UI.php 51 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586878889909192939495969798991001011021031041051061071081091101111121131141151161171181191201211221231241251261271281291301311321331341351361371381391401411421431441451461471481491501511521531541551561571581591601611621631641651661671681691701711721731741751761771781791801811821831841851861871881891901911921931941951961971981992002012022032042052062072082092102112122132142152162172182192202212222232242252262272282292302312322332342352362372382392402412422432442452462472482492502512522532542552562572582592602612622632642652662672682692702712722732742752762772782792802812822832842852862872882892902912922932942952962972982993003013023033043053063073083093103113123133143153163173183193203213223233243253263273283293303313323333343353363373383393403413423433443453463473483493503513523533543553563573583593603613623633643653663673683693703713723733743753763773783793803813823833843853863873883893903913923933943953963973983994004014024034044054064074084094104114124134144154164174184194204214224234244254264274284294304314324334344354364374384394404414424434444454464474484494504514524534544554564574584594604614624634644654664674684694704714724734744754764774784794804814824834844854864874884894904914924934944954964974984995005015025035045055065075085095105115125135145155165175185195205215225235245255265275285295305315325335345355365375385395405415425435445455465475485495505515525535545555565575585595605615625635645655665675685695705715725735745755765775785795805815825835845855865875885895905915925935945955965975985996006016026036046056066076086096106116126136146156166176186196206216226236246256266276286296306316326336346356366376386396406416426436446456466476486496506516526536546556566576586596606616626636646656666676686696706716726736746756766776786796806816826836846856866876886896906916926936946956966976986997007017027037047057067077087097107117127137147157167177187197207217227237247257267277287297307317327337347357367377387397407417427437447457467477487497507517527537547557567577587597607617627637647657667677687697707717727737747757767777787797807817827837847857867877887897907917927937947957967977987998008018028038048058068078088098108118128138148158168178188198208218228238248258268278288298308318328338348358368378388398408418428438448458468478488498508518528538548558568578588598608618628638648658668678688698708718728738748758768778788798808818828838848858868878888898908918928938948958968978988999009019029039049059069079089099109119129139149159169179189199209219229239249259269279289299309319329339349359369379389399409419429439449459469479489499509519529539549559569579589599609619629639649659669679689699709719729739749759769779789799809819829839849859869879889899909919929939949959969979989991000100110021003100410051006100710081009101010111012101310141015101610171018101910201021102210231024102510261027102810291030103110321033103410351036103710381039104010411042104310441045104610471048104910501051105210531054105510561057105810591060106110621063106410651066106710681069107010711072107310741075107610771078107910801081108210831084108510861087108810891090109110921093109410951096109710981099110011011102110311041105110611071108110911101111111211131114111511161117111811191120112111221123112411251126112711281129113011311132113311341135113611371138113911401141114211431144114511461147114811491150115111521153115411551156115711581159116011611162116311641165116611671168116911701171117211731174117511761177117811791180118111821183118411851186118711881189119011911192119311941195119611971198119912001201120212031204120512061207120812091210121112121213121412151216121712181219122012211222122312241225122612271228122912301231123212331234123512361237123812391240124112421243124412451246124712481249125012511252125312541255125612571258125912601261126212631264126512661267126812691270127112721273127412751276127712781279128012811282128312841285128612871288128912901291129212931294129512961297129812991300130113021303130413051306130713081309131013111312131313141315131613171318131913201321132213231324132513261327132813291330133113321333133413351336133713381339134013411342134313441345134613471348134913501351135213531354135513561357135813591360136113621363136413651366136713681369137013711372137313741375137613771378137913801381138213831384138513861387138813891390139113921393139413951396139713981399
  1. <?php
  2. // Copyright (C) 2010 Combodo SARL
  3. //
  4. // This program is free software; you can redistribute it and/or modify
  5. // it under the terms of the GNU General Public License as published by
  6. // the Free Software Foundation; version 3 of the License.
  7. //
  8. // This program is distributed in the hope that it will be useful,
  9. // but WITHOUT ANY WARRANTY; without even the implied warranty of
  10. // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  11. // GNU General Public License for more details.
  12. //
  13. // You should have received a copy of the GNU General Public License
  14. // along with this program; if not, write to the Free Software
  15. // Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  16. /**
  17. * Main page of iTop
  18. *
  19. * @author Erwan Taloc <erwan.taloc@combodo.com>
  20. * @author Romain Quetiez <romain.quetiez@combodo.com>
  21. * @author Denis Flaven <denis.flaven@combodo.com>
  22. * @license http://www.opensource.org/licenses/gpl-3.0.html LGPL
  23. */
  24. /**
  25. * Perform all the needed checks to delete one (or more) objects
  26. */
  27. function DeleteObjects(WebPage $oP, $sClass, $aObjects, $bDeleteConfirmed)
  28. {
  29. $bFoundManual = false;
  30. $bFoundStopper = false;
  31. $iTotalDelete = 0; // count of object that must be deleted
  32. $iTotalReset = 0; // count of object for which an ext key will be reset (to 0)
  33. $aTotalDeletedObjs = array();
  34. $aTotalResetedObjs = array();
  35. foreach($aObjects as $oObj)
  36. {
  37. // Evaluate the impact on the DB integrity
  38. //
  39. list ($aDeletedObjs, $aResetedObjs) = $oObj->GetDeletionScheme();
  40. // Evaluate feasibility (user access control)
  41. //
  42. foreach ($aDeletedObjs as $sRemoteClass => $aDeletes)
  43. {
  44. $iTotalDelete += count($aDeletes);
  45. foreach ($aDeletes as $iId => $aData)
  46. {
  47. $oToDelete = $aData['to_delete'];
  48. $bDeleteAllowed = UserRights::IsActionAllowed($sClass, UR_ACTION_DELETE, DBObjectSet::FromObject($oToDelete)) && !MetaModel::IsReadOnlyClass($sClass);
  49. $aTotalDeletedObjs[$sRemoteClass][$iId]['auto_delete'] = $aData['auto_delete'];
  50. if (!$bDeleteAllowed)
  51. {
  52. $aTotalDeletedObjs[$sRemoteClass][$iId]['issue'] = Dict::S('UI:Delete:NotAllowedToDelete');
  53. $bFoundStopper = true;
  54. }
  55. else
  56. {
  57. $aTotalDeletedObjs[$sRemoteClass][$iId]['to_delete'] = $oToDelete;
  58. }
  59. $bAutoDel = $aData['auto_delete'];
  60. if (!$bAutoDel)
  61. {
  62. $bFoundManual = true;
  63. }
  64. }
  65. }
  66. foreach ($aResetedObjs as $sRemoteClass => $aToReset)
  67. {
  68. $iTotalReset += count($aToReset);
  69. foreach ($aToReset as $iId => $aData)
  70. {
  71. $oToReset = $aData['to_reset'];
  72. $aExtKeyLabels = array();
  73. $aForbiddenKeys = array(); // keys on which the current user is not allowed to write
  74. foreach ($aData['attributes'] as $sRemoteExtKey => $aRemoteAttDef)
  75. {
  76. $bUpdateAllowed = UserRights::IsActionAllowedOnAttribute($sClass, $sRemoteExtKey, UR_ACTION_MODIFY, DBObjectSet::FromObject($oToReset));
  77. if (!$bUpdateAllowed)
  78. {
  79. $bFoundStopper = true;
  80. $aForbiddenKeys[] = $aRemoteAttDef->GetLabel();
  81. }
  82. $aExtKeyLabels[] = $aRemoteAttDef->GetLabel();
  83. }
  84. $aResetedObjs[$sRemoteClass][$iId]['attributes_list'] = implode(', ', $aExtKeyLabels);
  85. $aTotalResetedObjs[$sRemoteClass][$iId]['attributes_list'] = $aResetedObjs[$sRemoteClass][$iId]['attributes_list'];
  86. if (count($aForbiddenKeys) > 0)
  87. {
  88. $aTotalResetedObjs[$sRemoteClass][$iId]['issue'] = Dict::Format('UI:Delete:NotAllowedToUpdate_Fields',implode(', ', $aForbiddenKeys));
  89. }
  90. else
  91. {
  92. $aTotalResetedObjs[$sRemoteClass][$iId]['to_reset'] = $oToReset;
  93. }
  94. }
  95. }
  96. // Count of dependent objects (+ the current one)
  97. $iTotalTargets = $iTotalDelete + $iTotalReset;
  98. }
  99. if ($bDeleteConfirmed)
  100. {
  101. if (count($aObjects) == 1)
  102. {
  103. $oObj = $aObjects[0];
  104. $oP->add("<h1>".Dict::Format('UI:Title:DeletionOf_Object', $oObj->GetName())."</h1>\n");
  105. }
  106. else
  107. {
  108. $oP->add("<h1>".Dict::Format('UI:Title:BulkDeletionOf_Count_ObjectsOf_Class', count($aObjects), MetaModel::GetName($sClass))."</h1>\n");
  109. }
  110. // Security - do not allow the user to force a forbidden delete by the mean of page arguments...
