pfSense

<?php

 * Copyright (c) 2008 Shrew Soft Inc

 * All rights reserved.

 * Copyright (c) 2003-2004 Manuel Kasper <mk@neon1.net>.

 * All rights reserved.

 * you may not use this file except in compliance with the License.

 * You may obtain a copy of the License at

 * distributed under the License is distributed on an "AS IS" BASIS,

 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

 * See the License for the specific language governing permissions and

 * limitations under the License.

##|*IDENT=page-system-groupmanager

##|*DESCR=Allow access to the 'System: Group Manager' page.

##|-PRIV

$logging_prefix = gettext("Local User Database");

$act = (isset($_REQUEST['act']) ? $_REQUEST['act'] : '');

	return strcasecmp($a['name'], $b['name']);

}

	global $a_group;

	if (!is_array($a_group)) {

		return;

	}

	usort($a_group, "cpusercmp");

}

 * Check user privileges to test if the user is allowed to make changes.

 * Otherwise users can end up in an inconsistent state where some changes are

 * performed and others denied. See https://redmine.pfsense.org/issues/9259

 */

phpsession_begin();

$guiuser = getUserEntry($_SESSION['Username']);

$read_only = (is_array($guiuser) && userHasPrivilege($guiuser, "user-config-readonly"));

phpsession_end();

if (!empty($_POST) && $read_only) {

	$input_errors = array(gettext("Insufficient privileges to make the requested change (read only)."));

}

if (($_POST['act'] == "delgroup") && !$read_only) {

	    !isset($a_group[$id]) ||

	    ($_REQUEST['groupname'] != $a_group[$id]['name'])) {

		exit;

	}

	$groupdeleted = $a_group[$id]['name'];

	unset($a_group[$id]);

	 * Reindex the array to avoid operating on an incorrect index

	 * https://redmine.pfsense.org/issues/7733

	 */

	    $groupdeleted);

	syslog($logging_level, "{$logging_prefix}: {$savemsg}");

		exit;

	}

	    $priv_list[$a_group[$id]['priv'][$_REQUEST['privid']]]['name'];

		foreach ($a_group[$id]['member'] as $uid) {

			$user = getUserEntryByUID($uid);

	    $privdeleted, $a_group[$id]['name']);

	syslog($logging_level, "{$logging_prefix}: {$savemsg}");

	if (isset($id) && isset($a_group[$id])) {

		    ? "local" : $a_group[$id]['scope'];

		$pconfig['priv'] = $a_group[$id]['priv'];

}

		foreach ($del_groups as $groupid) {

			    $a_group[$groupid]['scope'] != "system") {

				unset($a_group[$groupid]);

			}

		}

		    (count($deleted_groups) == 1)

		    ? gettext("group") : gettext("groups"),

		    implode(', ', $deleted_groups));

		/*

		 * Reindex the array to avoid operating on an incorrect index

		 * https://redmine.pfsense.org/issues/7733

		 */

}

	$pconfig = $_POST;

	/* input validation */

	$reqdfields = explode(" ", "groupname");

			    "The (%s) group name contains invalid characters."),

			    $_POST['gtype']);

			$input_errors[] = gettext(

			    "The group name is longer than 16 characters.");

		}

		if (preg_match("/[^a-zA-Z0-9\.\- _]/", $_POST['groupname'])) {

			    "The (%s) group name contains invalid characters."),

			    $_POST['gtype']);

			    empty(getUserEntryByUID($newmember))) {

				$input_errors[] = gettext("One or more " .

				    "invalid group members was submitted.");

	}

		/* make sure there are no dupes */

		foreach ($a_group as $group) {

			if ($group['name'] == $_POST['groupname']) {

				    "with the same group name already exists.");

			}

		}

	}

		$group['description'] = $_POST['description'];

		 * Refresh users in this group since their privileges may have

		 * changed.

		 */

			foreach ($a_user as & $user) {

		usort($config['system']['group'], function($a, $b) {

			return strcmp($a['name'], $b['name']);

		});

		    (strlen($id) > 0) ? gettext("edited") : gettext("created"),

		    $group['name']);

		syslog($logging_level, "{$logging_prefix}: {$savemsg}");

		exit;

	}

	$pconfig['name'] = $_POST['groupname'];

	$privhtml = '<div class="table-responsive">';

	$privhtml .=	'<table class="table table-striped table-hover table-condensed">';

	$privhtml .=		'<thead>';

	$privhtml .=				'<th>' . gettext('Name') . '</th>';

	$privhtml .=				'<th>' . gettext('Description') . '</th>';

