1 package PciIds::Html::Admin;
5 use PciIds::Html::Util;
6 use PciIds::Html::Users;
7 use PciIds::Html::Forms;
8 use PciIds::Notifications;
11 use Apache2::Const qw(:common :http);
15 return encode( $text ) if defined $text;
21 return '' unless defined $email;
22 return "<a href='mailto:$email'>".encode( $email )."</a>";
25 sub genNewAdminForm( $$$$$ ) {
26 my( $req, $args, $tables, $error, $auth ) = @_;
27 my $address = PciIds::Address::new( $req->uri() );
28 my $prefix = $address->get();
29 $prefix = '' if( $args->{'global'} );
30 my $caption = 'Administration '.( $args->{'global'} ? '(Global)' : '('.encode( $address->pretty() ).')' );
31 genHtmlHead( $req, $caption, undef );
32 my $glob = delete $args->{'global'};
33 genCustomHead( $req, $args, $address, $caption, [ $address->canAddItem() ? [ 'Add item', 'newitem' ] : (), $address->canDiscuss() ? [ 'Discuss', 'newhistory' ] : (), $glob ? [ 'Local', 'admin' ] : [ 'Global', 'admin?global=1' ], [ 'Help', 'help', 'admin' ], [ '', 'jump' ] ], [ [ 'Log out', 'logout' ] ] );
34 print "<div class='error'>$error</div>\n" if( defined $error );
35 print "<form name='admin' id='admin' class='admin' method='POST' action=''>\n";
41 print "<p><input type='checkbox' name='default-seen' value='default-seen' checked='checked'> Any action approves all discussion\n";
42 print "<table class='admin'>\n";
43 print "<col class='id-col'><col class='name-col'><col class='note-col'><col class='disc-col'><col class='auth-col'><col class='control-col' span='3'>\n";
44 print "<tr class='head'><th>ID<th>Name<th>Note<th>Discussion<th>Author<th>Ok<th>Sel<th>Del\n";
45 foreach( @{$tables->adminDump( $prefix )} ) {
46 my( $locId, $actName, $actNote, $actHist, $actUser, $actDisc,
47 $hist, $disc, $name, $note, $user ) = @{$_};
48 if( !defined( $lastId ) || ( $lastId ne $locId ) ) {
49 last if( $hiscnt > 80 );
52 my $addr = PciIds::Address::new( $locId );
53 if( defined( $actHist ) ) {
54 print "<tr class='item'>";
56 print "<tr class='unnamedItem'>";
58 print "<td><a href='/read/".$addr->get()."'>".encode( $addr->pretty() )."</a><td>".safeEncode( $actName )."<td>".safeEncode( $actNote )."<td>".safeEncode( $actDisc )."<td>".mailEncode( $actUser );
60 print "<input type='hidden' name='loc-$cnt-subcnt' value='$subcnt'>" if( $subcnt );
63 print "<input type='hidden' name='loc-$cnt' value='".$addr->get()."'>\n";
64 print "<td class='empty'>";
65 print "<td><input type='radio' name='loc-$cnt-sel' value='curr' checked='checked'>";
66 if( hasRight( $auth->{'accrights'}, 'prune' ) || ( !defined $actHist && !$tables->hasChildren( $addr->get() ) ) ) {
67 print "<td><input type='checkbox' name='loc-$cnt-del' value='del'>\n";
69 print "<td class='empty'>";
71 print "<tr class='new'><td>New:<td><input type='text' name='name-$cnt' class='text'><td><input type='text' name='note-$cnt' class='text'><td><textarea name='disc-$cnt'></textarea>\n";
72 print "<td colspan='3'>";
73 genPathBare( $req, $addr, 0, 0 );
74 print "<td><input type='checkbox' name='loc-$cnt-softdel' value='del'>\n";
76 print "<tr class='unseen-history'><td class='empty'><td>".safeEncode( ( defined $name && $name eq '' ) ? 'Deletion request' : $name )."<td>".safeEncode( $note )."<td>".safeEncode( $disc )."<td>".mailEncode( $user );
79 print "<input type='hidden' name='his-$cnt-$subcnt' value='$hist'>";
80 print "<td><input type='checkbox' name='appr-$hiscnt' value='appr-$hist'>";
82 print "<td><input type='radio' name='loc-$cnt-sel' value='$hist'>";
84 print "<td class='empty'>";
86 print "<td><input type='checkbox' name='del-$hiscnt' value='del-$hist'>";
