' => '');
  279. $aDisplayConfig['consequence'] = array('label' => 'Consequence', 'description' => Dict::S('UI:Delete:Consequence+'));
  280. $oP->table($aDisplayConfig, $aDisplayData);
  281. }
  282. if ($iTotalTargets > 0 && ($bFoundManual || $bFoundStopper))
  283. {
  284. if ($bFoundStopper)
  285. {
  286. $oP->p(Dict::S('UI:Delete:SorryDeletionNotAllowed'));
  287. }
  288. elseif ($bFoundManual)
  289. {
  290. $oP->p(Dict::S('UI:Delete:PleaseDoTheManualOperations'));
  291. }
  292. $oP->add("<form method=\"post\">\n");
  293. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::ReadParam('transaction_id')."\">\n");
  294. $oP->add("<input type=\"button\" onclick=\"window.history.back();\" value=\"".Dict::S('UI:Button:Back')."\">\n");
  295. $oP->add("<input DISABLED type=\"submit\" name=\"\" value=\"".Dict::S('UI:Button:Delete')."\">\n");
  296. $oP->add("</form>\n");
  297. }
  298. else
  299. {
  300. if (count($aObjects) == 1)
  301. {
  302. $oObj = $aObjects[0];
  303. $id = $oObj->GetKey();
  304. $oP->p('<h1>'.Dict::Format('UI:Delect:Confirm_Object', $oObj->GetHyperLink()).'</h1>');
  305. $oP->add("<form method=\"post\">\n");
  306. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::ReadParam('transaction_id')."\">\n");
  307. $oP->add("<input type=\"hidden\" name=\"operation\" value=\"delete_confirmed\">\n");
  308. $oP->add("<input type=\"hidden\" name=\"class\" value=\"$sClass\">\n");
  309. $oP->add("<input type=\"hidden\" name=\"id\" value=\"$id\">\n");
  310. $oP->add("<input type=\"button\" onclick=\"window.history.back();\" value=\"".Dict::S('UI:Button:Back')."\">\n");
  311. $oP->add("<input type=\"submit\" name=\"\" value=\"".Dict::S('UI:Button:Delete')."\">\n");
  312. $oP->add("</form>\n");
  313. }
  314. else
  315. {
  316. $oP->p('<h1>'.Dict::Format('UI:Delect:Confirm_Count_ObjectsOf_Class', count($aObjects), MetaModel::GetName($sClass)).'</h1>');
  317. $oSet = CMDBobjectSet::FromArray($sClass, $aObjects);
  318. CMDBAbstractObject::DisplaySet($oP, $oSet, array('display_limit' => false, 'menu' => false));
  319. $oP->add("<form method=\"post\">\n");
  320. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::ReadParam('transaction_id')."\">\n");
  321. $oP->add("<input type=\"hidden\" name=\"operation\" value=\"bulk_delete_confirmed\">\n");
  322. $oP->add("<input type=\"hidden\" name=\"class\" value=\"$sClass\">\n");
  323. foreach($aObjects as $oObj)
  324. {
  325. $oP->add("<input type=\"hidden\" name=\"selectObject[]\" value=\"".$oObj->GetKey()."\">\n");
  326. }
  327. $oP->add("<input type=\"button\" onclick=\"window.history.back();\" value=\"".Dict::S('UI:Button:Back')."\">\n");
  328. $oP->add("<input type=\"submit\" name=\"\" value=\"".Dict::S('UI:Button:Delete')."\">\n");
  329. $oP->add("</form>\n");
  330. }
  331. }
  332. }
  333. }
  334. /***********************************************************************************
  335. *
  336. * Main user interface page, starts here
  337. *
  338. * ***********************************************************************************/
  339. try
  340. {
  341. require_once('../application/application.inc.php');
  342. require_once('../application/itopwebpage.class.inc.php');
  343. require_once('../application/wizardhelper.class.inc.php');
  344. require_once('../application/startup.inc.php');
  345. $oContext = new UserContext();
  346. $oAppContext = new ApplicationContext();
  347. $iActiveNodeId = utils::ReadParam('menu', '');
  348. if (empty($iActiveNodeId) && !is_numeric($iActiveNodeId))
  349. {
  350. // No menu specified, let's get the default one:
  351. // 1) It's a root menu item (parent_id == 0)
  352. // 2) with the lowest rank
  353. $oFilter = DBObjectSearch::FromOQL('SELECT menuNode AS M WHERE M.parent_id = 0');
  354. if ($oFilter)
  355. {
  356. $oMenuSet = new CMDBObjectSet($oFilter);
  357. while($oMenu = $oMenuSet->Fetch())
  358. {
  359. $aRanks[$oMenu->GetKey()] = $oMenu->Get('rank');
  360. }
  361. asort($aRanks); // sort by ascending rank: menuId => rank
  362. $aKeys = array_keys($aRanks);
  363. $iActiveNodeId = array_shift($aKeys); // Takes the first key, i.e. the menuId with the lowest rank
  364. }
  365. }
  366. $currentOrganization = utils::ReadParam('org_id', '');
  367. $operation = utils::ReadParam('operation', '');
  368. require_once('../application/loginwebpage.class.inc.php');
  369. LoginWebPage::DoLogin(); // Check user rights and prompt if needed
  370. $oP = new iTopWebPage(Dict::S('UI:WelcomeToITop'), $currentOrganization);
  371. // From now on the context is limited to the the selected organization ??
  372. if ($iActiveNodeId != -1)
  373. {
  374. $oActiveNode = $oContext->GetObject('menuNode', $iActiveNodeId);
  375. }
  376. else
  377. {
  378. $oActiveNode = null;
  379. }
  380. switch($operation)
  381. {
  382. case 'details':
  383. $sClass = utils::ReadParam('class', '');
  384. $sClassLabel = MetaModel::GetName($sClass);
  385. $id = utils::ReadParam('id', '');
  386. $oSearch = new DBObjectSearch($sClass);
  387. $oBlock = new DisplayBlock($oSearch, 'search', false);
  388. $oBlock->Display($oP, 0);
  389. if ( empty($sClass) || empty($id)) // TO DO: check that the class name is valid !
