Projekt

Obecné

Profil

Stáhnout (11 KB) Statistiky
| Větev: | Tag: | Revize:

freenetis-github/application/controllers/allowed_subnets.php @ 1065427b

8baed187 Michal Kliment
<?php defined('SYSPATH') or die('No direct script access.');
/*
* This file is part of open source system FreenetIS
* and it is released under GPLv3 licence.
*
* More info about licence can be found:
* http://www.gnu.org/licenses/gpl-3.0.html
*
* More info about project can be found:
* http://www.freenetis.org/
*
*/

/**
* Allowed subnet's controls and performs actions over connecting places of member.
* Each member can connect just to specified subnets at same time.
*
* Maximum of allowed connecting places at the same time
* is defined by Allowed_subnets_count_Controller.
*
* @author Michal Kliment
* @package Controller
*/
class Allowed_subnets_Controller extends Controller
{

/**
* Shows all allowed subnets of member
*
* @author Michal Kliment
* @param integer $member_id
*/
public function show_by_member($member_id = NULL)
{
// bad parameter
if (!$member_id || !is_numeric($member_id))
Controller::warning(PARAMETER);

$member = new Member_Model($member_id);

// record doesn't exist
if (!$member->id || $member->id == 1)
Controller::error(RECORD);

// access control
c1bdc1c4 Michal Kliment
if (!$this->acl_check_view('Allowed_subnets_Controller', 'allowed_subnet', $member->id))
8baed187 Michal Kliment
Controller::error(ACCESS);

// finds all allowed subnets of member
$allowed_subnet_model = new Allowed_subnet_Model();
$allowed_subnets = $allowed_subnet_model
->get_all_allowed_subnets_by_member($member->id, 'cidr');

// grid
$grid = new Grid('members', null, array
(
'separator' => '<br /><br />',
'use_paginator' => false,
'use_selector' => false,
));

$grid->add_new_button(
'allowed_subnets/add/' . $member->id,
__('Add new subnet'),
array
(
'title' => __('Add new subnet'),
'class' => 'popup_link'
)
);

$grid->link_field('subnet_id')
->link('subnets/show', 'subnet_name');
$grid->callback_field('cidr_address')
->label(__('Network address'))
->callback('callback::cidr_field');
$param = '';
if ($allowed_subnet_model->count_all_disabled_allowed_subnets_by_member($member->id))
{
$param = 'allowed_subnets/change/';
}
$grid->callback_field('enabled')
->callback('callback::enabled_field', $param)
->class('center');
$grid->grouped_action_field()
->add_action('id')
->icon_action('delete')
->url('allowed_subnets/delete')
->class('delete_link');

// load records
$grid->datasource($allowed_subnets);

// breadcrums
$breadcrumbs = breadcrumbs::add()
->link('members/show_all', 'Members',
$this->acl_check_view('Members_Controller', 'members'))
->disable_translation()
->link('members/show/' . $member->id, "ID $member->id - $member->name",
$this->acl_check_view('Members_Controller', 'members', $member->id))
->enable_translation()
->text('Allowed subnets')
->html();

// view
$view = new View('main');
$view->breadcrumbs = $breadcrumbs;
$view->title = __('Allowed subnets of member') . ' ' . $member->name;
$view->content = new View('allowed_subnets/show_by_member');
$view->content->member_id = $member->id;
$view->content->count = $member->allowed_subnets_count->count;
$view->content->headline = __('Allowed subnets of member') . ' ' . $member->name;
$view->content->table = $grid;
$view->render(TRUE);
}

/**
* Adds new allowed subnet to member
*
* @author Michal Kliment
* @param integer $member_id
*/
public function add($member_id = NULL)
{
// bad parameter
if (!$member_id || !is_numeric($member_id))
Controller::warning(PARAMETER);

$member = new Member_Model($member_id);

// member doesn't exist
if (!$member->id)
Controller::error(RECORD);

// access control
c1bdc1c4 Michal Kliment
if (!$this->acl_check_new('Allowed_subnets_Controller', 'allowed_subnet', $member->id))
8baed187 Michal Kliment
Controller::error(ACCESS);

$subnet_model = new Subnet_Model();

// finds all subnets without allowed subnets of member
$subnets = $subnet_model->get_all_subnets_without_allowed_subnets_of_member($member->id);
$arr_subnets = arr::merge(array
(
NULL => '----- ' . __('select subnet') . ' -----'
), arr::from_objects($subnets));

