/application/controllers/allowed_subnets.php - Komentovat - FreenetIS - Redmine

freenetis-github/application/controllers/allowed_subnets.php @ d5682887

-baed187
+<?php defined('SYSPATH') or die('No direct script access.');
 /*
  * This file is part of open source system FreenetIS
  * and it is released under GPLv3 licence.
+ *
  * More info about licence can be found:
  * http://www.gnu.org/licenses/gpl-3.0.html
+ *
  * More info about project can be found:
  * http://www.freenetis.org/
+ *
  */
 /**
  * Allowed subnet's controls and performs actions over connecting places of member.
  * Each member can connect just to specified subnets at same time.
+ *
  * Maximum of allowed connecting places at the same time
  * is defined by Allowed_subnets_count_Controller.
+ *
  * @author	Michal Kliment
  * @package Controller
  */
 class Allowed_subnets_Controller extends Controller
+{
 	/**
 	 * Shows all allowed subnets of member
+	 *
 	 * @author Michal Kliment
 	 * @param integer $member_id
 	 */
 	public function show_by_member($member_id = NULL)
+	{
 		// bad parameter
 		if (!$member_id || !is_numeric($member_id))
 			Controller::warning(PARAMETER);
 		$member = new Member_Model($member_id);
 		// record doesn't exist
 		if (!$member->id || $member->id == 1)
 			Controller::error(RECORD);
 		// access control
-            c1bdc1c4
+		if (!$this->acl_check_view('Allowed_subnets_Controller', 'allowed_subnet', $member->id))
-baed187
+			Controller::error(ACCESS);
 		// finds all allowed subnets of member
 		$allowed_subnet_model = new Allowed_subnet_Model();
 		$allowed_subnets = $allowed_subnet_model
 			->get_all_allowed_subnets_by_member($member->id, 'cidr');
 		// grid
 		$grid = new Grid('members', null, array
+		(
 				'separator'		=> '<br /><br />',
 				'use_paginator'	=> false,
 				'use_selector'	=> false,
 		));
 		$grid->add_new_button(
 				'allowed_subnets/add/' . $member->id,
 				__('Add new subnet'),
 				array
+				(
 					'title' => __('Add new subnet'),
 					'class' => 'popup_link'
+				)
 		);
 		$grid->link_field('subnet_id')
 				->link('subnets/show', 'subnet_name');
 		$grid->callback_field('cidr_address')
 				->label(__('Network address'))
 				->callback('callback::cidr_field');
 		$param = '';
 		if ($allowed_subnet_model->count_all_disabled_allowed_subnets_by_member($member->id))
+		{
 			$param = 'allowed_subnets/change/';
+		}
 		$grid->callback_field('enabled')
 				->callback('callback::enabled_field', $param)
-ac9009
+				->label('Turned on')
-baed187
+				->class('center');
 		$grid->grouped_action_field()
 				->add_action('id')
 				->icon_action('delete')
 				->url('allowed_subnets/delete')
 				->class('delete_link');
 		// load records
 		$grid->datasource($allowed_subnets);
 		// breadcrums
 		$breadcrumbs = breadcrumbs::add()
 				->link('members/show_all', 'Members',
 						$this->acl_check_view('Members_Controller', 'members'))
 				->disable_translation()
 				->link('members/show/' . $member->id, "ID $member->id - $member->name",
 						$this->acl_check_view('Members_Controller', 'members', $member->id))
 				->enable_translation()
 				->text('Allowed subnets')
 				->html();
 		// view
 		$view = new View('main');
 		$view->breadcrumbs = $breadcrumbs;
 		$view->title = __('Allowed subnets of member') . ' ' . $member->name;
 		$view->content = new View('allowed_subnets/show_by_member');
 		$view->content->member_id = $member->id;
 		$view->content->count = $member->allowed_subnets_count->count;
 		$view->content->headline = __('Allowed subnets of member') . ' ' . $member->name;
 		$view->content->table = $grid;
 		$view->render(TRUE);
+	}
 	/**
 	 * Adds new allowed subnet to member
+	 *
 	 * @author Michal Kliment
 	 * @param integer $member_id
 	 */
 	public function add($member_id = NULL)
+	{
 		// bad parameter
 		if (!$member_id || !is_numeric($member_id))
 			Controller::warning(PARAMETER);
 		$member = new Member_Model($member_id);
 		// member doesn't exist
 		if (!$member->id)
 			Controller::error(RECORD);
 		// access control
-            c1bdc1c4
+		if (!$this->acl_check_new('Allowed_subnets_Controller', 'allowed_subnet', $member->id))
-baed187
+			Controller::error(ACCESS);
 		$subnet_model = new Subnet_Model();
 		// finds all subnets without allowed subnets of member