  390. {
  391. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'id'));
  392. }
  393. $oObj = $oContext->GetObject($sClass, $id);
  394. if ($oObj != null)
  395. {
  396. $oP->set_title(Dict::Format('UI:DetailsPageTitle', $oObj->GetDisplayName(), $sClassLabel));
  397. $oObj->DisplayDetails($oP);
  398. }
  399. else
  400. {
  401. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  402. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  403. }
  404. break;
  405. case 'search_oql':
  406. $sOQLClass = utils::ReadParam('oql_class', '');
  407. $sOQLClause = utils::ReadParam('oql_clause', '');
  408. $sFormat = utils::ReadParam('format', '');
  409. $bSearchForm = utils::ReadParam('search_form', true);
  410. if (empty($sOQLClass))
  411. {
  412. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'oql_class'));
  413. }
  414. $oP->set_title(Dict::S('UI:SearchResultsPageTitle'));
  415. $sOQL = "SELECT $sOQLClass $sOQLClause";
  416. try
  417. {
  418. $oFilter = DBObjectSearch::FromOQL($sOQL); // To Do: Make sure we don't bypass security
  419. $oSet = new DBObjectSet($oFilter);
  420. if ($bSearchForm)
  421. {
  422. $oBlock = new DisplayBlock($oFilter, 'search', false);
  423. $oBlock->Display($oP, 0);
  424. }
  425. if (strtolower($sFormat) == 'csv')
  426. {
  427. $oBlock = new DisplayBlock($oFilter, 'csv', false);
  428. $oBlock->Display($oP, 'csv');
  429. $oPage->add_ready_script(" $('#csv').css('height', '95%');"); // adjust the size of the block
  430. }
  431. else
  432. {
  433. $oBlock = new DisplayBlock($oFilter, 'list', false);
  434. $oBlock->Display($oP, 1);
  435. }
  436. }
  437. catch(CoreException $e)
  438. {
  439. $oFilter = new DBObjectSearch($sOQLClass); // To Do: Make sure we don't bypass security
  440. $oSet = new DBObjectSet($oFilter);
  441. if ($bSearchForm)
  442. {
  443. $oBlock = new DisplayBlock($oFilter, 'search', false);
  444. $oBlock->Display($oP, 0);
  445. }
  446. $oP->P('<b>'.Dict::Format('UI:Error:IncorrectOQLQuery_Message', $e->getHtmlDesc()).'</b>');
  447. }
  448. catch(Exception $e)
  449. {
  450. $oP->P('<b>'.Dict::Format('UI:Error:AnErrorOccuredWhileRunningTheQuery_Message', $e->getMessage()).'</b>');
  451. }
  452. break;
  453. case 'search_form':
  454. $sClass = utils::ReadParam('class', '');
  455. $sFormat = utils::ReadParam('format', 'html');
  456. $bSearchForm = utils::ReadParam('search_form', true);
  457. if (empty($sClass))
  458. {
  459. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'class'));
  460. }
  461. $oP->set_title(Dict::S('UI:SearchResultsPageTitle'));
  462. $oFilter = $oContext->NewFilter($sClass);
  463. $oSet = new DBObjectSet($oFilter);
  464. if ($bSearchForm)
  465. {
  466. $oBlock = new DisplayBlock($oFilter, 'search', false /* Asynchronous */, array('open' => true));
  467. $oBlock->Display($oP, 0);
  468. }
  469. if (strtolower($sFormat) == 'csv')
  470. {
  471. $oBlock = new DisplayBlock($oFilter, 'csv', false);
  472. $oBlock->Display($oP, 1);
  473. $oP->add_ready_script(" $('#csv').css('height', '95%');"); // adjust the size of the block
  474. }
  475. else
  476. {
  477. $oBlock = new DisplayBlock($oFilter, 'list', false);
  478. $oBlock->Display($oP, 1);
  479. }
  480. break;
  481. case 'search':
  482. $sFilter = utils::ReadParam('filter', '');
  483. $sFormat = utils::ReadParam('format', '');
  484. $bSearchForm = utils::ReadParam('search_form', true);
  485. if (empty($sFilter))
  486. {
  487. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'filter'));
  488. }
  489. $oP->set_title(Dict::S('UI:SearchResultsPageTitle'));
  490. // TO DO: limit the search filter by the user context
  491. $oFilter = CMDBSearchFilter::unserialize($sFilter); // TO DO : check that the filter is valid
  492. $oSet = new DBObjectSet($oFilter);
  493. if ($bSearchForm)
  494. {
  495. $oBlock = new DisplayBlock($oFilter, 'search', false);
  496. $oBlock->Display($oP, 0);
  497. }
  498. if (strtolower($sFormat) == 'csv')
  499. {
  500. $oBlock = new DisplayBlock($oFilter, 'csv', false);
  501. $oBlock->Display($oP, 'csv');
  502. $oP->add_ready_script(" $('#csv').css('height', '95%');"); // adjust the size of the block
  503. }
  504. else
  505. {
  506. $oBlock = new DisplayBlock($oFilter, 'list', false);
  507. $oBlock->Display($oP, 1);
  508. }
  509. break;
  510. case 'full_text':
  511. $sFullText = trim(utils::ReadParam('text', ''));
  512. if (empty($sFullText))
  513. {
  514. $oP->p(Dict::S('UI:Search:NoSearch'));
  515. }
  516. else
  517. {
  518. $oP->set_title(Dict::S('UI:SearchResultsPageTitle'));
  519. $oP->p("<h1>".Dict::Format('UI:FullTextSearchTitle_Text', $sFullText)."</h1>");
  520. $iCount = 0;
  521. $iBlock = 0;
  522. // Search in full text mode in all the classes
  523. foreach(MetaModel::GetClasses('bizmodel') as $sClassName)
  524. {
  525. $oFilter = new DBObjectSearch($sClassName);
  526. $oFilter->AddCondition_FullText($sFullText);
  527. $oSet = new DBObjectSet($oFilter);
  528. if ($oSet->Count() > 0)
  529. {
  530. $aLeafs = array();
  531. while($oObj = $oSet->Fetch())
  532. {
  533. if (get_class($oObj) == $sClassName)
  534. {
  535. $aLeafs[] = $oObj->GetKey();
  536. }
  537. }
  538. $oLeafsFilter = new DBObjectSearch($sClassName);
  539. if (count($aLeafs) > 0)
  540. {
  541. $iCount += count($aLeafs);
  542. $oP->add("<div class=\"page_header\">\n");
  543. $oP->add("<h2><span class=\"hilite\">".Dict::Format('UI:Search:Count_ObjectsOf_Class_Found', count($aLeafs), Metamodel::GetName($sClassName))."</h2>\n");
  544. $oP->add("</div>\n");
  545. $oLeafsFilter->AddCondition('id', $aLeafs, 'IN');
  546. $oBlock = new DisplayBlock($oLeafsFilter, 'list', false);
  547. $oBlock->Display($oP, $iBlock++);
  548. }
  549. }
  550. }
  551. if ($iCount == 0)
  552. {
  553. $oP->p(Dict::S('UI:Search:NoObjectFound'));
  554. }
  555. }
  556. break;
  557. case 'modify':
  558. $oP->add_linked_script("../js/json.js");
  559. $oP->add_linked_script("../js/forms-json-utils.js");
  560. $oP->add_linked_script("../js/wizardhelper.js");
  561. $oP->add_linked_script("../js/wizard.utils.js");
  562. $oP->add_linked_script("../js/linkswidget.js");
  563. $oP->add_linked_script("../js/jquery.blockUI.js");
  564. $sClass = utils::ReadParam('class', '');
  565. $sClassLabel = MetaModel::GetName($sClass);
  566. $id = utils::ReadParam('id', '');
  567. if ( empty($sClass) || empty($id)) // TO DO: check that the class name is valid !
