File manager

File manager - Edit - /home/c14075/dragmet-ural.ru/www/bitrix/modules/learning/classes/general/clearnparsepermissionsfromfilter.php

Back
<?php // Process permissions class CLearnParsePermissionsFromFilter { protected $requestedUserId = false; protected $bCheckPerm = false; protected $cachedSQL = false; protected $requestedOperations = false; protected $oAccess = false; private static $availableLessons = array(); function __construct ($arFilter) { $loggedUserId = false; // Skip checking permissions? if (isset($arFilter['CHECK_PERMISSIONS']) && ($arFilter['CHECK_PERMISSIONS'] === 'N')) return; // Determine requested operations $this->requestedOperations = self::ParseRequestedOperations ($arFilter); // Determine logged in user global $USER; if (is_object($USER) && method_exists($USER, 'GetID')) $loggedUserId = (int) $USER->GetID(); $this->requestedUserId = self::DetermineRequestedUserId ($arFilter, $loggedUserId); // If user_id === current logged user_id, and he is admin => skip checking permissions if (($this->requestedUserId === $loggedUserId) && $USER->IsAdmin()) return; // skip checking permissions $this->oAccess = CLearnAccess::GetInstance($this->requestedUserId); // If base (shared) user rights covers requested operations => nothing to check. if ($this->oAccess->IsBaseAccess ($this->requestedOperations)) return; // skip checking permissions // Checking of permissions must be. $this->bCheckPerm = true; } protected static function DetermineRequestedUserId ($arFilter, $loggedUserId) { // If user_id given - use it, instead of logged-in user_id if ( isset($arFilter['CHECK_PERMISSIONS_FOR_USER_ID']) ) $requestedUserId = (int) $arFilter['CHECK_PERMISSIONS_FOR_USER_ID']; elseif ($loggedUserId !== false) $requestedUserId = $loggedUserId; else { // No user logged in and no user given: this is logic error. throw new LearnException ('EA_LOGIC', LearnException::EXC_ERR_ALL_LOGIC \| LearnException::EXC_ERR_ALL_GIVEUP); } return ($requestedUserId); } protected static function ParseRequestedOperations ($arFilter) { // firstly, ensure that no MIN_PERMISSION given (it's orphaned request) if (array_key_exists('MIN_PERMISSION', $arFilter)) { throw new LearnException ( 'EA_PARAMS: outdated "MIN_PERMISSION" key used.', LearnException::EXC_ERR_ALL_LOGIC \| LearnException::EXC_ERR_ALL_PARAMS); } // Determine requested operations if ( ! isset($arFilter['ACCESS_OPERATIONS']) ) { // no requested operations given, it means that only OP_LESSON_READ opeartions requested. $requestedOperations = CLearnAccess::OP_LESSON_READ; } else { // requested operations MUST be an integer, because of bitmask nature. // and must be > 0 if ( ( ! is_int($arFilter['ACCESS_OPERATIONS']) ) \|\| ( ! ($arFilter['ACCESS_OPERATIONS'] > 0) ) ) { throw new LearnException ( 'EA_PARAMS: bitmask ACCESS_OPERATIONS must be an integer and > 0.', LearnException::EXC_ERR_ALL_LOGIC \| LearnException::EXC_ERR_ALL_PARAMS); } // requested operations $requestedOperations = $arFilter['ACCESS_OPERATIONS']; } return ($requestedOperations); } public function SQLForAccessibleLessons() { // SQL exists only if check permissions must be done if ($this->bCheckPerm === false) { throw new LearnException ('', LearnException::EXC_ERR_ALL_LOGIC \| LearnException::EXC_ERR_ALL_GIVEUP); } // Is not cached yet? if ($this->cachedSQL === false) { $this->cachedSQL = $this->oAccess->SQLClauseForAccessibleLessons ($this->requestedOperations); global $USER; if (is_object($USER) && method_exists($USER, "GetID") && intval($USER->GetID()) > 0) { $rs = CLearningGroup::getList( array(), array( "MEMBER_ID" => intval($USER->GetID()), "ACTIVE" => "Y", "ACTIVE_DATE" => "Y" ) ); $availableCourses = array(); while ($group = $rs->fetch()) { $availableCourses[] = $group["COURSE_LESSON_ID"]; } if (count($availableCourses) > 0) { $this->cachedSQL .= " UNION SELECT ID as LESSON_ID FROM b_learn_lesson WHERE ID IN (".join(",", $availableCourses).")"; } } } return ($this->cachedSQL); } public function IsNeedCheckPerm() { return ($this->bCheckPerm); } }

| ver. 1.4 | Github | . | PHP 7.4.33 | Generation time: 0.25 | proxy | phpinfo | Settings