%# BEGIN BPS TAGGED BLOCK {{{
%# 
%# COPYRIGHT:
%#  
%# This software is Copyright (c) 1996-2005 Best Practical Solutions, LLC 
%#                                          <jesse@bestpractical.com>
%# 
%# (Except where explicitly superseded by other copyright notices)
%# 
%# 
%# LICENSE:
%# 
%# This work is made available to you under the terms of Version 2 of
%# the GNU General Public License. A copy of that license should have
%# been provided with this software, but in any event can be snarfed
%# from www.gnu.org.
%# 
%# This work is distributed in the hope that it will be useful, but
%# WITHOUT ANY WARRANTY; without even the implied warranty of
%# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
%# General Public License for more details.
%# 
%# You should have received a copy of the GNU General Public License
%# along with this program; if not, write to the Free Software
%# Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
%# 
%# 
%# CONTRIBUTION SUBMISSION POLICY:
%# 
%# (The following paragraph is not intended to limit the rights granted
%# to you to modify and distribute this software under the terms of
%# the GNU General Public License and is only of importance to you if
%# you choose to contribute your changes and enhancements to the
%# community by submitting them to Best Practical Solutions, LLC.)
%# 
%# By intentionally submitting any modifications, corrections or
%# derivatives to this work, or any other work intended for use with
%# Request Tracker, to Best Practical Solutions, LLC, you confirm that
%# you are the copyright holder for those contributions and you grant
%# Best Practical Solutions,  LLC a nonexclusive, worldwide, irrevocable,
%# royalty-free, perpetual, license to use, copy, create derivative
%# works based on those contributions, and sublicense and distribute
%# those contributions and any derivatives thereof.
%# 
%# END BPS TAGGED BLOCK }}}
<& /Elements/Header, Title => loc("Delegate rights") &>
<& /User/Elements/Tabs, 
    current_tab => 'User/Delegation.html', 
    Title => loc("Delegate rights") &>

<& /Elements/ListActions, actions => \@results &>

<form method="post">
<& Elements/DelegateRights, personalgroups => $personalgroups, objects => $objects, ObjectType => 'RT::System' &>
<& Elements/DelegateRights, personalgroups => $personalgroups, objects => $objects, ObjectType => 'RT::Queue' &>
<& Elements/DelegateRights, personalgroups => $personalgroups, objects => $objects, ObjectType => 'RT::Group' &>

<& /Elements/Submit, Label => loc('Modify Rights') &>
</form>
<%INIT>

my (@results, $arg);
foreach $arg (keys %ARGS) {
    next unless ($arg =~ /^Delegate-Existing-ACE-(\d+)-to-(\d+)-as-(\d+)$/);
       my $parent = $1;
       my $principal = $2;
       my $delegation = $3;
       unless ($ARGS{"Delegate-ACE-$1-to-$2"}) {
            my $ace_to_del = RT::ACE->new($session{'CurrentUser'});
            $ace_to_del->Load($delegation);
            my ($delval, $delmsg) = $ace_to_del->Delete();
            push (@results, $delmsg);
       }
}

foreach $arg (keys %ARGS) { 
    next unless ($arg =~ /^Delegate-ACE-(\d+)-to-(\d+)$/);
    my $parent = $1;
    my $principal = $2;
    # if we already delegate it, we just don't care
    next if (grep /^Delegate-Existing-ACE-$parent-to-$principal-/, keys %ARGS);
    my $ace = RT::ACE->new($session{'CurrentUser'});
    $ace->Load($1);
    unless ($ace->Id) {
        push (@results, loc('Right not found'));
        next;
    }
    my ($delid, $delmsg) = $ace->Delegate(PrincipalId => $principal);
    push (@results, $delmsg);
}

my $personalgroups = RT::Groups->new($session{'CurrentUser'});
$personalgroups->LimitToPersonalGroupsFor($session{'CurrentUser'}->PrincipalId);

my $objects;
my $acl = RT::ACL->new ($session{'CurrentUser'});
$acl->ExcludeDelegatedRights();
$acl->LimitToPrincipal(Id => $session{'CurrentUser'}->PrincipalId, 
                       IncludeGroupMembership => 1
                       );

while(my $right = $acl->Next) {
       push @{$objects->{$right->ObjectType}{$right->ObjectId}},$right;
}
</%INIT>