my $DUMMY_PASSWORD = '>>NOt REALly a PaSSwoRd<<';
has formCfg => sub {
my $self = shift;
if ($self->config->{type} eq 'edit' and not $self->args->{selection}{cbuser_id}){
return [{
label => trm('Error'),
widget => 'header',
note => trm('No user selected.')
}];
}
return [
$self->config->{type} eq 'edit' ? {
key => 'cbuser_id',
label => trm('UserId'),
widget => 'hiddenText',
set => {
readOnly => true,
},
} : (),
{
key => 'cbuser_login',
label => trm('Username'),
widget => 'text',
set => {
required => true,
readOnly => $self->user->may('admin') ? false : true
},
},
{
key => 'cbuser_password',
label => trm('Password'),
widget => 'password',
set => {
required => true,
},
},
{
key => 'cbuser_password_check',
label => trm('Password Again'),
widget => 'password',
set => {
required => true,
},
},
{
key => 'cbuser_given',
label => trm('Given Name'),
widget => 'text',
set => {
required => true,
readOnly => $self->user->may('admin') ? false : true
},
},
{
key => 'cbuser_family',
label => trm('Family Name'),
widget => 'text',
set => {
required => true,
readOnly => $self->user->may('admin') ? false : true
}
},
$self->user->may('admin') ? (
{
key => 'cbuser_note',
label => trm('Note'),
widget => 'textArea',
set => {
placeholder => 'some extra information about this user',
}
} ) : (),
@{$self->rightsCheckBoxes}
];
};
has rightsCheckBoxes => sub {
my $self = shift;
return [] if not $self->user->may('admin');
my $db = $self->user->mojoSqlDb;
my $rightTbl= $db->dbh->quote_identifier('cbright');
my $rights = $db->dbh->selectall_arrayref(<<"SQL",{Slice => {}});
SELECT cbright_id,cbright_label FROM $rightTbl
SQL
my @checkboxes = {
widget => 'header',
label => 'Permissions'
};
my $adminId = $self->user->db->lookUp('cbright','key','admin');
for (sort {$a->{cbright_label} cmp $b->{cbright_label}} @$rights){
push @checkboxes,
{
key => 'cbright_id_'.$_->{cbright_id},
widget => 'checkBox',
label => $_->{cbright_label},
}
}
return \@checkboxes;
};
has actionCfg => sub {
my $self = shift;
my $mode = $self->config->{mode} // 'default';
my $type = $self->config->{type} // 'new';
my $handler = sub {
my $self = shift;
my $args = shift;
my $admin = ($self->user->may('admin') or $mode eq 'init');
my @fields = $admin ? (qw(login family given note)) : ();
my $itsMine = $args->{cbuser_id} == $self->user->userId;
die mkerror(2847,trm("You can only edit your own stuff unless you have admin permissions."))
unless $admin or $itsMine;
if ($args->{cbuser_password} ne $DUMMY_PASSWORD){
die mkerror(2847,trm("The password instances did not match."))
if $args->{cbuser_password} ne $args->{cbuser_password_check};
push @fields, 'password';
}
$args->{cbuser_password} = hmac_sha1_sum($args->{cbuser_password});
my $db = $self->user->db;
$args->{cbuser_id} = $db->updateOrInsertData('cbuser',{
map { $_ => $args->{'cbuser_'.$_} } @fields
},$args->{cbuser_id} ? { id => int($args->{cbuser_id}) } : ());
my $adminId = $db->fetchValue('cbright',{key=>'admin'},'id');
if ($admin){
for (keys %$args){
next if not /^cbright_id_(\d+)$/;
my $right_id = $1;
my $match = {
cbuser => $args->{cbuser_id},
cbright => $right_id
};
if ($args->{$_}
or ( $mode eq 'init' and $right_id == $adminId )
or ( $itsMine and $right_id == $adminId )
){
$db->updateOrInsertData('cbuserright',$match,$match);
}
else {
$db->deleteDataWhere('cbuserright',$match);
}
}
}
if ($self->controller and $self->controller->can('runEventActions')){
$self->controller->runEventActions('changeConfig');
}
return {
action => $mode eq 'init' ? 'logout' : 'dataSaved'
};
};
return [
{
label => $mode eq 'init'
? trm('Create Admin Account')
: $type eq 'edit'
? trm('Save Changes')
: trm('Add User'),
action => 'submit',
key => 'save',
actionHandler => $handler
}
];
};
has grammar => sub {
my $self = shift;
$self->mergeGrammar(
$self->SUPER::grammar,
{
_doc => "User Form Configuration",
_vars => [ qw(type mode) ],
type => {
_doc => 'type of form to show: edit, add',
_re => '(edit|add)'
},
mode => {
_doc => 'In init mode the for will run for the __ROOT user and thus allow the creation of the initial account',
_re => '(init|default)',
_re_error => 'Pick one of init or default',
_default => 'default'
}
},
);
};
has checkAccess => sub {
my $self = shift;
my $userId = $self->user->userId;
my $mode = $self->config->{mode} // 'default';
if ($mode eq 'init'){
return ($userId and $userId eq '__ROOT');
}
return $self->user;
};
sub getAllFieldValues {
my $self = shift;
my $args = shift;
return {} if $self->config->{type} ne 'edit';
my $id = $args->{selection}{cbuser_id} // $self->user->userId;
return {} unless $id;
die mkerror(2847,"You can only edit your own stuff unless you have admin permissions.")
if not ( $self->user->may('admin') or $id == $self->user->userId );
my $data = $self->user->db->fetchRow('cbuser',{id => $id});
$data->{cbuser_password} = $DUMMY_PASSWORD;
$data->{cbuser_password_check} = $DUMMY_PASSWORD;
my $db = $self->user->mojoSqlDb;
my $rightTbl= $db->dbh->quote_identifier('cbright');
my $rights = $db->dbh->selectall_arrayref(<<"SQL",{Slice => {}}, $id);
SELECT cbright_id, cbuserright_id IS NOT NULL as value
FROM $rightTbl LEFT JOIN cbuserright ON (cbright_id = cbuserright_cbright AND cbuserright_cbuser = ?)
SQL
for (@$rights){
$data->{'cbright_id_'.$_->{cbright_id}} = $_->{value} ? 1 : 0;
}
return $data;
}
1;