  568. {
  569. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'id'));
  570. }
  571. // Check if the user can modify this object
  572. $oSearch = new DBObjectSearch($sClass);
  573. $oSearch->AddCondition('id', $id, '=');
  574. $oSet = new CMDBObjectSet($oSearch);
  575. if ($oSet->Count() > 0)
  576. {
  577. $oObj = $oSet->Fetch();
  578. }
  579. $bIsModifiedAllowed = (UserRights::IsActionAllowed($sClass, UR_ACTION_MODIFY, $oSet) == UR_ALLOWED_YES) && !MetaModel::IsReadOnlyClass($sClass);
  580. $bIsReadAllowed = (UserRights::IsActionAllowed($sClass, UR_ACTION_READ, $oSet) == UR_ALLOWED_YES);
  581. if( ($oObj != null) && ($bIsModifiedAllowed) && ($bIsReadAllowed))
  582. {
  583. $oP->set_title(Dict::Format('UI:ModificationPageTitle_Object_Class', $oObj->GetName(), $sClassLabel));
  584. $oP->add("<div class=\"page_header\">\n");
  585. $oP->add("<h1>".Dict::Format('UI:ModificationTitle_Class_Object', $sClassLabel, $oObj->GetName())."</h1>\n");
  586. $oP->add("</div>\n");
  587. $oP->add("<img src=\"".$oObj->GetIcon()."\" style=\"margin-top:-30px; margin-right:10px; float:right\">\n");
  588. $oP->add("<div class=\"wizContainer\">\n");
  589. $oObj->DisplayModifyForm($oP);
  590. $oP->add("</div>\n");
  591. }
  592. else
  593. {
  594. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  595. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  596. }
  597. break;
  598. case 'clone':
  599. $sClass = utils::ReadParam('class', '');
  600. $sClassLabel = MetaModel::GetName($sClass);
  601. $id = utils::ReadParam('id', '');
  602. if ( empty($sClass) || empty($id)) // TO DO: check that the class name is valid !
  603. {
  604. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'id'));
  605. }
  606. // Check if the user can modify this object
  607. $oSearch = new DBObjectSearch($sClass);
  608. $oSearch->AddCondition('id', $id, '=');
  609. $oSet = new CMDBObjectSet($oSearch);
  610. if ($oSet->Count() > 0)
  611. {
  612. $oObjToClone = $oSet->Fetch();
  613. }
  614. $bIsModifiedAllowed = (UserRights::IsActionAllowed($sClass, UR_ACTION_MODIFY, $oSet) == UR_ALLOWED_YES) && !MetaModel::IsReadOnlyClass($sClass);
  615. $bIsReadAllowed = (UserRights::IsActionAllowed($sClass, UR_ACTION_READ, $oSet) == UR_ALLOWED_YES);
  616. if( ($oObjToClone != null) && ($bIsModifiedAllowed) && ($bIsReadAllowed))
  617. {
  618. $oP->add_linked_script("../js/json.js");
  619. $oP->add_linked_script("../js/forms-json-utils.js");
  620. $oP->add_linked_script("../js/wizardhelper.js");
  621. $oP->add_linked_script("../js/wizard.utils.js");
  622. $oP->add_linked_script("../js/linkswidget.js");
  623. $oP->add_linked_script("../js/jquery.blockUI.js");
  624. $oP->set_title(Dict::Format('UI:ClonePageTitle_Object_Class', $oObj->GetName(), $sClassLabel));
  625. $oP->add("<div class=\"page_header\">\n");
  626. $oP->add("<h1>".Dict::Format('UI:CloneTitle_Class_Object', $sClassLabel, $oObj->GetName())."</h1>\n");
  627. $oP->add("</div>\n");
  628. $oP->add("<img src=\"".$oObjToClone->GetIcon()."\" style=\"margin-top:-30px; margin-right:10px; float:right\">\n");
  629. $oP->add("<div class=\"wizContainer\">\n");
  630. $aDefaults = utils::ReadParam('default', array());
  631. $aContext = $oAppContext->GetAsHash();
  632. foreach($aContext as $key => $value)
  633. {
  634. $aDefaults[$key] = $value;
  635. }
  636. cmdbAbstractObject::DisplayCreationForm($oP, $sClass, $oObjToClone, array( 'default' => $aDefaults));
  637. $oP->add("</div>\n");
  638. }
  639. else
  640. {
  641. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  642. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  643. }
  644. break;
  645. case 'new':
  646. $sClass = utils::ReadParam('class', '');
  647. $sStateCode = utils::ReadParam('state', '');
  648. if ( empty($sClass) )
  649. {
  650. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'class'));
  651. }
  652. $oP->add_linked_script("../js/json.js");
  653. $oP->add_linked_script("../js/forms-json-utils.js");
  654. $oP->add_linked_script("../js/wizardhelper.js");
  655. $oP->add_linked_script("../js/wizard.utils.js");
  656. $oP->add_linked_script("../js/linkswidget.js");
  657. $oP->add_linked_script("../js/jquery.blockUI.js");
  658. $oContext = new UserContext();
  659. $aArgs = array_merge($oAppContext->GetAsHash(), utils::ReadParam('default', array()));
  660. $sClassLabel = MetaModel::GetName($sClass);
  661. $oP->set_title(Dict::Format('UI:CreationPageTitle_Class', $sClassLabel));
  662. $oP->add("<h1>".Dict::Format('UI:CreationTitle_Class', $sClassLabel)."</h1>\n");
  663. $oP->add("<div class=\"wizContainer\">\n");
  664. $oP->add("<img src=\"".MetaModel::GetClassIcon($sClass)."\" style=\"margin-top:-30px; margin-right:10px; float:right\">\n");
  665. $aDefaults = utils::ReadParam('default', array());
  666. $aContext = $oAppContext->GetAsHash();
  667. foreach($aContext as $key => $value)
  668. {
  669. $aDefaults[$key] = $value;
  670. }
  671. cmdbAbstractObject::DisplayCreationForm($oP, $sClass, null /* $oObjToClone */, array('default' => $aDefaults));
  672. $oP->add("</div>\n");
  673. break;
  674. case 'apply_modify':
  675. $sClass = utils::ReadPostedParam('class', '');
  676. $sClassLabel = MetaModel::GetName($sClass);
  677. $id = utils::ReadPostedParam('id', '');
  678. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  679. if ( empty($sClass) || empty($id)) // TO DO: check that the class name is valid !