  111. if ($bFoundStopper)
  112. {
  113. throw new SecurityException(Dict::S('UI:Error:NotEnoughRightsToDelete'));
  114. }
  115. if ($bFoundManual)
  116. {
  117. throw new SecurityException(Dict::S('UI:Error:CannotDeleteBecauseOfDepencies'));
  118. }
  119. // Prepare the change reporting
  120. //
  121. $oMyChange = MetaModel::NewObject("CMDBChange");
  122. $oMyChange->Set("date", time());
  123. if (UserRights::GetUser() != UserRights::GetRealUser())
  124. {
  125. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  126. }
  127. else
  128. {
  129. $sUserString = UserRights::GetUser();
  130. }
  131. $oMyChange->Set("userinfo", $sUserString);
  132. $oMyChange->DBInsert();
  133. // Delete dependencies
  134. //
  135. $aDisplayData = array();
  136. foreach ($aTotalDeletedObjs as $sRemoteClass => $aDeletes)
  137. {
  138. foreach ($aDeletes as $iId => $aData)
  139. {
  140. $oToDelete = $aData['to_delete'];
  141. $aDisplayData[] = array(
  142. 'class' => MetaModel::GetName(get_class($oToDelete)),
  143. 'object' => $oToDelete->GetHyperLink(),
  144. 'consequence' => Dict::S('UI:Delete:AutomaticallyDeleted'),
  145. );
  146. $oToDelete->DBDeleteTracked($oMyChange);
  147. }
  148. }
  149. // Update dependencies
  150. //
  151. foreach ($aTotalResetedObjs as $sRemoteClass => $aToReset)
  152. {
  153. foreach ($aToReset as $iId => $aData)
  154. {
  155. $oToReset = $aData['to_reset'];
  156. $aDisplayData[] = array(
  157. 'class' => MetaModel::GetName(get_class($oToReset)),
  158. 'object' => $oToReset->GetHyperLink(),
  159. 'consequence' => Dict::Format('UI:Delete:AutomaticResetOf_Fields', $aData['attributes_list']),
  160. );
  161. foreach ($aData['attributes'] as $sRemoteExtKey => $aRemoteAttDef)
  162. {
  163. $oToReset->Set($sRemoteExtKey, 0);
  164. $oToReset->DBUpdateTracked($oMyChange);
  165. }
  166. }
  167. }
  168. // Report automatic jobs
  169. //
  170. if ($iTotalTargets > 0)
  171. {
  172. if (count($aObjects) == 1)
  173. {
  174. $oObj = $aObjects[0];
  175. $oP->p(Dict::Format('UI:Delete:CleaningUpRefencesTo_Object', $oObj->GetName()));
  176. }
  177. else
  178. {
  179. $oP->p(Dict::Format('UI:Delete:CleaningUpRefencesTo_Several_ObjectsOf_Class', count($aObjects), MetaModel::GetName($sClass)));
  180. }
  181. $aDisplayConfig = array();
  182. $aDisplayConfig['class'] = array('label' => 'Class', 'description' => '');
  183. $aDisplayConfig['object'] = array('label' => 'Object', 'description' => '');
  184. $aDisplayConfig['consequence'] = array('label' => 'Done', 'description' => Dict::S('UI:Delete:Done+'));
  185. $oP->table($aDisplayConfig, $aDisplayData);
  186. }
  187. foreach($aObjects as $oObj)
  188. {
  189. $sName = $oObj->GetName();
  190. $sClassLabel = MetaModel::GetName(get_class($oObj));
  191. $oObj->DBDeleteTracked($oMyChange);
  192. $oP->add("<h1>".Dict::Format('UI:Delete:_Name_Class_Deleted', $sName, $sClassLabel)."</h1>\n");
  193. }
  194. }
  195. else
  196. {
  197. if (count($aObjects) == 1)
  198. {
  199. $oObj = $aObjects[0];
  200. $oP->add("<h1>".Dict::Format('UI:Delete:ConfirmDeletionOf_Name', $oObj->GetName())."</h1>\n");
  201. }
  202. else
  203. {
  204. $oP->add("<h1>".Dict::Format('UI:Delete:ConfirmDeletionOf_Count_ObjectsOf_Class', count($aObjects), MetaModel::GetName($sClass))."</h1>\n");
  205. }
  206. // Explain what should be done
  207. //
  208. $aDisplayData = array();
  209. foreach ($aTotalDeletedObjs as $sRemoteClass => $aDeletes)
  210. {
  211. foreach ($aDeletes as $iId => $aData)
  212. {
  213. $oToDelete = $aData['to_delete'];
  214. $bAutoDel = $aData['auto_delete'];
  215. if (array_key_exists('issue', $aData))
  216. {
  217. if ($bAutoDel)
  218. {
  219. $sConsequence = Dict::S('UI:Delete:ShouldBeDeletedAtomaticallyButNotAllowed');
  220. }
  221. else
  222. {
  223. $sConsequence = Dict::S('UI:Delete:MustBeDeletedManuallyButNotAllowed');
  224. }
  225. }
  226. else
  227. {
  228. if ($bAutoDel)
  229. {
  230. $sConsequence = Dict::S('UI:Delete:WillBeDeletedAutomatically');
  231. }
  232. else
  233. {
  234. $sConsequence = Dict::S('UI:Delete:MustBeDeletedManually');
  235. }
  236. }
  237. $aDisplayData[] = array(
  238. 'class' => MetaModel::GetName(get_class($oToDelete)),
  239. 'object' => $oToDelete->GetHyperLink(),
  240. 'consequence' => $sConsequence,
  241. );
  242. }
  243. }
  244. foreach ($aTotalResetedObjs as $sRemoteClass => $aToReset)
  245. {
  246. foreach ($aToReset as $iId => $aData)
  247. {
  248. $oToReset = $aData['to_reset'];
  249. if (array_key_exists('issue', $aData))
  250. {
  251. $sConsequence = Dict::Format('UI:Delete:CannotUpdateBecause_Issue', $aData['issue']);
  252. }
  253. else
  254. {
  255. $sConsequence = Dict::Format('UI:Delete:WillAutomaticallyUpdate_Fields', $aData['attributes_list']);
  256. }
  257. $aDisplayData[] = array(
  258. 'class' => MetaModel::GetName(get_class($oToReset)),
  259. 'object' => $oToReset->GetHyperLink(),
  260. 'consequence' => $sConsequence,
  261. );
  262. }
  263. }
  264. if ($iTotalTargets > 0)
  265. {
  266. if (count($aObjects) == 1)
  267. {
  268. $oObj = $aObjects[0];
  269. $oP->p(Dict::Format('UI:Delete:Count_Objects/LinksReferencing_Object', $iTotalTargets, $oObj->GetName()));
  270. }
  271. else
  272. {
  273. $oP->p(Dict::Format('UI:Delete:Count_Objects/LinksReferencingTheObjects', $iTotalTargets));
  274. }
  275. $oP->p(Dict::S('UI:Delete:ReferencesMustBeDeletedToEnsureIntegrity'));
  276. $aDisplayConfig = array();
  277. $aDisplayConfig['class'] = array('label' => 'Class', 'description' => '');
  278. $aDisplayConfig['object'] = array('label' => 'Object', 'description' => '');
  279. $aDisplayConfig['consequence'] = array('label' => 'Consequence', 'description' => Dict::S('UI:Delete:Consequence+'));
  280. $oP->table($aDisplayConfig, $aDisplayData);
  281. }
  282. if ($iTotalTargets > 0 && ($bFoundManual || $bFoundStopper))
  283. {
  284. if ($bFoundStopper)
  285. {
  286. $oP->p(Dict::S('UI:Delete:SorryDeletionNotAllowed'));
  287. }
  288. elseif ($bFoundManual)
  289. {
  290. $oP->p(Dict::S('UI:Delete:PleaseDoTheManualOperations'));
  291. }
  292. $oP->add("<form method=\"post\">\n");
  293. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::ReadParam('transaction_id')."\">\n");
  294. $oP->add("<input type=\"button\" onclick=\"window.history.back();\" value=\"".Dict::S('UI:Button:Back')."\">\n");
  295. $oP->add("<input DISABLED type=\"submit\" name=\"\" value=\"".Dict::S('UI:Button:Delete')."\">\n");
  296. $oP->add("</form>\n");
  297. }
  298. else
  299. {
  300. if (count($aObjects) == 1)
  301. {
  302. $oObj = $aObjects[0];
  303. $id = $oObj->GetKey();
  304. $oP->p('<h1>'.Dict::Format('UI:Delect:Confirm_Object', $oObj->GetHyperLink()).'</h1>');
