1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
|
%# BEGIN LICENSE BLOCK
%#
%# Copyright (c) 1996-2003 Jesse Vincent <jesse@bestpractical.com>
%#
%# (Except where explictly superceded by other copyright notices)
%#
%# This work is made available to you under the terms of Version 2 of
%# the GNU General Public License. A copy of that license should have
%# been provided with this software, but in any event can be snarfed
%# from www.gnu.org.
%#
%# This work is distributed in the hope that it will be useful, but
%# WITHOUT ANY WARRANTY; without even the implied warranty of
%# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
%# General Public License for more details.
%#
%# Unless otherwise specified, all modifications, corrections or
%# extensions to this work which alter its source code become the
%# property of Best Practical Solutions, LLC when submitted for
%# inclusion in the work.
%#
%#
%# END LICENSE BLOCK
<& /Elements/Header, Title => loc("Delegate rights") &>
<& /User/Elements/Tabs,
current_tab => 'User/Delegation.html',
Title => loc("Delegate rights") &>
<& /Elements/ListActions, actions => \@results &>
<form method="post">
<& Elements/DelegateRights, personalgroups => $personalgroups, objects => $objects, ObjectType => 'RT::System' &>
<& Elements/DelegateRights, personalgroups => $personalgroups, objects => $objects, ObjectType => 'RT::Queue' &>
<& Elements/DelegateRights, personalgroups => $personalgroups, objects => $objects, ObjectType => 'RT::Group' &>
<& /Elements/Submit &>
</form>
<%INIT>
my (@results, $arg);
foreach $arg (keys %ARGS) {
next unless ($arg =~ /^Delegate-Existing-ACE-(\d+)-to-(\d+)-as-(\d+)$/);
my $parent = $1;
my $principal = $2;
my $delegation = $3;
unless ($ARGS{"Delegate-ACE-$1-to-$2"}) {
my $ace_to_del = RT::ACE->new($session{'CurrentUser'});
$ace_to_del->Load($delegation);
my ($delval, $delmsg) = $ace_to_del->Delete();
push (@results, $delmsg);
}
}
foreach $arg (keys %ARGS) {
next unless ($arg =~ /^Delegate-ACE-(\d+)-to-(\d+)$/);
my $parent = $1;
my $principal = $2;
# if we already delegate it, we just don't care
next if (grep /^Delegate-Existing-ACE-$parent-to-$principal-/, keys %ARGS);
my $ace = RT::ACE->new($session{'CurrentUser'});
$ace->Load($1);
unless ($ace->Id) {
push (@results, loc('Right not found'));
next;
}
my ($delid, $delmsg) = $ace->Delegate(PrincipalId => $principal);
push (@results, $delmsg);
}
my $personalgroups = RT::Groups->new($session{'CurrentUser'});
$personalgroups->LimitToPersonalGroupsFor($session{'CurrentUser'}->PrincipalId);
my $objects;
my $acl = RT::ACL->new ($session{'CurrentUser'});
$acl->ExcludeDelegatedRights();
$acl->LimitToPrincipal(Id => $session{'CurrentUser'}->PrincipalId,
IncludeGroupMembership => 1
);
while(my $right = $acl->Next) {
push @{$objects->{$right->ObjectType}{$right->ObjectId}},$right;
}
</%INIT>
|