  680. {
  681. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'id'));
  682. }
  683. $oObj = $oContext->GetObject($sClass, $id);
  684. if (!utils::IsTransactionValid($sTransactionId))
  685. {
  686. $oP->p("<strong>".Dict::S('UI:Error:ObjectAlreadyUpdated')."</strong>\n");
  687. }
  688. else
  689. {
  690. if ($oObj != null)
  691. {
  692. $oP->set_title(Dict::Format('UI:ModificationPageTitle_Object_Class', $oObj->GetName(), $sClassLabel));
  693. $oP->add("<h1>".Dict::Format('UI:ModificationTitle_Class_Object', $sClassLabel, $oObj->GetName())."</h1>\n");
  694. foreach(MetaModel::ListAttributeDefs(get_class($oObj)) as $sAttCode=>$oAttDef)
  695. {
  696. if ($oAttDef->IsLinkSet())
  697. {
  698. // Link set, the data is a set of link objects, encoded in JSON
  699. $aAttributes[$sAttCode] = trim(utils::ReadPostedParam("attr_$sAttCode", ''));
  700. if (!empty($aAttributes[$sAttCode]))
  701. {
  702. $oLinkSet = WizardHelper::ParseJsonSet($oObj, $oAttDef->GetLinkedClass(), $oAttDef->GetExtKeyToMe(), $aAttributes[$sAttCode]);
  703. $oObj->Set($sAttCode, $oLinkSet);
  704. // TO DO: detect a real modification, for now always update !!
  705. }
  706. }
  707. else if (!$oAttDef->IsExternalField())
  708. {
  709. $rawValue = utils::ReadPostedParam("attr_$sAttCode", null);
  710. if (!is_null($rawValue))
  711. {
  712. $aAttributes[$sAttCode] = trim($rawValue);
  713. $previousValue = $oObj->Get($sAttCode);
  714. if ($previousValue !== $aAttributes[$sAttCode])
  715. {
  716. $oObj->Set($sAttCode, $aAttributes[$sAttCode]);
  717. }
  718. }
  719. }
  720. else if ($oAttDef->IsWritable())
  721. {
  722. $iFlags = $oObj->GetAttributeFlags($sAttCode);
  723. if ($iFlags & (OPT_ATT_HIDDEN | OPT_ATT_READONLY))
  724. {
  725. // Non-visible, or read-only attribute, do nothing
  726. }
  727. else if ($oAttDef->GetEditClass() == 'Document')
  728. {
  729. // There should be an uploaded file with the named attr_<attCode>
  730. $oDocument = utils::ReadPostedDocument('file_'.$sAttCode);
  731. if (!$oDocument->IsEmpty())
  732. {
  733. // A new file has been uploaded
  734. $oObj->Set($sAttCode, $oDocument);
  735. }
  736. }
  737. }
  738. }
  739. if (!$oObj->IsModified())
  740. {
  741. $oP->p(Dict::Format('UI:Class_Object_NotUpdated', MetaModel::GetName(get_class($oObj)), $oObj->GetName()));
  742. }
  743. else if ($oObj->CheckToUpdate())
  744. {
  745. $oMyChange = MetaModel::NewObject("CMDBChange");
  746. $oMyChange->Set("date", time());
  747. if (UserRights::GetUser() != UserRights::GetRealUser())
  748. {
  749. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  750. }
  751. else
  752. {
  753. $sUserString = UserRights::GetUser();
  754. }
  755. $oMyChange->Set("userinfo", $sUserString);
  756. $iChangeId = $oMyChange->DBInsert();
  757. $oObj->DBUpdateTracked($oMyChange);
  758. $oP->p(Dict::Format('UI:Class_Object_Updated', MetaModel::GetName(get_class($oObj)), $oObj->GetName()));
  759. }
  760. else
  761. {
  762. $oP->p("<strong>".Dict::S('UI:Error:ObjectCannotBeUpdated')."</strong>\n");
  763. }
  764. }
  765. else
  766. {
  767. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  768. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  769. }
  770. }
  771. $oObj->DisplayDetails($oP);
  772. break;
  773. case 'select_for_deletion':
  774. $sFilter = utils::ReadParam('filter', '');
  775. $sFormat = utils::ReadParam('format', '');
  776. if (empty($sFilter))
  777. {
  778. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'filter'));
  779. }
  780. $oP->set_title(Dict::S('UI:BulkDeletePageTitle'));
  781. $oP->add("<h1>".Dict::S('UI:BulkDeleteTitle')."</h1>\n");
  782. // TO DO: limit the search filter by the user context
  783. $oFilter = CMDBSearchFilter::unserialize($sFilter); // TO DO : check that the filter is valid
  784. $oSet = new DBObjectSet($oFilter);
  785. $oBlock = new DisplayBlock($oFilter, 'list', false);
  786. $oP->add("<form method=\"post\">\n");
  787. $oP->add("<input type=\"hidden\" name=\"operation\" value=\"bulk_delete\">\n");
  788. $oP->add("<input type=\"hidden\" name=\"class\" value=\"".$oFilter->GetClass()."\">\n");
  789. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::GetNewTransactionId()."\">\n");
  790. $oBlock->Display($oP, 1, array('selection_type' => 'multiple', 'selection_mode' => true, 'display_limit' => false, 'menu' => false));
  791. $oP->add("<input type=\"button\" value=\"".Dict::S('UI:Button:Cancel')."\" onClick=\"window.history.back()\">&nbsp;&nbsp;<input type=\"submit\" value=\"".Dict::S('UI:Button:Next')."\">\n");
  792. $oP->add("</form>\n");
  793. break;
  794. case 'bulk_delete_confirmed':
  795. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  796. if (!utils::IsTransactionValid($sTransactionId))
  797. {
  798. throw new ApplicationException(Dict::S('UI:Error:ObjectsAlreadyDeleted'));
  799. }
  800. case 'bulk_delete':
  801. $sClass = utils::ReadPostedParam('class', '');
  802. $sClassLabel = MetaModel::GetName($sClass);
  803. $aSelectObject = utils::ReadPostedParam('selectObject', '');
  804. $aObjects = array();
  805. if ( empty($sClass) || empty($aSelectObject)) // TO DO: check that the class name is valid !