  305. $oP->add("<form method=\"post\">\n");
  306. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::ReadParam('transaction_id')."\">\n");
  307. $oP->add("<input type=\"hidden\" name=\"operation\" value=\"delete_confirmed\">\n");
  308. $oP->add("<input type=\"hidden\" name=\"class\" value=\"$sClass\">\n");
  309. $oP->add("<input type=\"hidden\" name=\"id\" value=\"$id\">\n");
  310. $oP->add("<input type=\"button\" onclick=\"window.history.back();\" value=\"".Dict::S('UI:Button:Back')."\">\n");
  311. $oP->add("<input type=\"submit\" name=\"\" value=\"".Dict::S('UI:Button:Delete')."\">\n");
  312. $oP->add("</form>\n");
  313. }
  314. else
  315. {
  316. $oP->p('<h1>'.Dict::Format('UI:Delect:Confirm_Count_ObjectsOf_Class', count($aObjects), MetaModel::GetName($sClass)).'</h1>');
  317. $oSet = CMDBobjectSet::FromArray($sClass, $aObjects);
  318. CMDBAbstractObject::DisplaySet($oP, $oSet, array('display_limit' => false, 'menu' => false));
  319. $oP->add("<form method=\"post\">\n");
  320. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::ReadParam('transaction_id')."\">\n");
  321. $oP->add("<input type=\"hidden\" name=\"operation\" value=\"bulk_delete_confirmed\">\n");
  322. $oP->add("<input type=\"hidden\" name=\"class\" value=\"$sClass\">\n");
  323. foreach($aObjects as $oObj)
  324. {
  325. $oP->add("<input type=\"hidden\" name=\"selectObject[]\" value=\"".$oObj->GetKey()."\">\n");
  326. }
  327. $oP->add("<input type=\"button\" onclick=\"window.history.back();\" value=\"".Dict::S('UI:Button:Back')."\">\n");
  328. $oP->add("<input type=\"submit\" name=\"\" value=\"".Dict::S('UI:Button:Delete')."\">\n");
  329. $oP->add("</form>\n");
  330. }
  331. }
  332. }
  333. }
  334. /**
  335. * Updates an object from the POSTed parameters
  336. */
  337. function UpdateObject(&$oObj)
  338. {
  339. foreach(MetaModel::ListAttributeDefs(get_class($oObj)) as $sAttCode=>$oAttDef)
  340. {
  341. if ($oAttDef->IsLinkSet())
  342. {
  343. // Link set, the data is a set of link objects, encoded in JSON
  344. $aAttributes[$sAttCode] = trim(utils::ReadPostedParam("attr_$sAttCode", ''));
  345. if (!empty($aAttributes[$sAttCode]))
  346. {
  347. $oLinkSet = WizardHelper::ParseJsonSet($oObj, $oAttDef->GetLinkedClass(), $oAttDef->GetExtKeyToMe(), $aAttributes[$sAttCode]);
  348. $oObj->Set($sAttCode, $oLinkSet);
  349. // TO DO: detect a real modification, for now always update !!
  350. }
  351. }
  352. else if ($oAttDef->IsWritable())
  353. {
  354. $iFlags = $oObj->GetAttributeFlags($sAttCode);
  355. if ($iFlags & (OPT_ATT_HIDDEN | OPT_ATT_READONLY))
  356. {
  357. // Non-visible, or read-only attribute, do nothing
  358. }
  359. else if ($oAttDef->GetEditClass() == 'Document')
  360. {
  361. // There should be an uploaded file with the named attr_<attCode>
  362. $oDocument = utils::ReadPostedDocument('file_'.$sAttCode);
  363. if (!$oDocument->IsEmpty())
  364. {
  365. // A new file has been uploaded
  366. $oObj->Set($sAttCode, $oDocument);
  367. }
  368. }
  369. else
  370. {
  371. $rawValue = utils::ReadPostedParam("attr_$sAttCode", null);
  372. if (!is_null($rawValue))
  373. {
  374. $aAttributes[$sAttCode] = trim($rawValue);
  375. $previousValue = $oObj->Get($sAttCode);
  376. if ($previousValue !== $aAttributes[$sAttCode])
  377. {
  378. $oObj->Set($sAttCode, $aAttributes[$sAttCode]);
  379. }
  380. }
  381. }
  382. }
  383. }
  384. }
  385. /***********************************************************************************
  386. *
  387. * Main user interface page, starts here
  388. *
  389. * ***********************************************************************************/
  390. try
  391. {
  392. require_once('../application/application.inc.php');
  393. require_once('../application/itopwebpage.class.inc.php');
  394. require_once('../application/wizardhelper.class.inc.php');
  395. require_once('../application/startup.inc.php');
  396. $oContext = new UserContext();
  397. $oAppContext = new ApplicationContext();
  398. $currentOrganization = utils::ReadParam('org_id', '');
  399. $operation = utils::ReadParam('operation', '');
  400. require_once('../application/loginwebpage.class.inc.php');
  401. LoginWebPage::DoLogin(); // Check user rights and prompt if needed
  402. $oP = new iTopWebPage(Dict::S('UI:WelcomeToITop'), $currentOrganization);
  403. switch($operation)
  404. {
  405. case 'details':
  406. $sClass = utils::ReadParam('class', '');
  407. $sClassLabel = MetaModel::GetName($sClass);
  408. $id = utils::ReadParam('id', '');
  409. $oSearch = new DBObjectSearch($sClass);
  410. $oBlock = new DisplayBlock($oSearch, 'search', false);
  411. $oBlock->Display($oP, 0);
  412. if ( empty($sClass) || empty($id)) // TO DO: check that the class name is valid !
  413. {
  414. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'id'));
  415. }
  416. $oObj = $oContext->GetObject($sClass, $id);
  417. if ($oObj != null)
  418. {
  419. $oP->set_title(Dict::Format('UI:DetailsPageTitle', $oObj->GetDisplayName(), $sClassLabel));
  420. $oObj->DisplayDetails($oP);
  421. }
  422. else
  423. {
  424. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  425. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  426. }
  427. break;
  428. case 'search_oql':
  429. $sOQLClass = utils::ReadParam('oql_class', '');
  430. $sOQLClause = utils::ReadParam('oql_clause', '');
  431. $sFormat = utils::ReadParam('format', '');
  432. $bSearchForm = utils::ReadParam('search_form', true);
  433. if (empty($sOQLClass))
  434. {
  435. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'oql_class'));
  436. }
  437. $oP->set_title(Dict::S('UI:SearchResultsPageTitle'));
  438. $sOQL = "SELECT $sOQLClass $sOQLClause";
  439. try
  440. {
  441. $oFilter = DBObjectSearch::FromOQL($sOQL); // To Do: Make sure we don't bypass security
  442. $oSet = new DBObjectSet($oFilter);
  443. if ($bSearchForm)
  444. {
  445. $oBlock = new DisplayBlock($oFilter, 'search', false);
  446. $oBlock->Display($oP, 0);
  447. }
  448. if (strtolower($sFormat) == 'csv')
  449. {
  450. $oBlock = new DisplayBlock($oFilter, 'csv', false);
  451. $oBlock->Display($oP, 'csv');
  452. $oPage->add_ready_script(" $('#csv').css('height', '95%');"); // adjust the size of the block
  453. }
  454. else
  455. {
  456. $oBlock = new DisplayBlock($oFilter, 'list', false);
  457. $oBlock->Display($oP, 1);
  458. }
  459. }
  460. catch(CoreException $e)
  461. {
  462. $oFilter = new DBObjectSearch($sOQLClass); // To Do: Make sure we don't bypass security
  463. $oSet = new DBObjectSet($oFilter);
  464. if ($bSearchForm)
  465. {
  466. $oBlock = new DisplayBlock($oFilter, 'search', false);
  467. $oBlock->Display($oP, 0);
  468. }