 		$subnets = $subnet_model->get_all_subnets_without_allowed_subnets_of_member($member->id);
 		$arr_subnets = arr::merge(array
+		(
 			NULL => '----- ' . __('select subnet') . ' -----'
 		), arr::from_objects($subnets));
 		// selected subnet
 		$current_subnet = $subnet_model->get_subnet_without_allowed_subnets_of_member_by_ip_address(
 				$member->id, server::remote_addr()
 		);
 		$selected = ($current_subnet && $current_subnet->id) ? $current_subnet->id : 0;
 		// from
 		$form = new Forge();
 		$form->dropdown('subnet_id')
 				->label(__('Subnet') . ':')
 				->rules('required')
 				->options($arr_subnets)
 				->selected($selected)
 				->add_button('subnets');
 		$form->submit('Add');
 		// form is validate
 		if ($form->validate())
+		{
 			$form_data = $form->as_array();
 			$allowed_subnet = new Allowed_subnet_Model();
 			$allowed_subnet->member_id = $member->id;
 			$allowed_subnet->subnet_id = $form_data['subnet_id'];
 			$allowed_subnet->enabled = 1;
 			if ($allowed_subnet->save())
+			{
 				status::success('Subnet has been successfully saved.');
 				self::update_enabled($member->id);
+			}
 			$this->redirect('allowed_subnets/show_by_member/' . $member->id);
+		}
 		else
+		{
 			// bread crumbs
 			$breadcrumbs = breadcrumbs::add()
 					->link('members/show_all', 'Members',
 							$this->acl_check_view('Members_Controller', 'members'))
 					->disable_translation()
 					->link('members/show/' . $member->id, "ID $member->id - $member->name",
 							$this->acl_check_view('Members_Controller', 'members', $member->id))
 					->enable_translation()
 					->link('allowed_subnets/show_by_member/' . $member->id, 'Allowed subnets')
 					->text('Add new subnet')
 					->html();
 			$title = __('Add new allowed subnet to member') . ' ' . $member->name;
 			// view
 			$view = new View('main');
 			$view->breadcrumbs = $breadcrumbs;
 			$view->title = $title;
 			$view->content = new View('form');
 			$view->content->headline = $title;
 			$view->content->form = $form->html();
 			$view->render(TRUE);
+		}
+	}
 	/**
 	 *  Deletes subnet from allowed subnets of member
+	 *
 	 * @author Michal Kliment
 	 * @param integer $allowed_subnet_id
 	 */
 	public function delete($allowed_subnet_id = NULL)
+	{
 		// bad parameter
 		if (!$allowed_subnet_id || !is_numeric($allowed_subnet_id))
 			Controller::warning(PARAMETER);
 		$allowed_subnet = new Allowed_subnet_Model($allowed_subnet_id);
 		// record doesn't exist
 		if (!$allowed_subnet->id)
 			Controller::error(RECORD);
 		$member_id = $allowed_subnet->member_id;
 		// access control
-            c1bdc1c4
+		if (!$this->acl_check_delete('Allowed_subnets_Controller', 'allowed_subnet', $member_id))
-baed187
+			Controller::error(ACCESS);
 		// success
 		if ($allowed_subnet->delete())
+		{
 			status::success('Subnet has been successfully deleted.');
 			self::update_enabled($member_id);
+		}
 		$this->redirect(Path::instance()->previous());
+	}
 	/**
 	 * Toggle state of allowed subnet of member (from disable to enabled and from enabled to disable)
+	 *
 	 * @author Michal Kliment
 	 * @param integer $allowed_subnet_id
 	 */
 	public function change($allowed_subnet_id = NULL)
+	{
 		// bad parameter
 		if (!$allowed_subnet_id || !is_numeric($allowed_subnet_id))
 			Controller::warning(PARAMETER);
 		$allowed_subnet = new Allowed_subnet_Model($allowed_subnet_id);
 		// record doesn't exist
 		if (!$allowed_subnet->id)
 			Controller::error(RECORD);
 		// access control
-            c1bdc1c4
+		if (!$this->acl_check_edit('Allowed_subnets_Controller', 'allowed_subnet', $allowed_subnet->member->id))
-baed187
+			Controller::error(ACCESS);
 		$allowed_subnet->enabled = !$allowed_subnet->enabled;
 		$allowed_subnet->save();
 		if ($allowed_subnet->enabled)
+		{
 			status::success('Subnet has been successfully enabled.');
 			self::update_enabled($allowed_subnet->member_id);
+		}
 		else
+		{
 			status::success('Subnet has been successfully disabled.');
 			self::update_enabled($allowed_subnet->member_id, NULL, array($allowed_subnet->subnet_id));
+		}
 		$this->redirect(Path::instance()->previous());
+	}
 	/**
 	 * Updates states of allowed subnets of member
+	 *
 	 * @author Michal Kliment
 	 * @param integer $member_id