  806. {
  807. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'selectObject[]'));
  808. }
  809. foreach($aSelectObject as $iId)
  810. {
  811. $aObjects[] = $oContext->GetObject($sClass, $iId);
  812. }
  813. if (MetaModel::IsReadOnlyClass($sClass) || !UserRights::IsActionAllowed($sClass, UR_ACTION_BULK_DELETE, DBObjectSet::FromArray($sClass, $aObjects)))
  814. {
  815. throw new SecurityException(Dict::S('UI:Error:BulkDeleteNotAllowedOn_Class'), $sClass);
  816. }
  817. $oP->set_title(Dict::S('UI:BulkDeletePageTitle'));
  818. DeleteObjects($oP, $sClass, $aObjects, ($operation == 'bulk_delete_confirmed'));
  819. break;
  820. case 'delete':
  821. case 'delete_confirmed':
  822. $sClass = utils::ReadParam('class', '');
  823. $sClassLabel = MetaModel::GetName($sClass);
  824. $id = utils::ReadParam('id', '');
  825. $oObj = $oContext->GetObject($sClass, $id);
  826. if (MetaModel::IsReadOnlyClass($sClass) || !UserRights::IsActionAllowed($sClass, UR_ACTION_MODIFY, DBObjectSet::FromObject($oObj)))
  827. {
  828. throw new SecurityException(Dict::S('UI:Error:DeleteNotAllowedOn_Class'), $sClass);
  829. }
  830. DeleteObjects($oP, $sClass, array($oObj), ($operation == 'delete_confirmed'));
  831. break;
  832. case 'apply_clone':
  833. $sClass = utils::ReadPostedParam('class', '');
  834. $sClassLabel = MetaModel::GetName($sClass);
  835. $iCloneId = utils::ReadPostedParam('clone_id', '');
  836. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  837. if (!utils::IsTransactionValid($sTransactionId))
  838. {
  839. $oP->p(Dict::S('UI:Error:ObjectAlreadyCloned'));
  840. }
  841. else
  842. {
  843. $oObj = $oContext->GetObject($sClass, $iCloneId);
  844. $oMyChange = MetaModel::NewObject("CMDBChange");
  845. $oMyChange->Set("date", time());
  846. if (UserRights::GetUser() != UserRights::GetRealUser())
  847. {
  848. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  849. }
  850. else
  851. {
  852. $sUserString = UserRights::GetUser();
  853. }
  854. $oMyChange->Set("userinfo", $sUserString);
  855. $iChangeId = $oMyChange->DBInsert();
  856. $sStateAttCode = MetaModel::GetStateAttributeCode(get_class($oObj));
  857. foreach(MetaModel::ListAttributeDefs($sClass) as $sAttCode=>$oAttDef)
  858. {
  859. if ( ($oAttDef->IsWritable()) )
  860. {
  861. $value = utils::ReadPostedParam('attr_'.$sAttCode, '');
  862. $oObj->Set($sAttCode, $value);
  863. }
  864. }
  865. $oObj->DBCloneTracked($oMyChange);
  866. $oP->set_title(Dict::S('UI:PageTitle:ObjectCreated'));
  867. $oP->add("<h1>".Dict::Format('UI:Title:Object_Of_Class_Created', $oObj->GetName(), $sClassLabel)."</h1>\n");
  868. $oObj->DisplayDetails($oP);
  869. }
  870. break;
  871. case 'apply_new':
  872. $sClass = utils::ReadPostedParam('class', '');
  873. $sClassLabel = MetaModel::GetName($sClass);
  874. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  875. if ( empty($sClass) ) // TO DO: check that the class name is valid !
  876. {
  877. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'class'));
  878. }
  879. if (!utils::IsTransactionValid($sTransactionId))
  880. {
  881. $oP->p("<strong>".Dict::S('UI:Error:ObjectAlreadyCreated')."</strong>\n");
  882. }
  883. else
  884. {
  885. $oObj = MetaModel::NewObject($sClass);
  886. foreach(MetaModel::ListAttributeDefs($sClass) as $sAttCode => $oAttDef)
  887. {
  888. if ($oAttDef->IsLinkSet())
  889. {
  890. // Link set, the data is a set of link objects, encoded in JSON
  891. $aAttributes[$sAttCode] = trim(utils::ReadPostedParam("attr_$sAttCode", ''));
  892. if (!empty($aAttributes[$sAttCode]))
  893. {
  894. $oLinkSet = WizardHelper::ParseJsonSet($oObj, $oAttDef->GetLinkedClass(), $oAttDef->GetExtKeyToMe(), $aAttributes[$sAttCode]);
  895. $oObj->Set($sAttCode, $oLinkSet);
  896. // TO DO: detect a real modification, for now always update !!
  897. }
  898. }
  899. else if (!$oAttDef->IsExternalField())
  900. {
  901. $rawValue = utils::ReadPostedParam("attr_$sAttCode", null);
  902. if (!is_null($rawValue))
  903. {
  904. $aAttributes[$sAttCode] = trim($rawValue);
  905. $previousValue = $oObj->Get($sAttCode);
  906. if ($previousValue !== $aAttributes[$sAttCode])
  907. {
  908. $oObj->Set($sAttCode, $aAttributes[$sAttCode]);
  909. }
  910. }
  911. }
  912. else if ($oAttDef->IsWritable())
  913. {
  914. $iFlags = $oObj->GetAttributeFlags($sAttCode);
  915. if ($iFlags & (OPT_ATT_HIDDEN | OPT_ATT_READONLY))
  916. {
  917. // Non-visible, or read-only attribute, do nothing
  918. }
  919. else if ($oAttDef->GetEditClass() == 'Document')
  920. {
  921. // There should be an uploaded file with the named attr_<attCode>
  922. $oDocument = utils::ReadPostedDocument('file_'.$sAttCode);
  923. if (!$oDocument->IsEmpty())
  924. {
  925. // A new file has been uploaded
  926. $oObj->Set($sAttCode, $oDocument);
  927. }
  928. }
  929. }
  930. }
  931. }
  932. if (is_object($oObj))
  933. {
  934. $sClass = get_class($oObj);
  935. $sClassLabel = MetaModel::GetName($sClass);
  936. $oMyChange = MetaModel::NewObject("CMDBChange");
  937. $oMyChange->Set("date", time());
  938. if (UserRights::GetUser() != UserRights::GetRealUser())
  939. {
  940. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  941. }
  942. else
  943. {
  944. $sUserString = UserRights::GetUser();
  945. }
  946. $oMyChange->Set("userinfo", $sUserString);
  947. $iChangeId = $oMyChange->DBInsert();
  948. $oObj->DBInsertTracked($oMyChange);
  949. $oP->set_title(Dict::S('UI:PageTitle:ObjectCreated'));
  950. $oP->add("<h1>".Dict::Format('UI:Title:Object_Of_Class_Created', $oObj->GetName(), $sClassLabel)."</h1>\n");
  951. $oObj->DisplayDetails($oP);
  952. }
  953. break;
  954. case 'wizard_apply_new':
  955. $sJson = utils::ReadPostedParam('json_obj', '');
  956. $oWizardHelper = WizardHelper::FromJSON($sJson);
  957. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  958. if (!utils::IsTransactionValid($sTransactionId))
  959. {
  960. $oP->p(Dict::S('UI:Error:ObjectAlreadyCreated'));
  961. }
  962. else
  963. {
  964. $oObj = $oWizardHelper->GetTargetObject(true /* read uploaded files */);
  965. if (is_object($oObj))
  966. {
  967. $sClass = get_class($oObj);
  968. $sClassLabel = MetaModel::GetName($sClass);
  969. $oMyChange = MetaModel::NewObject("CMDBChange");
  970. $oMyChange->Set("date", time());
  971. if (UserRights::GetUser() != UserRights::GetRealUser())
  972. {
  973. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  974. }
  975. else
  976. {
  977. $sUserString = UserRights::GetUser();
  978. }
  979. $oMyChange->Set("userinfo", $sUserString);
  980. $iChangeId = $oMyChange->DBInsert();
  981. $oObj->DBInsertTracked($oMyChange);
  982. $oP->set_title(Dict::S('UI:PageTitle:ObjectCreated'));
  983. $oP->add("<h1>".Dict::Format('UI:Title:Object_Of_Class_Created', $oObj->GetName(), $sClassLabel)."</h1>\n");
  984. $oObj->DisplayDetails($oP);
  985. }
  986. }
  987. break;
  988. case 'stimulus':
  989. $sClass = utils::ReadParam('class', '');
  990. $id = utils::ReadParam('id', '');
  991. $sStimulus = utils::ReadParam('stimulus', '');
  992. if ( empty($sClass) || empty($id) || empty($sStimulus) ) // TO DO: check that the class name is valid !