  469. $oP->P('<b>'.Dict::Format('UI:Error:IncorrectOQLQuery_Message', $e->getHtmlDesc()).'</b>');
  470. }
  471. catch(Exception $e)
  472. {
  473. $oP->P('<b>'.Dict::Format('UI:Error:AnErrorOccuredWhileRunningTheQuery_Message', $e->getMessage()).'</b>');
  474. }
  475. break;
  476. case 'search_form':
  477. $sClass = utils::ReadParam('class', '');
  478. $sFormat = utils::ReadParam('format', 'html');
  479. $bSearchForm = utils::ReadParam('search_form', true);
  480. if (empty($sClass))
  481. {
  482. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'class'));
  483. }
  484. $oP->set_title(Dict::S('UI:SearchResultsPageTitle'));
  485. $oFilter = $oContext->NewFilter($sClass);
  486. $oSet = new DBObjectSet($oFilter);
  487. if ($bSearchForm)
  488. {
  489. $oBlock = new DisplayBlock($oFilter, 'search', false /* Asynchronous */, array('open' => true));
  490. $oBlock->Display($oP, 0);
  491. }
  492. if (strtolower($sFormat) == 'csv')
  493. {
  494. $oBlock = new DisplayBlock($oFilter, 'csv', false);
  495. $oBlock->Display($oP, 1);
  496. $oP->add_ready_script(" $('#csv').css('height', '95%');"); // adjust the size of the block
  497. }
  498. else
  499. {
  500. $oBlock = new DisplayBlock($oFilter, 'list', false);
  501. $oBlock->Display($oP, 1);
  502. }
  503. break;
  504. case 'search':
  505. $sFilter = utils::ReadParam('filter', '');
  506. $sFormat = utils::ReadParam('format', '');
  507. $bSearchForm = utils::ReadParam('search_form', true);
  508. if (empty($sFilter))
  509. {
  510. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'filter'));
  511. }
  512. $oP->set_title(Dict::S('UI:SearchResultsPageTitle'));
  513. // TO DO: limit the search filter by the user context
  514. $oFilter = CMDBSearchFilter::unserialize($sFilter); // TO DO : check that the filter is valid
  515. $oSet = new DBObjectSet($oFilter);
  516. if ($bSearchForm)
  517. {
  518. $oBlock = new DisplayBlock($oFilter, 'search', false);
  519. $oBlock->Display($oP, 0);
  520. }
  521. if (strtolower($sFormat) == 'csv')
  522. {
  523. $oBlock = new DisplayBlock($oFilter, 'csv', false);
  524. $oBlock->Display($oP, 'csv');
  525. $oP->add_ready_script(" $('#csv').css('height', '95%');"); // adjust the size of the block
  526. }
  527. else
  528. {
  529. $oBlock = new DisplayBlock($oFilter, 'list', false);
  530. $oBlock->Display($oP, 1);
  531. }
  532. break;
  533. case 'full_text':
  534. $sFullText = trim(utils::ReadParam('text', ''));
  535. if (empty($sFullText))
  536. {
  537. $oP->p(Dict::S('UI:Search:NoSearch'));
  538. }
  539. else
  540. {
  541. $oP->set_title(Dict::S('UI:SearchResultsPageTitle'));
  542. $oP->p("<h1>".Dict::Format('UI:FullTextSearchTitle_Text', $sFullText)."</h1>");
  543. $iCount = 0;
  544. $iBlock = 0;
  545. // Search in full text mode in all the classes
  546. $aMatches = array();
  547. if (preg_match('/^"(.*)"$/', $sFullText, $aMatches))
  548. {
  549. // The text is surrounded by double-quotes, remove the quotes and treat it as one single expression
  550. $aFullTextNeedles = array($aMatches[1]);
  551. }
  552. else
  553. {
  554. // Split the text on the blanks and treat this as a search for <word1> AND <word2> AND <word3>
  555. $aFullTextNeedles = explode(' ', $sFullText);
  556. }
  557. foreach(MetaModel::GetClasses('searchable') as $sClassName)
  558. {
  559. $oFilter = new DBObjectSearch($sClassName);
  560. foreach($aFullTextNeedles as $sSearchText)
  561. {
  562. $oFilter->AddCondition_FullText($sSearchText);
  563. }
  564. $oSet = new DBObjectSet($oFilter);
  565. if ($oSet->Count() > 0)
  566. {
  567. $aLeafs = array();
  568. while($oObj = $oSet->Fetch())
  569. {
  570. if (get_class($oObj) == $sClassName)
  571. {
  572. $aLeafs[] = $oObj->GetKey();
  573. }
  574. }
  575. $oLeafsFilter = new DBObjectSearch($sClassName);
  576. if (count($aLeafs) > 0)
  577. {
  578. $iCount += count($aLeafs);
  579. $oP->add("<div class=\"page_header\">\n");
  580. $oP->add("<h2><img style=\"vertical-align:middle;\" src=\"".MetaModel::GetClassIcon($sClassName)."\"><span class=\"hilite\">".Dict::Format('UI:Search:Count_ObjectsOf_Class_Found', count($aLeafs), Metamodel::GetName($sClassName))."</h2>\n");
  581. $oP->add("</div>\n");
  582. $oLeafsFilter->AddCondition('id', $aLeafs, 'IN');
  583. $oBlock = new DisplayBlock($oLeafsFilter, 'list', false);
  584. $oBlock->Display($oP, $iBlock++);
  585. $oP->P('&nbsp;'); // Some space ?
  586. }
  587. }
  588. }
  589. if ($iCount == 0)
  590. {
  591. $oP->p(Dict::S('UI:Search:NoObjectFound'));
  592. }
  593. }
  594. break;
  595. case 'modify':
  596. $oP->add_linked_script("../js/json.js");
  597. $oP->add_linked_script("../js/forms-json-utils.js");
  598. $oP->add_linked_script("../js/wizardhelper.js");
  599. $oP->add_linked_script("../js/wizard.utils.js");
  600. $oP->add_linked_script("../js/linkswidget.js");
  601. $oP->add_linked_script("../js/jquery.blockUI.js");
  602. $sClass = utils::ReadParam('class', '');
  603. $sClassLabel = MetaModel::GetName($sClass);
  604. $id = utils::ReadParam('id', '');
  605. if ( empty($sClass) || empty($id)) // TO DO: check that the class name is valid !
  606. {
  607. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'id'));
  608. }
  609. // Check if the user can modify this object
  610. $oSearch = new DBObjectSearch($sClass);
  611. $oSearch->AddCondition('id', $id, '=');
  612. $oSet = new CMDBObjectSet($oSearch);
  613. if ($oSet->Count() > 0)
  614. {
  615. $oObj = $oSet->Fetch();
  616. }
  617. $bIsModifiedAllowed = (UserRights::IsActionAllowed($sClass, UR_ACTION_MODIFY, $oSet) == UR_ALLOWED_YES) && !MetaModel::IsReadOnlyClass($sClass);
  618. $bIsReadAllowed = (UserRights::IsActionAllowed($sClass, UR_ACTION_READ, $oSet) == UR_ALLOWED_YES);
  619. if( ($oObj != null) && ($bIsModifiedAllowed) && ($bIsReadAllowed))
  620. {
  621. $oP->set_title(Dict::Format('UI:ModificationPageTitle_Object_Class', $oObj->GetName(), $sClassLabel));
  622. $oP->add("<div class=\"page_header\">\n");
  623. $oP->add("<h1><img src=\"".$oObj->GetIcon()."\" style=\"vertical-align:middle\"> ".Dict::Format('UI:ModificationTitle_Class_Object', $sClassLabel, $oObj->GetName())."</h1>\n");
  624. $oP->add("</div>\n");
  625. $oP->add("<div class=\"wizContainer\">\n");
  626. $oObj->DisplayModifyForm($oP);
  627. $oP->add("</div>\n");
  628. }
  629. else
  630. {
  631. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  632. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  633. }
  634. break;
  635. case 'clone':
  636. $sClass = utils::ReadParam('class', '');
  637. $sClassLabel = MetaModel::GetName($sClass);
  638. $id = utils::ReadParam('id', '');
  639. if ( empty($sClass) || empty($id)) // TO DO: check that the class name is valid !
