Viewing file:  save_acl.cgi (2.76 KB) -rwxr-xr-x
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
#!/usr/bin/perl
# save_acl.cgi
# Save access control options for some module
use strict;
use warnings;
require './acl-lib.pl';
our (%in, %text, %config, %access, $base_remote_user, %gconfig,
$config_directory);
&ReadParse();
my $who;
if ($in{'_acl_group'}) {
$access{'groups'} || &error($text{'acl_egroup'});
$who = $in{'_acl_group'};
}
else {
my $me = &get_user($base_remote_user);
my @mcan = $access{'mode'} == 1 ? @{$me->{'modules'}} :
$access{'mode'} == 2 ? split(/\s+/, $access{'mods'}) :
( &list_modules(), "" );
&indexof($in{'_acl_mod'}, @mcan) >= 0 || &error($text{'acl_emod'});
&can_edit_user($in{'_acl_user'}) || &error($text{'acl_euser'});
$who = $in{'_acl_user'};
}
my $aclfile = $in{'_acl_group'} ? "$config_directory/$in{'_acl_mod'}/$who.gacl"
: "$config_directory/$in{'_acl_mod'}/$who.acl";
my %minfo = $in{'_acl_mod'} ? &get_module_info($in{'_acl_mod'})
: ( 'desc' => $text{'index_global'} );
if ($in{'reset'}) {
# Just remove the .acl file
&lock_file($aclfile);
if ($in{'_acl_group'}) {
# For a group
&save_group_module_acl(undef, $in{'_acl_group'},
$in{'_acl_mod'}, 1);
}
else {
# For a user
&save_module_acl(undef, $in{'_acl_user'},
$in{'_acl_mod'},1);
}
&unlock_file($aclfile);
$in{'moddesc'} = $minfo{'desc'};
&webmin_log("reset", undef, $who, \%in);
}
else {
# Validate and store ACL settings
&error_setup($text{'acl_err'});
my %maccess;
$maccess{'noconfig'} = $in{'noconfig'};
if ($in{'rbac'}) {
# RBAC overrides everything
$maccess{'rbac'} = 1;
}
elsif (-r "../$in{'_acl_mod'}/acl_security.pl") {
# Use user inputs
$maccess{'rbac'} = 0 if (defined($in{'rbac'}));
&foreign_require($in{'_acl_mod'}, "acl_security.pl");
&foreign_call($in{'_acl_mod'}, "acl_security_save",
\%maccess, \%in);
}
# Write out the ACL
&lock_file($aclfile);
if ($in{'_acl_group'}) {
# For a group
&save_group_module_acl(\%maccess, $in{'_acl_group'},
$in{'_acl_mod'}, 1);
}
else {
# For a user
&save_module_acl(\%maccess, $in{'_acl_user'},
$in{'_acl_mod'},1);
}
&set_ownership_permissions(undef, undef, 0640, $aclfile);
&unlock_file($aclfile);
if ($in{'_acl_group'}) {
# Recursively update the ACL for all member users and groups
# XXX ACL in DB?
my @ulist = &list_users();
my @glist = &list_groups();
my ($group) = grep { $_->{'name'} eq $in{'_acl_group'} } @glist;
&set_acl_files(\@ulist, \@glist, $in{'_acl_mod'},
$group->{'members'}, \%maccess);
}
$in{'moddesc'} = $minfo{'desc'};
&webmin_log("acl", undef, $who, \%in);
}
if ($config{'display'}) {
if ($in{'_acl_group'}) {
&redirect("edit_group.cgi?group=$in{'_acl_group'}");
}
else {
&redirect("edit_user.cgi?user=$in{'_acl_user'}&readwrite=1");
}
}
else {
&redirect("");
}
|