  993. {
  994. throw new ApplicationException(Dict::Format('UI:Error:3ParametersMissing', 'class', 'id', 'stimulus'));
  995. }
  996. $oObj = $oContext->GetObject($sClass, $id);
  997. if ($oObj != null)
  998. {
  999. $aTransitions = $oObj->EnumTransitions();
  1000. $aStimuli = MetaModel::EnumStimuli($sClass);
  1001. if (!isset($aTransitions[$sStimulus]))
  1002. {
  1003. // Invalid stimulus
  1004. throw new ApplicationException(Dict::Format('UI:Error:Invalid_Stimulus_On_Object_In_State', $sStimulus, $oObj->GetName(), $oObj->GetStateLabel()));
  1005. }
  1006. $sActionLabel = $aStimuli[$sStimulus]->GetLabel();
  1007. $sActionDetails = $aStimuli[$sStimulus]->GetDescription();
  1008. $aTransition = $aTransitions[$sStimulus];
  1009. $sTargetState = $aTransition['target_state'];
  1010. $aTargetStates = MetaModel::EnumStates($sClass);
  1011. $oP->add_linked_script("../js/json.js");
  1012. $oP->add_linked_script("../js/forms-json-utils.js");
  1013. $oP->add_linked_script("../js/wizardhelper.js");
  1014. $oP->add_linked_script("../js/wizard.utils.js");
  1015. $oP->add_linked_script("../js/linkswidget.js");
  1016. $oP->add_linked_script("../js/jquery.blockUI.js");
  1017. $oP->add("<div class=\"page_header\">\n");
  1018. $oP->add("<h1>$sActionLabel - <span class=\"hilite\">{$oObj->GetName()}</span></h1>\n");
  1019. $oP->set_title($sActionLabel);
  1020. $oP->add("</div>\n");
  1021. $oObj->DisplayBareProperties($oP);
  1022. $aTargetState = $aTargetStates[$sTargetState];
  1023. $aExpectedAttributes = $aTargetState['attribute_list'];
  1024. $oP->add("<h1>$sActionDetails</h1>\n");
  1025. $oP->add("<div class=\"wizContainer\">\n");
  1026. $oP->add("<form id=\"apply_stimulus\" method=\"post\" onSubmit=\"return CheckFields('apply_stimulus', true);\">\n");
  1027. $aDetails = array();
  1028. $iFieldIndex = 0;
  1029. $aFieldsMap = array();
  1030. foreach($aExpectedAttributes as $sAttCode => $iExpectCode)
  1031. {
  1032. // Prompt for an attribute if
  1033. // - the attribute must be changed or must be displayed to the user for confirmation
  1034. // - or the field is mandatory and currently empty
  1035. if ( ($iExpectCode & (OPT_ATT_MUSTCHANGE | OPT_ATT_MUSTPROMPT)) ||
  1036. (($iExpectCode & OPT_ATT_MANDATORY) && ($oObj->Get($sAttCode) == '')) )
  1037. {
  1038. $aAttributesDef = MetaModel::ListAttributeDefs($sClass);
  1039. $oAttDef = $aAttributesDef[$sAttCode];
  1040. $aArgs = array('this' => $oObj);
  1041. $sHTMLValue = cmdbAbstractObject::GetFormElementForField($oP, $sClass, $sAttCode, $oAttDef, $oObj->Get($sAttCode), $oObj->GetEditValue($sAttCode), 'att_'.$iFieldIndex, '', $iExpectCode, $aArgs);
  1042. $aDetails[] = array('label' => $oAttDef->GetLabel(), 'value' => "<span id=\"field_att_$iFieldIndex\">$sHTMLValue</span>");
  1043. $aFieldsMap[$sAttCode] = 'att_'.$iFieldIndex;
  1044. $iFieldIndex++;
  1045. }
  1046. }
  1047. $oP->details($aDetails);
  1048. $oP->add("<input type=\"hidden\" name=\"id\" value=\"$id\" id=\"id\">\n");
  1049. $aFieldsMap['id'] = 'id';
  1050. $oP->add("<input type=\"hidden\" name=\"class\" value=\"$sClass\">\n");
  1051. $oP->add("<input type=\"hidden\" name=\"operation\" value=\"apply_stimulus\">\n");
  1052. $oP->add("<input type=\"hidden\" name=\"stimulus\" value=\"$sStimulus\">\n");
  1053. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::GetNewTransactionId()."\">\n");
  1054. $oP->add($oAppContext->GetForForm());
  1055. $oP->add("<button type=\"button\" class=\"action\" onClick=\"BackToDetails('$sClass', $id)\"><span>".Dict::S('UI:Button:Cancel')."</span></button>&nbsp;&nbsp;&nbsp;&nbsp;\n");
  1056. $oP->add("<button type=\"submit\" class=\"action\"><span>$sActionLabel</span></button>\n");
  1057. $oP->add("</form>\n");
  1058. $oP->add("</div>\n");
  1059. $iFieldsCount = count($aFieldsMap);
  1060. $sJsonFieldsMap = json_encode($aFieldsMap);
  1061. $oP->add_script(
  1062. <<<EOF
  1063. // Initializes the object once at the beginning of the page...