// selected subnet
$current_subnet = $subnet_model->get_subnet_without_allowed_subnets_of_member_by_ip_address(
$member->id, server::remote_addr()
);
$selected = ($current_subnet && $current_subnet->id) ? $current_subnet->id : 0;

// from
$form = new Forge();

$form->dropdown('subnet_id')
->label(__('Subnet') . ':')
->rules('required')
->options($arr_subnets)
->selected($selected)
->add_button('subnets');

$form->submit('Add');

// form is validate
if ($form->validate())
{
$form_data = $form->as_array();

$allowed_subnet = new Allowed_subnet_Model();
$allowed_subnet->member_id = $member->id;
$allowed_subnet->subnet_id = $form_data['subnet_id'];
$allowed_subnet->enabled = 1;

if ($allowed_subnet->save())
{
status::success('Subnet has been successfully saved.');
self::update_enabled($member->id);
}

$this->redirect('allowed_subnets/show_by_member/' . $member->id);
}
else
{
// bread crumbs
$breadcrumbs = breadcrumbs::add()
->link('members/show_all', 'Members',
$this->acl_check_view('Members_Controller', 'members'))
->disable_translation()
->link('members/show/' . $member->id, "ID $member->id - $member->name",
$this->acl_check_view('Members_Controller', 'members', $member->id))
->enable_translation()
->link('allowed_subnets/show_by_member/' . $member->id, 'Allowed subnets')
->text('Add new subnet')
->html();

$title = __('Add new allowed subnet to member') . ' ' . $member->name;

// view
$view = new View('main');
$view->breadcrumbs = $breadcrumbs;
$view->title = $title;
$view->content = new View('form');
$view->content->headline = $title;
$view->content->form = $form->html();
$view->render(TRUE);
}
}

/**
* Deletes subnet from allowed subnets of member
*
* @author Michal Kliment
* @param integer $allowed_subnet_id
*/
public function delete($allowed_subnet_id = NULL)
{
// bad parameter
if (!$allowed_subnet_id || !is_numeric($allowed_subnet_id))
Controller::warning(PARAMETER);

$allowed_subnet = new Allowed_subnet_Model($allowed_subnet_id);

// record doesn't exist
if (!$allowed_subnet->id)
Controller::error(RECORD);

$member_id = $allowed_subnet->member_id;

// access control
c1bdc1c4 Michal Kliment
if (!$this->acl_check_delete('Allowed_subnets_Controller', 'allowed_subnet', $member_id))
8baed187 Michal Kliment
Controller::error(ACCESS);

// success
if ($allowed_subnet->delete())
{
status::success('Subnet has been successfully deleted.');
self::update_enabled($member_id);
}

$this->redirect(Path::instance()->previous());
}

/**
* Toggle state of allowed subnet of member (from disable to enabled and from enabled to disable)
*
* @author Michal Kliment
* @param integer $allowed_subnet_id
*/
public function change($allowed_subnet_id = NULL)
{
// bad parameter
if (!$allowed_subnet_id || !is_numeric($allowed_subnet_id))
Controller::warning(PARAMETER);

$allowed_subnet = new Allowed_subnet_Model($allowed_subnet_id);

// record doesn't exist
if (!$allowed_subnet->id)
Controller::error(RECORD);

// access control
c1bdc1c4 Michal Kliment
if (!$this->acl_check_edit('Allowed_subnets_Controller', 'allowed_subnet', $allowed_subnet->member->id))
8baed187 Michal Kliment
Controller::error(ACCESS);

$allowed_subnet->enabled = !$allowed_subnet->enabled;
$allowed_subnet->save();

if ($allowed_subnet->enabled)
{
status::success('Subnet has been successfully enabled.');
self::update_enabled($allowed_subnet->member_id);
}
else
{
status::success('Subnet has been successfully disabled.');
self::update_enabled($allowed_subnet->member_id, NULL, array($allowed_subnet->subnet_id));
}