  640. {
  641. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'id'));
  642. }
  643. // Check if the user can modify this object
  644. $oSearch = new DBObjectSearch($sClass);
  645. $oSearch->AddCondition('id', $id, '=');
  646. $oSet = new CMDBObjectSet($oSearch);
  647. if ($oSet->Count() > 0)
  648. {
  649. $oObjToClone = $oSet->Fetch();
  650. }
  651. $bIsModifiedAllowed = (UserRights::IsActionAllowed($sClass, UR_ACTION_MODIFY, $oSet) == UR_ALLOWED_YES) && !MetaModel::IsReadOnlyClass($sClass);
  652. $bIsReadAllowed = (UserRights::IsActionAllowed($sClass, UR_ACTION_READ, $oSet) == UR_ALLOWED_YES);
  653. if( ($oObjToClone != null) && ($bIsModifiedAllowed) && ($bIsReadAllowed))
  654. {
  655. $oP->add_linked_script("../js/json.js");
  656. $oP->add_linked_script("../js/forms-json-utils.js");
  657. $oP->add_linked_script("../js/wizardhelper.js");
  658. $oP->add_linked_script("../js/wizard.utils.js");
  659. $oP->add_linked_script("../js/linkswidget.js");
  660. $oP->add_linked_script("../js/jquery.blockUI.js");
  661. $oP->set_title(Dict::Format('UI:ClonePageTitle_Object_Class', $oObj->GetName(), $sClassLabel));
  662. $oP->add("<div class=\"page_header\">\n");
  663. $oP->add("<h1>".Dict::Format('UI:CloneTitle_Class_Object', $sClassLabel, $oObj->GetName())."</h1>\n");
  664. $oP->add("</div>\n");
  665. $oP->add("<img src=\"".$oObjToClone->GetIcon()."\" style=\"margin-top:-30px; margin-right:10px; float:right\">\n");
  666. $oP->add("<div class=\"wizContainer\">\n");
  667. $aDefaults = utils::ReadParam('default', array());
  668. $aContext = $oAppContext->GetAsHash();
  669. foreach($aContext as $key => $value)
  670. {
  671. $aDefaults[$key] = $value;
  672. }
  673. cmdbAbstractObject::DisplayCreationForm($oP, $sClass, $oObjToClone, array( 'default' => $aDefaults));
  674. $oP->add("</div>\n");
  675. }
  676. else
  677. {
  678. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  679. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  680. }
  681. break;
  682. case 'new':
  683. $sClass = utils::ReadParam('class', '');
  684. $sStateCode = utils::ReadParam('state', '');
  685. $bCheckSubClass = utils::ReadParam('checkSubclass', true);
  686. if ( empty($sClass) )
  687. {
  688. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'class'));
  689. }
  690. $oP->add_linked_script("../js/json.js");
  691. $oP->add_linked_script("../js/forms-json-utils.js");
  692. $oP->add_linked_script("../js/wizardhelper.js");
  693. $oP->add_linked_script("../js/wizard.utils.js");
  694. $oP->add_linked_script("../js/linkswidget.js");
  695. $oP->add_linked_script("../js/jquery.blockUI.js");
  696. $oContext = new UserContext();
  697. $aArgs = array_merge($oAppContext->GetAsHash(), utils::ReadParam('default', array()));
  698. // If the specified class has subclasses, ask the user an instance of which class to create
  699. $aSubClasses = MetaModel::EnumChildClasses($sClass, ENUM_CHILD_CLASSES_ALL); // Including the specified class itself
  700. $aPossibleClasses = array();
  701. $sRealClass = '';
  702. if ($bCheckSubClass)
  703. {
  704. foreach($aSubClasses as $sCandidateClass)
  705. {
  706. if (!MetaModel::IsAbstract($sCandidateClass))
  707. {
  708. $aPossibleClasses[$sCandidateClass] = MetaModel::GetName($sCandidateClass);
  709. }
  710. }
  711. // Only one of the subclasses can be instantiated...
  712. if (count($aPossibleClasses) == 1)
  713. {
  714. $aKeys = array_keys($aPossibleClasses);
  715. $sRealClass = $aKeys[0];
  716. }
  717. }
  718. else
  719. {
  720. $sRealClass = $sClass;
  721. }
  722. if (!empty($sRealClass))
  723. {
  724. // Display the creation form
  725. $sClassLabel = MetaModel::GetName($sRealClass);
  726. $oP->set_title(Dict::Format('UI:CreationPageTitle_Class', $sClassLabel));
  727. $oP->add("<h1><img src=\"".MetaModel::GetClassIcon($sRealClass)."\" style=\"vertical-align:middle;\">".Dict::Format('UI:CreationTitle_Class', $sClassLabel)."</h1>\n");
  728. $oP->add("<div class=\"wizContainer\">\n");
  729. $aDefaults = utils::ReadParam('default', array());
  730. $aContext = $oAppContext->GetAsHash();
  731. foreach($aContext as $key => $value)
  732. {
  733. $aDefaults[$key] = $value;
  734. }
  735. cmdbAbstractObject::DisplayCreationForm($oP, $sRealClass, null /* $oObjToClone */, array('default' => $aDefaults));
  736. $oP->add("</div>\n");
  737. }
  738. else
  739. {
  740. // Select the derived class to create
  741. $sClassLabel = MetaModel::GetName($sClass);
  742. $oP->add("<h1><img src=\"".MetaModel::GetClassIcon($sClass)."\" style=\"vertical-align:middle;\">".Dict::Format('UI:CreationTitle_Class', $sClassLabel)."</h1>\n");
  743. $oP->add("<div class=\"wizContainer\">\n");
  744. $oP->add('<form>');
  745. $oP->add('<p>'.Dict::Format('UI:SelectTheTypeOf_Class_ToCreate', $sClassLabel));
  746. $aDefaults = utils::ReadParam('default', array());
  747. $oP->add($oAppContext->GetForForm());
  748. $oP->add("<input type=\"hidden\" name=\"state\" value=\"$sStateCode\">\n");
  749. $oP->add("<input type=\"hidden\" name=\"operation\" value=\"new\">\n");
  750. foreach($aDefaults as $key => $value)
  751. {
  752. $oP->add("<input type=\"hidden\" name=\"default[$key]\" value=\"$value\">\n");
  753. $aDefaults[$key] = $value;
  754. }
  755. $oP->add('<select name="class">');
  756. asort($aPossibleClasses);
  757. foreach($aPossibleClasses as $sClassName => $sClassLabel)
  758. {
  759. $sSelected = ($sClassName == $sClass) ? 'selected' : '';
  760. $oP->add("<option $sSelected value=\"$sClassName\">$sClassLabel</option>");
  761. }
  762. $oP->add('</select>');
  763. $oP->add("&nbsp; <input type=\"submit\" value=\"".Dict::S('UI:Button:Apply')."\"></p>");
  764. $oP->add('</form>');
  765. $oP->add("</div>\n");
  766. }
  767. break;
  768. case 'apply_modify':
  769. $sClass = utils::ReadPostedParam('class', '');
  770. $sClassLabel = MetaModel::GetName($sClass);
  771. $id = utils::ReadPostedParam('id', '');
  772. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  773. if ( empty($sClass) || empty($id)) // TO DO: check that the class name is valid !
  774. {
  775. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'id'));
  776. }
  777. $oObj = $oContext->GetObject($sClass, $id);
  778. if (!utils::IsTransactionValid($sTransactionId))
  779. {
  780. $oP->p("<strong>".Dict::S('UI:Error:ObjectAlreadyUpdated')."</strong>\n");
  781. }
  782. else
  783. {
  784. if ($oObj != null)
  785. {
  786. $oP->set_title(Dict::Format('UI:ModificationPageTitle_Object_Class', $oObj->GetName(), $sClassLabel));
  787. $oP->add("<h1>".Dict::Format('UI:ModificationTitle_Class_Object', $sClassLabel, $oObj->GetName())."</h1>\n");
  788. UpdateObject($oObj);
  789. if (!$oObj->IsModified())
  790. {
  791. $oP->p(Dict::Format('UI:Class_Object_NotUpdated', MetaModel::GetName(get_class($oObj)), $oObj->GetName()));
  792. }
  793. else if ($oObj->CheckToUpdate())
  794. {
  795. $oMyChange = MetaModel::NewObject("CMDBChange");
  796. $oMyChange->Set("date", time());
  797. if (UserRights::GetUser() != UserRights::GetRealUser())
  798. {
  799. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  800. }
  801. else
  802. {
  803. $sUserString = UserRights::GetUser();
  804. }
  805. $oMyChange->Set("userinfo", $sUserString);
  806. $iChangeId = $oMyChange->DBInsert();
  807. $oObj->DBUpdateTracked($oMyChange);
  808. $oP->p(Dict::Format('UI:Class_Object_Updated', MetaModel::GetName(get_class($oObj)), $oObj->GetName()));
  809. }
  810. else
  811. {
  812. $oP->p("<strong>".Dict::S('UI:Error:ObjectCannotBeUpdated')."</strong>\n");
  813. }
  814. }
  815. else
  816. {
  817. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  818. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  819. }
  820. }
  821. $oObj->DisplayDetails($oP);
  822. break;
  823. case 'select_for_deletion':
  824. $sFilter = utils::ReadParam('filter', '');
  825. $sFormat = utils::ReadParam('format', '');
  826. if (empty($sFilter))
  827. {
  828. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'filter'));
  829. }
  830. $oP->set_title(Dict::S('UI:BulkDeletePageTitle'));
  831. $oP->add("<h1>".Dict::S('UI:BulkDeleteTitle')."</h1>\n");
  832. // TO DO: limit the search filter by the user context
  833. $oFilter = CMDBSearchFilter::unserialize($sFilter); // TO DO : check that the filter is valid
  834. $oSet = new DBObjectSet($oFilter);
  835. $oBlock = new DisplayBlock($oFilter, 'list', false);
  836. $oP->add("<form method=\"post\">\n");
  837. $oP->add("<input type=\"hidden\" name=\"operation\" value=\"bulk_delete\">\n");
  838. $oP->add("<input type=\"hidden\" name=\"class\" value=\"".$oFilter->GetClass()."\">\n");
  839. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::GetNewTransactionId()."\">\n");
  840. $oBlock->Display($oP, 1, array('selection_type' => 'multiple', 'selection_mode' => true, 'display_limit' => false, 'menu' => false));
  841. $oP->add("<input type=\"button\" value=\"".Dict::S('UI:Button:Cancel')."\" onClick=\"window.history.back()\">&nbsp;&nbsp;<input type=\"submit\" value=\"".Dict::S('UI:Button:Next')."\">\n");
  842. $oP->add("</form>\n");
  843. break;
  844. case 'bulk_delete_confirmed':
  845. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  846. if (!utils::IsTransactionValid($sTransactionId))
  847. {
  848. throw new ApplicationException(Dict::S('UI:Error:ObjectsAlreadyDeleted'));
  849. }
  850. case 'bulk_delete':
  851. $sClass = utils::ReadPostedParam('class', '');
  852. $sClassLabel = MetaModel::GetName($sClass);
  853. $aSelectObject = utils::ReadPostedParam('selectObject', '');
  854. $aObjects = array();
  855. if ( empty($sClass) || empty($aSelectObject)) // TO DO: check that the class name is valid !