  1064. var oWizardHelper = new WizardHelper('$sClass');
  1065. oWizardHelper.SetFieldsMap($sJsonFieldsMap);
  1066. oWizardHelper.SetFieldsCount($iFieldsCount);
  1067. EOF
  1068. );
  1069. }
  1070. else
  1071. {
  1072. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  1073. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  1074. }
  1075. break;
  1076. case 'apply_stimulus':
  1077. $sClass = utils::ReadPostedParam('class', '');
  1078. $id = utils::ReadPostedParam('id', '');
  1079. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  1080. $sStimulus = utils::ReadPostedParam('stimulus', '');
  1081. if ( empty($sClass) || empty($id) || empty($sStimulus) ) // TO DO: check that the class name is valid !
  1082. {
  1083. throw new ApplicationException(Dict::Format('UI:Error:3ParametersMissing', 'class', 'id', 'stimulus'));
  1084. }
  1085. $oObj = $oContext->GetObject($sClass, $id);
  1086. if ($oObj != null)
  1087. {
  1088. $aTransitions = $oObj->EnumTransitions();
  1089. $aStimuli = MetaModel::EnumStimuli($sClass);
  1090. if (!isset($aTransitions[$sStimulus]))
  1091. {
  1092. throw new ApplicationException(Dict::Format('UI:Error:Invalid_Stimulus_On_Object_In_State', $sStimulus, $oObj->GetName(), $oObj->GetStateLabel()));
  1093. }
  1094. if (!utils::IsTransactionValid($sTransactionId))
  1095. {
  1096. $oP->p(Dict::S('UI:Error:ObjectAlreadyUpdated'));
  1097. }
  1098. else
  1099. {
  1100. $sActionLabel = $aStimuli[$sStimulus]->GetLabel();
  1101. $sActionDetails = $aStimuli[$sStimulus]->GetDescription();
  1102. $aTransition = $aTransitions[$sStimulus];
  1103. $sTargetState = $aTransition['target_state'];
  1104. $aTargetStates = MetaModel::EnumStates($sClass);
  1105. $oP->add("<div class=\"page_header\">\n");
  1106. $oP->add("<h1>$sActionLabel - <span class=\"hilite\">{$oObj->GetName()}</span></h1>\n");
  1107. $oP->add("<p>$sActionDetails</p>\n");
  1108. $oP->p(Dict::Format('UI:Apply_Stimulus_On_Object_In_State_ToTarget_State', $sActionLabel, $oObj->GetName(), $oObj->GetStateLabel(), $sTargetState));
  1109. $oP->add("</div>\n");
  1110. $aTargetState = $aTargetStates[$sTargetState];
  1111. $aExpectedAttributes = $aTargetState['attribute_list'];
  1112. $aDetails = array();
  1113. foreach($aExpectedAttributes as $sAttCode => $iExpectCode)
  1114. {
  1115. if (($iExpectCode & (OPT_ATT_MUSTCHANGE|OPT_ATT_MUSTPROMPT)) || ($oObj->Get($sAttCode) == '') )
  1116. {
  1117. $paramValue = utils::ReadPostedParam("attr_$sAttCode", '');
  1118. $oObj->Set($sAttCode, $paramValue);
  1119. }
  1120. }
  1121. if ($oObj->ApplyStimulus($sStimulus) && $oObj->CheckToUpdate())
  1122. {
  1123. $oMyChange = MetaModel::NewObject("CMDBChange");
  1124. $oMyChange->Set("date", time());
  1125. if (UserRights::GetUser() != UserRights::GetRealUser())
  1126. {
  1127. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  1128. }
  1129. else
  1130. {
  1131. $sUserString = UserRights::GetUser();
  1132. }
  1133. $oMyChange->Set("userinfo", $sUserString);
  1134. $iChangeId = $oMyChange->DBInsert();
  1135. $oObj->DBUpdateTracked($oMyChange);
  1136. $oP->p(Dict::Format('UI:Class_Object_Updated', get_class($oObj), $oObj->GetName()));
  1137. }
  1138. }
  1139. $oObj->DisplayDetails($oP);
  1140. }
  1141. else
  1142. {
  1143. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  1144. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  1145. }
  1146. break;
  1147. case 'modify_links':
  1148. $sClass = utils::ReadParam('class', '');
  1149. $sLinkAttr = utils::ReadParam('link_attr', '');
  1150. $sTargetClass = utils::ReadParam('target_class', '');
  1151. $id = utils::ReadParam('id', '');
  1152. $bAddObjects = utils::ReadParam('addObjects', false);
  1153. if ( empty($sClass) || empty($id) || empty($sLinkAttr) || empty($sTargetClass)) // TO DO: check that the class name is valid !
  1154. {
  1155. throw new ApplicationException(Dict::Format('UI:Error:4ParametersMissing', 'class', 'id', 'target_class', 'link_attr'));
  1156. }
  1157. require_once('../application/uilinkswizard.class.inc.php');
  1158. $oWizard = new UILinksWizard($sClass, $sLinkAttr, $id, $sTargetClass);
  1159. $oWizard->Display($oP, $oContext, array('StartWithAdd' => $bAddObjects));
  1160. break;
  1161. case 'do_modify_links':
  1162. $aLinks = utils::ReadParam('linkId', array(), 'post');
  1163. $sLinksToRemove = trim(utils::ReadParam('linksToRemove', '', 'post'));
  1164. $aLinksToRemove = array();
  1165. if (!empty($sLinksToRemove))
  1166. {
  1167. $aLinksToRemove = explode(' ', trim($sLinksToRemove));
  1168. }
  1169. $sClass = utils::ReadParam('class', '', 'post');
  1170. $sLinkageAtt = utils::ReadParam('linkage', '', 'post');
  1171. $iObjectId = utils::ReadParam('object_id', '', 'post');
  1172. $sLinkingAttCode = utils::ReadParam('linking_attcode', '', 'post');
  1173. $oMyChange = MetaModel::NewObject("CMDBChange");
  1174. $oMyChange->Set("date", time());
  1175. if (UserRights::GetUser() != UserRights::GetRealUser())
  1176. {
  1177. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  1178. }
  1179. else
  1180. {
  1181. $sUserString = UserRights::GetUser();
  1182. }
  1183. $oMyChange->Set("userinfo", $sUserString);
  1184. $iChangeId = $oMyChange->DBInsert();
  1185. // Delete links that are to be deleted
  1186. foreach($aLinksToRemove as $iLinkId)
  1187. {
  1188. if ($iLinkId > 0) // Negative IDs are objects that were not even created
  1189. {
  1190. $oLink = $oContext->GetObject($sClass, $iLinkId);
  1191. $oLink->DBDeleteTracked($oMyChange);
  1192. }
  1193. }