$this->redirect(Path::instance()->previous());
}

/**
* Updates states of allowed subnets of member
*
* @author Michal Kliment
* @param integer $member_id
* @param string | array $to_enable
c2e44ab0 Michal Kliment
* @param string | array $to_disable
* @param string | array $to_remove
* @param boolean $thow_ex_on_error Trow an exception if an error occure?
* @return boolean State of operation.
8baed187 Michal Kliment
*/
public static function update_enabled(
$member_id, $to_enable = array(), $to_disable = array(),
c2e44ab0 Michal Kliment
$to_remove = array(), $thow_ex_on_error = FALSE)
8baed187 Michal Kliment
{
// bad parameter
if (!$member_id)
return;

$member = new Member_Model($member_id);

// member doesn't exist
if (!$member->id)
return;

// to_enabled must be array
if (!is_array($to_enable))
$to_enable = array($to_enable);

if (!is_array($to_disable))
$to_disable = array($to_disable);

// finds all allowed subnet of member
$allowed_subnet_model = new Allowed_subnet_Model();
c2e44ab0 Michal Kliment
// gets number of maximum of acceptable repeating of operation
// after reaching of deadlock and time of waiting between
// other attempt to make transaction (#254)
$transaction_attempt_counter = 0;
$max_attempts = max(1, abs(Settings::get('db_trans_deadlock_repeats_count')));
$timeout = abs(Settings::get('db_trans_deadlock_repeats_timeout'));
// try to delete
while (TRUE)
8baed187 Michal Kliment
{
c2e44ab0 Michal Kliment
try
{
$allowed_subnet_model->transaction_start();
8baed187 Michal Kliment
c2e44ab0 Michal Kliment
$allowed_subnets = $allowed_subnet_model->where('member_id', $member->id)
->where('member_id', $member->id)
->orderby(array('enabled' => 'desc', 'last_update' => 'desc'))
->find_all();
8baed187 Michal Kliment
c2e44ab0 Michal Kliment
$arr_subnets = array();

// to_enabled have the hightest priority
foreach ($allowed_subnets as $allowed_subnet)
8baed187 Michal Kliment
{
c2e44ab0 Michal Kliment
if (in_array($allowed_subnet->subnet_id, $to_remove))
{
$allowed_subnet->delete_throwable();
continue;
}

if (!in_array($allowed_subnet->subnet_id, $to_enable) &&
!in_array($allowed_subnet->subnet_id, $to_disable))
{
$arr_subnets[] = $allowed_subnet->subnet_id;
}
8baed187 Michal Kliment
}

c2e44ab0 Michal Kliment
$arr_subnets = arr::merge($to_enable, $arr_subnets, $to_disable);

// maximum count of allowed subnets (0 = unlimited)
$max_enabled = ($member->allowed_subnets_count->count) ?
$member->allowed_subnets_count->count : count($arr_subnets);

$enabled = 0;
foreach ($arr_subnets as $subnet)
8baed187 Michal Kliment
{
c2e44ab0 Michal Kliment
if (!$subnet)
continue;
8baed187 Michal Kliment
c2e44ab0 Michal Kliment
if ($aid = $allowed_subnet_model->exists($member->id, $subnet))
{
$allowed_subnet_model->where('id', $aid)->find();
}
else
{
$allowed_subnet_model->clear();
$allowed_subnet_model->member_id = $member->id;
$allowed_subnet_model->subnet_id = $subnet;
}
8baed187 Michal Kliment
c2e44ab0 Michal Kliment
$allowed_subnet_model->enabled = ($enabled < $max_enabled);
8baed187 Michal Kliment
c2e44ab0 Michal Kliment
$enabled++;
8baed187 Michal Kliment
c2e44ab0 Michal Kliment
$allowed_subnet_model->save_throwable();
8baed187 Michal Kliment
}

c2e44ab0 Michal Kliment
$allowed_subnet_model->transaction_commit();
c1bdc1c4 Michal Kliment
c2e44ab0 Michal Kliment
return TRUE; // all OK
}
catch (Exception $e) // failed => rollback and wait 100ms before next attempt
{
$allowed_subnet_model->transaction_rollback();
c1bdc1c4 Michal Kliment
c2e44ab0 Michal Kliment
if (++$transaction_attempt_counter >= $max_attempts) // this was last attempt?
{
Log::add_exception($e);

if ($thow_ex_on_error)
{
throw $e;
}
else
{
return FALSE;
}
}
c1bdc1c4 Michal Kliment
c2e44ab0 Michal Kliment
usleep($timeout);
8baed187 Michal Kliment
}
}
}

}