  856. {
  857. throw new ApplicationException(Dict::Format('UI:Error:2ParametersMissing', 'class', 'selectObject[]'));
  858. }
  859. foreach($aSelectObject as $iId)
  860. {
  861. $aObjects[] = $oContext->GetObject($sClass, $iId);
  862. }
  863. if (MetaModel::IsReadOnlyClass($sClass) || !UserRights::IsActionAllowed($sClass, UR_ACTION_BULK_DELETE, DBObjectSet::FromArray($sClass, $aObjects)))
  864. {
  865. throw new SecurityException(Dict::S('UI:Error:BulkDeleteNotAllowedOn_Class'), $sClass);
  866. }
  867. $oP->set_title(Dict::S('UI:BulkDeletePageTitle'));
  868. DeleteObjects($oP, $sClass, $aObjects, ($operation == 'bulk_delete_confirmed'));
  869. break;
  870. case 'delete':
  871. case 'delete_confirmed':
  872. $sClass = utils::ReadParam('class', '');
  873. $sClassLabel = MetaModel::GetName($sClass);
  874. $id = utils::ReadParam('id', '');
  875. $oObj = $oContext->GetObject($sClass, $id);
  876. if (MetaModel::IsReadOnlyClass($sClass) || !UserRights::IsActionAllowed($sClass, UR_ACTION_MODIFY, DBObjectSet::FromObject($oObj)))
  877. {
  878. throw new SecurityException(Dict::S('UI:Error:DeleteNotAllowedOn_Class'), $sClass);
  879. }
  880. DeleteObjects($oP, $sClass, array($oObj), ($operation == 'delete_confirmed'));
  881. break;
  882. case 'apply_clone':
  883. $sClass = utils::ReadPostedParam('class', '');
  884. $sClassLabel = MetaModel::GetName($sClass);
  885. $iCloneId = utils::ReadPostedParam('clone_id', '');
  886. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  887. if (!utils::IsTransactionValid($sTransactionId))
  888. {
  889. $oP->p(Dict::S('UI:Error:ObjectAlreadyCloned'));
  890. }
  891. else
  892. {
  893. $oObj = $oContext->GetObject($sClass, $iCloneId);
  894. $oMyChange = MetaModel::NewObject("CMDBChange");
  895. $oMyChange->Set("date", time());
  896. if (UserRights::GetUser() != UserRights::GetRealUser())
  897. {
  898. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  899. }
  900. else
  901. {
  902. $sUserString = UserRights::GetUser();
  903. }
  904. $oMyChange->Set("userinfo", $sUserString);
  905. $iChangeId = $oMyChange->DBInsert();
  906. $sStateAttCode = MetaModel::GetStateAttributeCode(get_class($oObj));
  907. UpdateObject($oObj);
  908. $oObj->DBCloneTracked($oMyChange);
  909. $oP->set_title(Dict::S('UI:PageTitle:ObjectCreated'));
  910. $oP->add("<h1>".Dict::Format('UI:Title:Object_Of_Class_Created', $oObj->GetName(), $sClassLabel)."</h1>\n");
  911. $oObj->DisplayDetails($oP);
  912. }
  913. break;
  914. case 'apply_new':
  915. $sClass = utils::ReadPostedParam('class', '');
  916. $sClassLabel = MetaModel::GetName($sClass);
  917. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  918. if ( empty($sClass) ) // TO DO: check that the class name is valid !
  919. {
  920. throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'class'));
  921. }
  922. if (!utils::IsTransactionValid($sTransactionId))
  923. {
  924. $oP->p("<strong>".Dict::S('UI:Error:ObjectAlreadyCreated')."</strong>\n");
  925. }
  926. else
  927. {
  928. $oObj = MetaModel::NewObject($sClass);
  929. UpdateObject($oObj);
  930. }
  931. if (isset($oObj) && is_object($oObj))
  932. {
  933. $sClass = get_class($oObj);
  934. $sClassLabel = MetaModel::GetName($sClass);
  935. $oMyChange = MetaModel::NewObject("CMDBChange");
  936. $oMyChange->Set("date", time());
  937. if (UserRights::GetUser() != UserRights::GetRealUser())
  938. {
  939. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  940. }
  941. else
  942. {
  943. $sUserString = UserRights::GetUser();
  944. }
  945. $oMyChange->Set("userinfo", $sUserString);
  946. $iChangeId = $oMyChange->DBInsert();
  947. $oObj->DBInsertTracked($oMyChange);
  948. $oP->set_title(Dict::S('UI:PageTitle:ObjectCreated'));
  949. $oP->add("<h1>".Dict::Format('UI:Title:Object_Of_Class_Created', $oObj->GetName(), $sClassLabel)."</h1>\n");
  950. $oObj->DisplayDetails($oP);
  951. }
  952. break;
  953. case 'wizard_apply_new':
  954. $sJson = utils::ReadPostedParam('json_obj', '');
  955. $oWizardHelper = WizardHelper::FromJSON($sJson);
  956. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  957. if (!utils::IsTransactionValid($sTransactionId))
  958. {
  959. $oP->p(Dict::S('UI:Error:ObjectAlreadyCreated'));
  960. }
  961. else
  962. {
  963. $oObj = $oWizardHelper->GetTargetObject(true /* read uploaded files */);
  964. if (is_object($oObj))
  965. {
  966. $sClass = get_class($oObj);
  967. $sClassLabel = MetaModel::GetName($sClass);
  968. $oMyChange = MetaModel::NewObject("CMDBChange");
  969. $oMyChange->Set("date", time());
  970. if (UserRights::GetUser() != UserRights::GetRealUser())
  971. {
  972. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  973. }
  974. else
  975. {
  976. $sUserString = UserRights::GetUser();
  977. }
  978. $oMyChange->Set("userinfo", $sUserString);
  979. $iChangeId = $oMyChange->DBInsert();
  980. $oObj->DBInsertTracked($oMyChange);
  981. $oP->set_title(Dict::S('UI:PageTitle:ObjectCreated'));
  982. $oP->add("<h1>".Dict::Format('UI:Title:Object_Of_Class_Created', $oObj->GetName(), $sClassLabel)."</h1>\n");
  983. $oObj->DisplayDetails($oP);
  984. }
  985. }
  986. break;
  987. case 'stimulus':
  988. $sClass = utils::ReadParam('class', '');
  989. $id = utils::ReadParam('id', '');
  990. $sStimulus = utils::ReadParam('stimulus', '');
  991. if ( empty($sClass) || empty($id) || empty($sStimulus) ) // TO DO: check that the class name is valid !