  1194. $aEditableFields = array();
  1195. $aData = array();
  1196. foreach(MetaModel::GetAttributesList($sClass) as $sAttCode)
  1197. {
  1198. $oAttDef = MetaModel::GetAttributeDef($sClass, $sAttCode);
  1199. if ( (!$oAttDef->IsExternalKey()) && (!$oAttDef->IsExternalField()))
  1200. {
  1201. $aEditableFields[] = $sAttCode;
  1202. $aData[$sAttCode] = utils::ReadParam('attr_'.$sAttCode, array(), 'post');
  1203. }
  1204. }
  1205. // Update existing links or create new links
  1206. foreach($aLinks as $iLinkId)
  1207. {
  1208. if ($iLinkId > 0)
  1209. {
  1210. // This is an existing link to be modified
  1211. $oLink = $oContext->GetObject($sClass, $iLinkId);
  1212. // Update all the attributes of the link
  1213. foreach($aEditableFields as $sAttCode)
  1214. {
  1215. $value = $aData[$sAttCode][$iLinkId];
  1216. $oLink->Set($sAttCode, $value);
  1217. }
  1218. if ($oLink->IsModified())
  1219. {
  1220. $oLink->DBUpdateTracked($oMyChange);
  1221. }
  1222. //echo "Updated link:<br/>\n";
  1223. //var_dump($oLink);
  1224. }
  1225. else
  1226. {
  1227. // A new link must be created
  1228. $oLink = MetaModel::NewObject($sClass);
  1229. $oLinkedObjectId = -$iLinkId;
  1230. // Set all the attributes of the link
  1231. foreach($aEditableFields as $sAttCode)
  1232. {
  1233. $value = $aData[$sAttCode][$iLinkId];
  1234. $oLink->Set($sAttCode, $value);
  1235. }
  1236. // And the two external keys
  1237. $oLink->Set($sLinkageAtt, $iObjectId);
  1238. $oLink->Set($sLinkingAttCode, $oLinkedObjectId);
  1239. // then save it
  1240. //echo "Created link:<br/>\n";
  1241. //var_dump($oLink);
  1242. $oLink->DBInsertTracked($oMyChange);
  1243. }
  1244. }
  1245. // Display again the details of the linked object
  1246. $oAttDef = MetaModel::GetAttributeDef($sClass, $sLinkageAtt);
  1247. $sTargetClass = $oAttDef->GetTargetClass();
  1248. $oObj = $oContext->GetObject($sTargetClass, $iObjectId);
  1249. $oSearch = $oContext->NewFilter(get_class($oObj));
  1250. $oBlock = new DisplayBlock($oSearch, 'search', false);
  1251. $oBlock->Display($oP, 0);
  1252. $oObj->DisplayDetails($oP);
  1253. break;
  1254. case 'swf_navigator':
  1255. $sClass = utils::ReadParam('class', '');
  1256. $id = utils::ReadParam('id', 0);
  1257. $sRelation = utils::ReadParam('relation', 'neighbours');
  1258. $width = 1000;
  1259. $height = 700;
  1260. $sParams = "pWidth=$width&pHeight=$height&drillUrl=".urlencode('../pages/UI.php?operation=details')."&displayController=false&xmlUrl=".urlencode("./xml.navigator.php")."&obj_class=$sClass&obj_id=$id&relation=$sRelation";
  1261. $oP->add("<object classid=\"clsid:d27cdb6e-ae6d-11cf-96b8-444553540000\" codebase=\"http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0\" width=\"$width\" height=\"$height\" id=\"navigator\" align=\"middle\">
  1262. <param name=\"allowScriptAccess\" value=\"sameDomain\" />
  1263. <param name=\"allowFullScreen\" value=\"false\" />
  1264. <param name=\"FlashVars\" value=\"$sParams\" />
  1265. <param name=\"movie\" value=\"../navigator/navigator.swf\" /><param name=\"quality\" value=\"high\" /><param name=\"bgcolor\" value=\"#ffffff\" />
  1266. <embed src=\"../navigator/navigator.swf\" flashVars=\"$sParams\" quality=\"high\" bgcolor=\"#ffffff\" width=\"$width\" height=\"$height\" name=\"navigator\" align=\"middle\" allowScriptAccess=\"sameDomain\" allowFullScreen=\"false\" type=\"application/x-shockwave-flash\" pluginspage=\"http://www.adobe.com/go/getflashplayer\" />
  1267. </object>\n");
  1268. break;
  1269. default:
  1270. if (is_object($oActiveNode))
  1271. {
  1272. $oActiveNode->RenderContent($oP, $oAppContext->GetAsHash());
  1273. $oP->set_title($oActiveNode->GetMenuLabel());
  1274. }
  1275. }
  1276. ////MetaModel::ShowQueryTrace();
  1277. $oP->output();
  1278. }
  1279. catch(CoreException $e)
  1280. {
  1281. require_once('../setup/setuppage.class.inc.php');
  1282. $oP = new SetupWebPage(Dict::S('UI:PageTitle:FatalError'));
  1283. $oP->add("<h1>".Dict::S('UI:FatalErrorMessage')."</h1>\n");
  1284. $oP->error(Dict::Format('UI:Error_Details', $e->getHtmlDesc()));
  1285. $oP->output();
  1286. if (MetaModel::IsLogEnabledIssue())
  1287. {
  1288. if (MetaModel::IsValidClass('EventIssue'))
  1289. {
  1290. $oLog = new EventIssue();
  1291. $oLog->Set('message', $e->getMessage());
  1292. $oLog->Set('userinfo', '');
  1293. $oLog->Set('issue', $e->GetIssue());
  1294. $oLog->Set('impact', 'Page could not be displayed');
  1295. $oLog->Set('callstack', $e->getTrace());
  1296. $oLog->Set('data', $e->getContextData());
  1297. $oLog->DBInsertNoReload();
  1298. }
  1299. IssueLog::Error($e->getMessage());
  1300. }
  1301. // For debugging only
  1302. //throw $e;
  1303. }
  1304. catch(Exception $e)
  1305. {
  1306. require_once('../setup/setuppage.class.inc.php');
  1307. $oP = new SetupWebPage(Dict::S('UI:PageTitle:FatalError'));
  1308. $oP->add("<h1>".Dict::S('UI:FatalErrorMessage')."</h1>\n");
  1309. $oP->error(Dict::Format('UI:Error_Details', $e->getMessage()));
  1310. $oP->output();
  1311. if (MetaModel::IsLogEnabledIssue())
  1312. {
  1313. if (MetaModel::IsValidClass('EventIssue'))
  1314. {
  1315. $oLog = new EventIssue();
  1316. $oLog->Set('message', $e->getMessage());
  1317. $oLog->Set('userinfo', '');
  1318. $oLog->Set('issue', 'PHP Exception');
  1319. $oLog->Set('impact', 'Page could not be displayed');
  1320. $oLog->Set('callstack', $e->getTrace());
  1321. $oLog->Set('data', array());
  1322. $oLog->DBInsertNoReload();
  1323. }
  1324. IssueLog::Error($e->getMessage());
  1325. }
  1326. }
  1327. ?>