 	 * @param string | array $to_enable
-            c2e44ab0
+	 * @param string | array $to_disable
 	 * @param string | array $to_remove
 	 * @param boolean $thow_ex_on_error Trow an exception if an error occure?
 	 * @return boolean State of operation.
-baed187
+	 */
 	public static function update_enabled(
 			$member_id, $to_enable = array(), $to_disable = array(),
-            c2e44ab0
+			$to_remove = array(), $thow_ex_on_error = FALSE)
-baed187
+            Michal Kliment
 		// bad parameter
 		if (!$member_id)
 			return;
 		$member = new Member_Model($member_id);
 		// member doesn't exist
 		if (!$member->id)
 			return;
 		// to_enabled must be array
 		if (!is_array($to_enable))
 			$to_enable = array($to_enable);
 		if (!is_array($to_disable))
 			$to_disable = array($to_disable);
 		// finds all allowed subnet of member
 		$allowed_subnet_model = new Allowed_subnet_Model();
-            c2e44ab0
+            Michal Kliment
 		// gets number of maximum of acceptable repeating of operation
 		// after reaching of deadlock and time of waiting between
 		// other attempt to make transaction (#254)
 		$transaction_attempt_counter = 0;
 		$max_attempts = max(1, abs(Settings::get('db_trans_deadlock_repeats_count')));
 		$timeout = abs(Settings::get('db_trans_deadlock_repeats_timeout'));
 		// try to delete
 		while (TRUE)
-baed187
+            Michal Kliment
-            c2e44ab0
+			try
+			{
 				$allowed_subnet_model->transaction_start();
-baed187
+            Michal Kliment
-            c2e44ab0
+				$allowed_subnets = $allowed_subnet_model->where('member_id', $member->id)
 						->where('member_id', $member->id)
 						->orderby(array('enabled' => 'desc', 'last_update' => 'desc'))
 						->find_all();
-baed187
+            Michal Kliment
-            c2e44ab0
+				$arr_subnets = array();
 				// to_enabled have the hightest priority
 				foreach ($allowed_subnets as $allowed_subnet)
-baed187
+            Michal Kliment
-            c2e44ab0
+					if (in_array($allowed_subnet->subnet_id, $to_remove))
+					{
 						$allowed_subnet->delete_throwable();
 						continue;
+					}
 					if (!in_array($allowed_subnet->subnet_id, $to_enable) &&
 						!in_array($allowed_subnet->subnet_id, $to_disable))
+					{
 						$arr_subnets[] = $allowed_subnet->subnet_id;
+					}
-baed187
+            Michal Kliment
-            c2e44ab0
+				$arr_subnets = arr::merge($to_enable, $arr_subnets, $to_disable);
 				// maximum count of allowed subnets (0 = unlimited)
 				$max_enabled = ($member->allowed_subnets_count->count) ?
 						$member->allowed_subnets_count->count : count($arr_subnets);
 				$enabled = 0;
 				foreach ($arr_subnets as $subnet)
-baed187
+            Michal Kliment
-            c2e44ab0
+					if (!$subnet)
 						continue;
-baed187
+            Michal Kliment
-            c2e44ab0
+					if ($aid = $allowed_subnet_model->exists($member->id, $subnet))
+					{
 						$allowed_subnet_model->where('id', $aid)->find();
+					}
 					else
+					{
 						$allowed_subnet_model->clear();
 						$allowed_subnet_model->member_id = $member->id;
 						$allowed_subnet_model->subnet_id = $subnet;
+					}
-baed187
+            Michal Kliment
-            c2e44ab0
+					$allowed_subnet_model->enabled = ($enabled < $max_enabled);
-baed187
+            Michal Kliment
-            c2e44ab0
+					$enabled++;
-baed187
+            Michal Kliment
-            c2e44ab0
+					$allowed_subnet_model->save_throwable();
-baed187
+            Michal Kliment
-            c2e44ab0
+				$allowed_subnet_model->transaction_commit();
-            c1bdc1c4
+            Michal Kliment
-            c2e44ab0
+				return TRUE; // all OK
+			}
 			catch (Exception $e) // failed => rollback and wait 100ms before next attempt
+			{
 				$allowed_subnet_model->transaction_rollback();
-            c1bdc1c4
+            Michal Kliment
-            c2e44ab0
+				if (++$transaction_attempt_counter >= $max_attempts) // this was last attempt?
+				{
 					Log::add_exception($e);
 					if ($thow_ex_on_error)
+					{
 						throw $e;
+					}
 					else
+					{
 						return FALSE;
+					}
+				}
-            c1bdc1c4
+            Michal Kliment
-            c2e44ab0
+				usleep($timeout);
-baed187
+            Michal Kliment
+		}
+	}
+}

Projekt

Obecné

Profil

FreenetIS