  992. {
  993. throw new ApplicationException(Dict::Format('UI:Error:3ParametersMissing', 'class', 'id', 'stimulus'));
  994. }
  995. $oObj = $oContext->GetObject($sClass, $id);
  996. if ($oObj != null)
  997. {
  998. $aTransitions = $oObj->EnumTransitions();
  999. $aStimuli = MetaModel::EnumStimuli($sClass);
  1000. if (!isset($aTransitions[$sStimulus]))
  1001. {
  1002. // Invalid stimulus
  1003. throw new ApplicationException(Dict::Format('UI:Error:Invalid_Stimulus_On_Object_In_State', $sStimulus, $oObj->GetName(), $oObj->GetStateLabel()));
  1004. }
  1005. $sActionLabel = $aStimuli[$sStimulus]->GetLabel();
  1006. $sActionDetails = $aStimuli[$sStimulus]->GetDescription();
  1007. $aTransition = $aTransitions[$sStimulus];
  1008. $sTargetState = $aTransition['target_state'];
  1009. $aTargetStates = MetaModel::EnumStates($sClass);
  1010. $oP->add_linked_script("../js/json.js");
  1011. $oP->add_linked_script("../js/forms-json-utils.js");
  1012. $oP->add_linked_script("../js/wizardhelper.js");
  1013. $oP->add_linked_script("../js/wizard.utils.js");
  1014. $oP->add_linked_script("../js/linkswidget.js");
  1015. $oP->add_linked_script("../js/jquery.blockUI.js");
  1016. $oP->add("<div class=\"page_header\">\n");
  1017. $oP->add("<h1>$sActionLabel - <span class=\"hilite\">{$oObj->GetName()}</span></h1>\n");
  1018. $oP->set_title($sActionLabel);
  1019. $oP->add("</div>\n");
  1020. $oObj->DisplayBareProperties($oP);
  1021. $aTargetState = $aTargetStates[$sTargetState];
  1022. $aExpectedAttributes = $aTargetState['attribute_list'];
  1023. $oP->add("<h1>$sActionDetails</h1>\n");
  1024. $oP->add("<div class=\"wizContainer\">\n");
  1025. $oP->add("<form id=\"apply_stimulus\" method=\"post\" onSubmit=\"return CheckFields('apply_stimulus', true);\">\n");
  1026. $aDetails = array();
  1027. $iFieldIndex = 0;
  1028. $aFieldsMap = array();
  1029. foreach($aExpectedAttributes as $sAttCode => $iExpectCode)
  1030. {
  1031. // Prompt for an attribute if
  1032. // - the attribute must be changed or must be displayed to the user for confirmation
  1033. // - or the field is mandatory and currently empty
  1034. if ( ($iExpectCode & (OPT_ATT_MUSTCHANGE | OPT_ATT_MUSTPROMPT)) ||
  1035. (($iExpectCode & OPT_ATT_MANDATORY) && ($oObj->Get($sAttCode) == '')) )
  1036. {
  1037. $aAttributesDef = MetaModel::ListAttributeDefs($sClass);
  1038. $oAttDef = $aAttributesDef[$sAttCode];
  1039. $aArgs = array('this' => $oObj);
  1040. $sHTMLValue = cmdbAbstractObject::GetFormElementForField($oP, $sClass, $sAttCode, $oAttDef, $oObj->Get($sAttCode), $oObj->GetEditValue($sAttCode), 'att_'.$iFieldIndex, '', $iExpectCode, $aArgs);
  1041. $aDetails[] = array('label' => $oAttDef->GetLabel(), 'value' => "<span id=\"field_att_$iFieldIndex\">$sHTMLValue</span>");
  1042. $aFieldsMap[$sAttCode] = 'att_'.$iFieldIndex;
  1043. $iFieldIndex++;
  1044. }
  1045. }
  1046. $oP->details($aDetails);
  1047. $oP->add("<input type=\"hidden\" name=\"id\" value=\"$id\" id=\"id\">\n");
  1048. $aFieldsMap['id'] = 'id';
  1049. $oP->add("<input type=\"hidden\" name=\"class\" value=\"$sClass\">\n");
  1050. $oP->add("<input type=\"hidden\" name=\"operation\" value=\"apply_stimulus\">\n");
  1051. $oP->add("<input type=\"hidden\" name=\"stimulus\" value=\"$sStimulus\">\n");
  1052. $oP->add("<input type=\"hidden\" name=\"transaction_id\" value=\"".utils::GetNewTransactionId()."\">\n");
  1053. $oP->add($oAppContext->GetForForm());
  1054. $oP->add("<button type=\"button\" class=\"action\" onClick=\"BackToDetails('$sClass', $id)\"><span>".Dict::S('UI:Button:Cancel')."</span></button>&nbsp;&nbsp;&nbsp;&nbsp;\n");
  1055. $oP->add("<button type=\"submit\" class=\"action\"><span>$sActionLabel</span></button>\n");
  1056. $oP->add("</form>\n");
  1057. $oP->add("</div>\n");
  1058. $iFieldsCount = count($aFieldsMap);
  1059. $sJsonFieldsMap = json_encode($aFieldsMap);
  1060. $oP->add_script(
  1061. <<<EOF
  1062. // Initializes the object once at the beginning of the page...
  1063. var oWizardHelper = new WizardHelper('$sClass');
  1064. oWizardHelper.SetFieldsMap($sJsonFieldsMap);
  1065. oWizardHelper.SetFieldsCount($iFieldsCount);
  1066. EOF
  1067. );
  1068. }
  1069. else
  1070. {
  1071. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  1072. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  1073. }
  1074. break;
  1075. case 'apply_stimulus':
  1076. $sClass = utils::ReadPostedParam('class', '');
  1077. $id = utils::ReadPostedParam('id', '');
  1078. $sTransactionId = utils::ReadPostedParam('transaction_id', '');
  1079. $sStimulus = utils::ReadPostedParam('stimulus', '');
  1080. if ( empty($sClass) || empty($id) || empty($sStimulus) ) // TO DO: check that the class name is valid !
  1081. {
  1082. throw new ApplicationException(Dict::Format('UI:Error:3ParametersMissing', 'class', 'id', 'stimulus'));
  1083. }
  1084. $oObj = $oContext->GetObject($sClass, $id);
  1085. if ($oObj != null)
  1086. {
  1087. $aTransitions = $oObj->EnumTransitions();
  1088. $aStimuli = MetaModel::EnumStimuli($sClass);
  1089. if (!isset($aTransitions[$sStimulus]))
  1090. {
  1091. throw new ApplicationException(Dict::Format('UI:Error:Invalid_Stimulus_On_Object_In_State', $sStimulus, $oObj->GetName(), $oObj->GetStateLabel()));
  1092. }
  1093. if (!utils::IsTransactionValid($sTransactionId))
  1094. {
  1095. $oP->p(Dict::S('UI:Error:ObjectAlreadyUpdated'));
  1096. }
  1097. else
  1098. {
  1099. $sActionLabel = $aStimuli[$sStimulus]->GetLabel();
  1100. $sActionDetails = $aStimuli[$sStimulus]->GetDescription();
  1101. $aTransition = $aTransitions[$sStimulus];
  1102. $sTargetState = $aTransition['target_state'];
  1103. $aTargetStates = MetaModel::EnumStates($sClass);
  1104. $oP->add("<div class=\"page_header\">\n");
  1105. $oP->add("<h1>$sActionLabel - <span class=\"hilite\">{$oObj->GetName()}</span></h1>\n");
  1106. $oP->add("<p>$sActionDetails</p>\n");
  1107. $oP->p(Dict::Format('UI:Apply_Stimulus_On_Object_In_State_ToTarget_State', $sActionLabel, $oObj->GetName(), $oObj->GetStateLabel(), $sTargetState));
  1108. $oP->add("</div>\n");
  1109. $aTargetState = $aTargetStates[$sTargetState];
  1110. $aExpectedAttributes = $aTargetState['attribute_list'];
  1111. $aDetails = array();
  1112. foreach($aExpectedAttributes as $sAttCode => $iExpectCode)
  1113. {
  1114. if (($iExpectCode & (OPT_ATT_MUSTCHANGE|OPT_ATT_MUSTPROMPT)) || ($oObj->Get($sAttCode) == '') )
  1115. {
  1116. $paramValue = utils::ReadPostedParam("attr_$sAttCode", '');
  1117. $oObj->Set($sAttCode, $paramValue);
  1118. }
  1119. }
  1120. if ($oObj->ApplyStimulus($sStimulus) && $oObj->CheckToUpdate())
  1121. {
  1122. $oMyChange = MetaModel::NewObject("CMDBChange");
  1123. $oMyChange->Set("date", time());
  1124. if (UserRights::GetUser() != UserRights::GetRealUser())
  1125. {
  1126. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  1127. }
  1128. else
  1129. {
  1130. $sUserString = UserRights::GetUser();
  1131. }
  1132. $oMyChange->Set("userinfo", $sUserString);
  1133. $iChangeId = $oMyChange->DBInsert();
  1134. $oObj->DBUpdateTracked($oMyChange);
  1135. $oP->p(Dict::Format('UI:Class_Object_Updated', get_class($oObj), $oObj->GetName()));
  1136. }
  1137. }
  1138. $oObj->DisplayDetails($oP);
  1139. }
  1140. else
  1141. {
  1142. $oP->set_title(Dict::S('UI:ErrorPageTitle'));
  1143. $oP->P(Dict::S('UI:ObjectDoesNotExist'));
  1144. }
  1145. break;
  1146. case 'modify_links':
  1147. $sClass = utils::ReadParam('class', '');
  1148. $sLinkAttr = utils::ReadParam('link_attr', '');
  1149. $sTargetClass = utils::ReadParam('target_class', '');
  1150. $id = utils::ReadParam('id', '');
  1151. $bAddObjects = utils::ReadParam('addObjects', false);
  1152. if ( empty($sClass) || empty($id) || empty($sLinkAttr) || empty($sTargetClass)) // TO DO: check that the class name is valid !
