pfSense

/*

 * system_groupmanager.php

 *

 * part of pfSense (https://www.pfsense.org)

 * Copyright (c) 2004-2016 Rubicon Communications, LLC (Netgate)

 * Copyright (c) 2005 Paul Taylor <paultaylor@winn-dixie.com>

 *

 * originally based on m0n0wall (http://m0n0.ch/wall)

 *

 * Licensed under the Apache License, Version 2.0 (the "License");

 *

 * http://www.apache.org/licenses/LICENSE-2.0

 *

 * Unless required by applicable law or agreed to in writing, software

 */

##|+PRIV

##|*NAME=System: Group Manager

##|*WARN=standard-warning-root

##|*MATCH=system_groupmanager.php*

require_once("guiconfig.inc");

require_once("pfsense-utils.inc");

if (!is_array($config['system']['group'])) {

	$config['system']['group'] = array();

}

$a_group = &$config['system']['group'];

unset($id);

$id = $_REQUEST['groupid'];

function cpusercmp($a, $b) {

function admin_groups_sort() {

if ($_POST['act'] == "delgroup") {

	if (!isset($id) || !isset($_REQUEST['groupname']) || !isset($a_group[$id]) || ($_REQUEST['groupname'] != $a_group[$id]['name'])) {

		pfSenseHeader("system_groupmanager.php");

	local_group_del($a_group[$id]);

	write_config();

	$savemsg = sprintf(gettext("Group %s successfully deleted."), $groupdeleted);

}

if ($_POST['act'] == "delpriv") {

	if (!isset($id) || !isset($a_group[$id])) {

		pfSenseHeader("system_groupmanager.php");

	$privdeleted = $priv_list[$a_group[$id]['priv'][$_REQUEST['privid']]]['name'];

	if (is_array($a_group[$id]['member'])) {

			if ($user) {

				local_user_set($user);

			}

		}

	}

	write_config();

	$act = "edit";

	$savemsg = sprintf(gettext("Privilege %s successfully deleted."), $privdeleted);

}

if ($act == "edit") {

		$pconfig['name'] = $a_group[$id]['name'];

		$pconfig['gid'] = $a_group[$id]['gid'];

		$pconfig['gtype'] = empty($a_group[$id]['scope']) ? "local" : $a_group[$id]['scope'];

		$pconfig['description'] = $a_group[$id]['description'];

		$pconfig['members'] = $a_group[$id]['member'];

	}

if (isset($_POST['dellall_x'])) {

	$del_groups = $_POST['delete_check'];

	if (!empty($del_groups)) {

				local_group_del($a_group[$groupid]);

		$savemsg = gettext("Selected groups removed successfully.");

		write_config($savemsg);

if (isset($_POST['save'])) {

	unset($input_errors);

	$reqdfieldsn = array(gettext("Group Name"));

	do_input_validation($_POST, $reqdfields, $reqdfieldsn, $input_errors);

	if ($_POST['gtype'] != "remote") {

		if (preg_match("/[^a-zA-Z0-9\.\-_]/", $_POST['groupname'])) {

			$input_errors[] = sprintf(gettext("The (%s) group name contains invalid characters."), $_POST['gtype']);

		}

			$input_errors[] = sprintf(gettext("The (%s) group name contains invalid characters."), $_POST['gtype']);

		}

	}

	if (strlen($_POST['groupname']) > 16) {

		$input_errors[] = gettext("The group name is longer than 16 characters.");

	}

	/* Check the POSTed members to ensure they are valid and exist */

	if (is_array($_POST['members'])) {

		foreach ($_POST['members'] as $newmember) {

		}

	if (!$input_errors && !(isset($id) && $a_group[$id])) {

				$input_errors[] = gettext("Another entry with the same group name already exists.");

				break;

	if (!$input_errors) {

		$group = array();

		if (isset($id) && $a_group[$id]) {

			$group = $a_group[$id];

		}

		$group['name'] = $_POST['groupname'];

		$group['scope'] = $_POST['gtype'];

		if (empty($_POST['members'])) {

			unset($group['member']);

		} else if ($group['gid'] != 1998) { // all group

			$group['member'] = $_POST['members'];

		}

		if (isset($id) && $a_group[$id]) {

			$a_group[$id] = $group;

		} else {

			$group['gid'] = $config['system']['nextgid']++;

			$a_group[] = $group;

		}

		admin_groups_sort();

		local_group_set($group);

		if (is_array($group['member'])) {

				if (in_array($user['uid'], $group['member'])) {

					local_user_set($user);

				}

			}

		}

		write_config();

		header("Location: system_groupmanager.php");