	$privhtml .=				'<th>' . gettext('Action') . '</th>';

	$privhtml .=			'</tr>';

	$privhtml .=		'<tbody>';

		$privhtml .=		'<tr>';

		$privhtml .=			'<td>' . htmlspecialchars($priv['name']) . '</td>';

		if (isset($priv['warn']) && ($priv['warn'] == 'standard-warning-root')) {

		}

		$privhtml .=			'</td>';

			$privhtml .=			'<td><a class="fa fa-trash" title="' . gettext('Delete Privilege') . '"	href="system_groupmanager.php?act=delpriv&amp;groupid=' . $id . '&amp;privid=' . $i . '" usepost></a></td>';

		}

		$privhtml .=		'<tr>';

		$privhtml .=			'<td colspan="2">';

		$privhtml .=			'<td>';

		$privhtml .=			'</td>';

		$privhtml .=		'</tr>';

	$privhtml .=	'</table>';

	$privhtml .= '</div>';

	$privhtml .= '<nav class="action-buttons">';

		$privhtml .=	'<a href="system_groupmanager_addprivs.php?groupid=' . $id . '" class="btn btn-success"><i class="fa fa-plus icon-embed-btn"></i>' . gettext("Add") . '</a>';

	}

	return($privhtml);

}

if ($act == "new" || $act == "edit") {

	$pgtitle[] = gettext('Edit');

$tab_array = array();

$tab_array[] = array(gettext("Users"), false, "system_usermanager.php");

$tab_array[] = array(gettext("Groups"), true, "system_groupmanager.php");

$tab_array[] = array(gettext("Settings"), false, "system_usermanager_settings.php");

	<div class="panel-heading"><h2 class="panel-title"><?=gettext('Groups')?></h2></div>

	<div class="panel-body">

		<div class="table-responsive">

					<tr>

						<th><?=gettext("Group name")?></th>

						<th><?=gettext("Description")?></th>

						<th><?=gettext("Member Count")?></th>

						<th><?=gettext("Actions")?></th>

					</tr>

				</thead>

				<tbody>

		if ($group["name"] == "all") {

			$groupcount = 0;

						<td>

							<?=htmlspecialchars($group['name'])?>

						</td>

						<td>

							<?=htmlspecialchars($group['description'])?>

						</td>

						<td>

							<?=$groupcount?>

						</td>

						<td>

						</td>

					</tr>

	endforeach;

			</table>

		</div>

<nav class="action-buttons">

		<?=gettext("Add")?>

	</a>

	include('foot.inc');

	exit;

$form->setAction('system_groupmanager.php?act=edit');

$form->addGlobal(new Form_Input(

	'groupid',

	null,

	'hidden',

	$id

));

		'id',

		null,

		'hidden',

		$id

	));

	$form->addGlobal(new Form_Input(

		'gid',

		null,

		'hidden',

		$pconfig['gid']

	));

	$pconfig['name']

));

	$section->addInput(new Form_Input(

		'gtype',

		$pconfig['gtype']

	))->setReadonly();

} else {

	$section->addInput(new Form_Select(

		'gtype',

	    "setting may affect the local groups file, in which case a " .

	    "reboot may be required for the changes to take effect.</span>");

	'description',

	'Description',

	'text',

	$pconfig['description']

$form->add($section);

if ($pconfig['gid'] != 1998) {

	/* Group membership */

	 * Make a list of all the groups configured on the system, and a list of

	 * those which this user is a member of

	 */

	$usersGroups = array();

	foreach ($config['system']['user'] as $user) {

		    $pconfig['members'])) {

			/* Add it to the user's list */

			$usersGroups[ $user['uid'] ] = $user['name'];

			$systemGroups[ $user['uid'] ] = $user['name'];

	$group->add(new Form_Select(

		'notmembers',

		null,

		    (array)$pconfig['groups']),

		true

		    (array)$pconfig['groups']),

	$section->add($group);

	$group = new Form_Group('');

	$group->add(new Form_Button(

		'movetoenabled',

		'fa-angle-double-right'

	    'btn-info btn-sm');

	$group->add(new Form_Button(

		'movetodisabled',

		'fa-angle-double-left'

	    'btn-info btn-sm');

	    'Hold down CTRL (PC)/COMMAND (Mac) key to select multiple items.');

	$section->addInput(new Form_StaticText(

		null,

	// On click . .

	$("#movetodisabled").click(function() {

		    $('[name="notmembers[]"]'));

	$("#movetoenabled").click(function() {

		    $('[name="members[]"]'));

	// On submit mark all the user's groups as "selected"

	});

});

//]]>

</script>

<?php