  1153. {
  1154. throw new ApplicationException(Dict::Format('UI:Error:4ParametersMissing', 'class', 'id', 'target_class', 'link_attr'));
  1155. }
  1156. require_once('../application/uilinkswizard.class.inc.php');
  1157. $oWizard = new UILinksWizard($sClass, $sLinkAttr, $id, $sTargetClass);
  1158. $oWizard->Display($oP, $oContext, array('StartWithAdd' => $bAddObjects));
  1159. break;
  1160. case 'do_modify_links':
  1161. $aLinks = utils::ReadParam('linkId', array(), 'post');
  1162. $sLinksToRemove = trim(utils::ReadParam('linksToRemove', '', 'post'));
  1163. $aLinksToRemove = array();
  1164. if (!empty($sLinksToRemove))
  1165. {
  1166. $aLinksToRemove = explode(' ', trim($sLinksToRemove));
  1167. }
  1168. $sClass = utils::ReadParam('class', '', 'post');
  1169. $sLinkageAtt = utils::ReadParam('linkage', '', 'post');
  1170. $iObjectId = utils::ReadParam('object_id', '', 'post');
  1171. $sLinkingAttCode = utils::ReadParam('linking_attcode', '', 'post');
  1172. $oMyChange = MetaModel::NewObject("CMDBChange");
  1173. $oMyChange->Set("date", time());
  1174. if (UserRights::GetUser() != UserRights::GetRealUser())
  1175. {
  1176. $sUserString = Dict::Format('UI:Archive_User_OnBehalfOf_User', UserRights::GetRealUser(), UserRights::GetUser());
  1177. }
  1178. else
  1179. {
  1180. $sUserString = UserRights::GetUser();
  1181. }
  1182. $oMyChange->Set("userinfo", $sUserString);
  1183. $iChangeId = $oMyChange->DBInsert();
  1184. // Delete links that are to be deleted
  1185. foreach($aLinksToRemove as $iLinkId)
  1186. {
  1187. if ($iLinkId > 0) // Negative IDs are objects that were not even created
  1188. {
  1189. $oLink = $oContext->GetObject($sClass, $iLinkId);
  1190. $oLink->DBDeleteTracked($oMyChange);
  1191. }
  1192. }
  1193. $aEditableFields = array();
  1194. $aData = array();
  1195. foreach(MetaModel::GetAttributesList($sClass) as $sAttCode)
  1196. {
  1197. $oAttDef = MetaModel::GetAttributeDef($sClass, $sAttCode);
  1198. if ( (!$oAttDef->IsExternalKey()) && (!$oAttDef->IsExternalField()))
  1199. {
  1200. $aEditableFields[] = $sAttCode;
  1201. $aData[$sAttCode] = utils::ReadParam('attr_'.$sAttCode, array(), 'post');
  1202. }
  1203. }
  1204. // Update existing links or create new links
  1205. foreach($aLinks as $iLinkId)
  1206. {
  1207. if ($iLinkId > 0)
  1208. {
  1209. // This is an existing link to be modified
  1210. $oLink = $oContext->GetObject($sClass, $iLinkId);
  1211. // Update all the attributes of the link
  1212. foreach($aEditableFields as $sAttCode)
  1213. {
  1214. $value = $aData[$sAttCode][$iLinkId];
  1215. $oLink->Set($sAttCode, $value);
  1216. }
  1217. if ($oLink->IsModified())
  1218. {
  1219. $oLink->DBUpdateTracked($oMyChange);
  1220. }
  1221. //echo "Updated link:<br/>\n";
  1222. //var_dump($oLink);
  1223. }
  1224. else
  1225. {
  1226. // A new link must be created
  1227. $oLink = MetaModel::NewObject($sClass);
  1228. $oLinkedObjectId = -$iLinkId;
  1229. // Set all the attributes of the link
  1230. foreach($aEditableFields as $sAttCode)
  1231. {
  1232. $value = $aData[$sAttCode][$iLinkId];
  1233. $oLink->Set($sAttCode, $value);
  1234. }
  1235. // And the two external keys
  1236. $oLink->Set($sLinkageAtt, $iObjectId);
  1237. $oLink->Set($sLinkingAttCode, $oLinkedObjectId);
  1238. // then save it
  1239. //echo "Created link:<br/>\n";
  1240. //var_dump($oLink);
  1241. $oLink->DBInsertTracked($oMyChange);
  1242. }
  1243. }
  1244. // Display again the details of the linked object
  1245. $oAttDef = MetaModel::GetAttributeDef($sClass, $sLinkageAtt);
  1246. $sTargetClass = $oAttDef->GetTargetClass();
  1247. $oObj = $oContext->GetObject($sTargetClass, $iObjectId);
  1248. $oSearch = $oContext->NewFilter(get_class($oObj));
  1249. $oBlock = new DisplayBlock($oSearch, 'search', false);
  1250. $oBlock->Display($oP, 0);
  1251. $oObj->DisplayDetails($oP);
  1252. break;
  1253. case 'swf_navigator':
  1254. $sClass = utils::ReadParam('class', '');
  1255. $id = utils::ReadParam('id', 0);
  1256. $sRelation = utils::ReadParam('relation', 'neighbours');
  1257. $width = 1000;
  1258. $height = 700;
  1259. $sParams = "pWidth=$width&pHeight=$height&drillUrl=".urlencode('../pages/UI.php?operation=details')."&displayController=false&xmlUrl=".urlencode("./xml.navigator.php")."&obj_class=$sClass&obj_id=$id&relation=$sRelation";
  1260. $oP->add("<object classid=\"clsid:d27cdb6e-ae6d-11cf-96b8-444553540000\" codebase=\"http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,0,0\" width=\"$width\" height=\"$height\" id=\"navigator\" align=\"middle\">
  1261. <param name=\"allowScriptAccess\" value=\"sameDomain\" />
  1262. <param name=\"allowFullScreen\" value=\"false\" />
  1263. <param name=\"FlashVars\" value=\"$sParams\" />
  1264. <param name=\"movie\" value=\"../navigator/navigator.swf\" /><param name=\"quality\" value=\"high\" /><param name=\"bgcolor\" value=\"#ffffff\" />
  1265. <embed src=\"../navigator/navigator.swf\" flashVars=\"$sParams\" quality=\"high\" bgcolor=\"#ffffff\" width=\"$width\" height=\"$height\" name=\"navigator\" align=\"middle\" allowScriptAccess=\"sameDomain\" allowFullScreen=\"false\" type=\"application/x-shockwave-flash\" pluginspage=\"http://www.adobe.com/go/getflashplayer\" />
  1266. </object>\n");
  1267. break;
  1268. default:
  1269. $oMenuNode = ApplicationMenu::GetMenuNode(ApplicationMenu::GetActiveNodeId());
  1270. if (is_object($oMenuNode))
  1271. {
  1272. $oMenuNode->RenderContent($oP, $oAppContext->GetAsHash());
  1273. $oP->set_title($oMenuNode->GetLabel());
  1274. }
  1275. }
  1276. ////MetaModel::ShowQueryTrace();
  1277. $oP->output();
  1278. }
  1279. catch(CoreException $e)
  1280. {
  1281. require_once('../setup/setuppage.class.inc.php');
  1282. $oP = new SetupWebPage(Dict::S('UI:PageTitle:FatalError'));
  1283. $oP->add("<h1>".Dict::S('UI:FatalErrorMessage')."</h1>\n");
  1284. $oP->error(Dict::Format('UI:Error_Details', $e->getHtmlDesc()));
  1285. $oP->output();
  1286. if (MetaModel::IsLogEnabledIssue())
  1287. {
  1288. if (MetaModel::IsValidClass('EventIssue'))
  1289. {
  1290. $oLog = new EventIssue();
  1291. $oLog->Set('message', $e->getMessage());
  1292. $oLog->Set('userinfo', '');
  1293. $oLog->Set('issue', $e->GetIssue());
  1294. $oLog->Set('impact', 'Page could not be displayed');
  1295. $oLog->Set('callstack', $e->getTrace());
  1296. $oLog->Set('data', $e->getContextData());
  1297. $oLog->DBInsertNoReload();
  1298. }
  1299. IssueLog::Error($e->getMessage());
  1300. }
  1301. // For debugging only
  1302. //throw $e;
  1303. }
  1304. catch(Exception $e)
  1305. {
  1306. require_once('../setup/setuppage.class.inc.php');
  1307. $oP = new SetupWebPage(Dict::S('UI:PageTitle:FatalError'));
  1308. $oP->add("<h1>".Dict::S('UI:FatalErrorMessage')."</h1>\n");
  1309. $oP->error(Dict::Format('UI:Error_Details', $e->getMessage()));
  1310. $oP->output();
  1311. if (MetaModel::IsLogEnabledIssue())
  1312. {
  1313. if (MetaModel::IsValidClass('EventIssue'))
  1314. {
  1315. $oLog = new EventIssue();
  1316. $oLog->Set('message', $e->getMessage());
  1317. $oLog->Set('userinfo', '');
  1318. $oLog->Set('issue', 'PHP Exception');
  1319. $oLog->Set('impact', 'Page could not be displayed');
  1320. $oLog->Set('callstack', $e->getTrace());
  1321. $oLog->Set('data', array());
  1322. $oLog->DBInsertNoReload();
  1323. }
  1324. IssueLog::Error($e->getMessage());
  1325. }
  1326. }
  1327. ?>