}

function build_priv_table() {

	$privhtml .=			'<tr>';

	$privhtml .=		'</thead>';

	$user_has_root_priv = false;

	foreach (get_user_privdesc($a_group[$id]) as $i => $priv) {

		$privhtml .=			'<td>' . htmlspecialchars($priv['descr']);

			$privhtml .=			' ' . gettext('(admin privilege)');

			$user_has_root_priv = true;

		$privhtml .=			'<td><a class="fa fa-trash" title="' . gettext('Delete Privilege') . '"	href="system_groupmanager.php?act=delpriv&amp;groupid=' . $id . '&amp;privid=' . $i . '" usepost></a></td>';

		$privhtml .=		'</tr>';

	}

	if ($user_has_root_priv) {

		$privhtml .=				'<b>' . gettext('Security notice: Users in this group effectively have administrator-level access') . '</b>';

		$privhtml .=			'</td>';

	}

	$privhtml .=		'</tbody>';

	$privhtml .=	'<a href="system_groupmanager_addprivs.php?groupid=' . $id . '" class="btn btn-success"><i class="fa fa-plus icon-embed-btn"></i>' . gettext("Add") . '</a>';

	$privhtml .= '</nav>';

$pgtitle = array(gettext("System"), gettext("User Manager"), gettext("Groups"));

$pglinks = array("", "system_usermanager.php", "system_groupmanager.php");

	$pglinks[] = "@self";

}

include("head.inc");

if ($input_errors) {

	print_input_errors($input_errors);

}

if ($savemsg) {

	print_info_box($savemsg, 'success');

}

$tab_array[] = array(gettext("Authentication Servers"), false, "system_authservers.php");

display_top_tabs($tab_array);

if (!($act == "new" || $act == "edit")) {

?>

<div class="panel panel-default">

			<table class="table table-striped table-hover table-condensed sortable-theme-bootstrap table-rowdblclickedit" data-sortable>

				<thead>

<?php

	foreach ($a_group as $i => $group):

			$groupcount = count($config['system']['user']);

		} else {

			$groupcount = count($group['member']);

		}

?>

					<tr>

							<a class="fa fa-pencil" title="<?=gettext("Edit group"); ?>" href="?act=edit&amp;groupid=<?=$i?>"></a>

							<?php if ($group['scope'] != "system"): ?>

								<a class="fa fa-trash"	title="<?=gettext("Delete group")?>" href="?act=delgroup&amp;groupid=<?=$i?>&amp;groupname=<?=$group['name']?>" usepost></a>

							<?php endif;?>

<?php

?>

				</tbody>

	</div>

</div>

	<a href="?act=new" class="btn btn-success btn-sm">

		<i class="fa fa-plus icon-embed-btn"></i>

<?php

}

$form = new Form;

if (isset($id) && $a_group[$id]) {

	$form->addGlobal(new Form_Input(

}

$section = new Form_Section('Group Properties');

$section->addInput($input = new Form_Input(

	'groupname',

	'*Group name',

	'text',

if ($pconfig['gtype'] == "system") {

	$input->setReadonly();

		'*Scope',

		'text',

		'*Scope',

		$pconfig['gtype'],

		["local" => gettext("Local"), "remote" => gettext("Remote")]

	));

}

$section->addInput(new Form_Input(

))->setHelp('Group description, for administrative information only');

$form->add($section);

if ($pconfig['gid'] != 1998) { // all users group

	// ==== Group membership ==================================================

		if (is_array($pconfig['members']) && in_array($user['uid'], $pconfig['members'])) {

			$usersGroups[ $user['uid'] ] = $user['name'];	// Add it to the user's list

		} else {

			$systemGroups[ $user['uid'] ] = $user['name']; // Add it to the 'not a member of' list

		}

	}

	))->setHelp('Not members');

	$group->add(new Form_Select(

		'members',

		null,

		true

	))->setHelp('Members');

		'Move to "Members"',

		null,

	))->setAttribute('type','button')->removeClass('btn-primary')->addClass('btn-info btn-sm');

		'Move to "Not members',

		null,

	))->setAttribute('type','button')->removeClass('btn-primary')->addClass('btn-info btn-sm');

	$group->setHelp('Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items.');

	$section->add($group);

}

if ($_POST['act'] != "new") {

	$section = new Form_Section('Assigned Privileges');

		build_priv_table()

	));

	$form->add($section);

}

print $form;

?>

<script type="text/javascript">

//<![CDATA[

events.push(function() {

	$('form').submit(function() {

		AllServers($('[name="members[]"] option'), true);

include('foot.inc');