87 print "<input type='hidden' name='owner-$hist' value='$lastId'>\n";
90 print "<input type='hidden' name='subcnt-$cnt' value='$subcnt'>\n" if( defined( $subcnt ) );
92 print "<input type='hidden' name='loc-$cnt-subcnt' value='$subcnt'>" if( $subcnt );
93 print "<p><input type='submit' name='submit' value='Submit'>\n";
94 print "<input type='hidden' name='max-cnt' value='$cnt'><input type='hidden' name='max-hiscnt' value='$hiscnt'>\n";
96 print "<p>No pending items.\n";
103 sub adminForm( $$$$ ) {
104 my( $req, $args, $tables, $auth ) = @_;
105 if( defined( $auth->{'authid'} ) && hasRight( $auth->{'accrights'}, 'validate' ) ) {
106 return genNewAdminForm( $req, $args, $tables, undef, $auth );
108 return notLoggedComplaint( $req, $args, $auth );
114 sub appendError( $ ) {
115 if( $errors eq '' ) {
116 $errors = "<p>".shift;
118 $errors .= "<br>".shift;
122 sub submitAdminForm( $$$$ ) {
123 my( $req, $args, $tables, $auth ) = @_;
124 my $authid = $auth->{'authid'};
125 if( defined( $authid ) && hasRight( $auth->{'accrights'}, 'validate' ) ) {
126 my( %deleted, %approved );
127 my $maxcnt = getFormValue( 'max-cnt', 0 );
128 my $maxhiscnt = getFormValue( 'max-hiscnt', 0 );
130 # Scan for approved and deleted items
131 for( my $i = 1; $i <= $maxhiscnt; $i ++ ) {
132 my( $del ) = getFormValue( "del-$i", '' ) =~ /^del-(\d+)$/;
133 $deleted{$del} = 1 if( defined $del && $del ne '' );
134 my( $appr ) = getFormValue( "appr-$i", '' ) =~ /^appr-(\d+)$/;
135 $approved{$appr} = 1 if( defined $appr && $appr ne '' );
137 for( my $i = 1; $i <= $maxcnt; $i ++ ) {
138 my( $sel ) = getFormValue( "loc-$i-sel", '' ) =~ /^(\d+)$/;
139 $approved{$sel} = 1 if( defined $sel && $sel ne '' );
141 # Check for collisions
143 foreach my $id ( keys %deleted ) {
144 if( $approved{$id} ) {
145 my $owner = getFormValue( "owner-$id", '' );
146 appendError( "You can not approve and delete history at the same time, not modifying item ".PciIds::Address::new( $owner )->pretty() );
147 $collision{$owner} = $_;
148 delete $deleted{$id};
149 delete $approved{$id};
152 #Do the deletes and approves
153 foreach my $del ( keys %deleted ) {
154 $tables->deleteHistory( $del );
156 tulog( $authid, "Discussion deleted $del" );
158 foreach my $appr ( keys %approved ) {
159 $tables->markChecked( $appr );
161 tulog( $authid, "Discussion checked $appr" );
164 my $defaultSeen = getFormValue( 'default-seen', '' ) =~ /^default-seen$/;
165 for( my $i = 1; $i <= $maxcnt; $i ++ ) {
166 my $addr = PciIds::Address::new( getFormValue( "loc-$i", '' ) );
167 next if $collision{$addr->get()};
168 next unless defined $addr;
169 my $del = getFormValue( "loc-$i-del", '' );
170 if( defined $del && $del eq 'del' && ( hasRight( $auth->{'accrights'}, 'prune' ) || ( !$tables->hasChildren( $addr->get() ) && !$tables->hasMain( $addr->get() ) ) ) ) {
171 $tables->deleteItem( $addr->get() );
173 tulog( $authid, "Item deleted (recursive) ".$addr->get() );
176 my $name = getFormValue( "name-$i", undef );
177 $name = undef if defined $name && $name eq '';
178 my $note = getFormValue( "note-$i", undef );
179 $note = undef if defined $note && $note eq '';
180 my $discussion = getFormValue( "disc-$i", '' );
181 $discussion = undef if defined $discussion && $discussion eq '';
183 if( getFormValue( "loc-$i-softdel", '' ) =~ /^del$/ ) {
188 if( defined $note && !defined $name ) {
189 appendError( "You must specify name if you set note at item ".$addr->pretty() );
192 my( $select ) = getFormValue( "loc-$i-sel", '' ) =~ /^(\d+)$/;
194 if( defined $name || defined $discussion || $delete ) {
195 my $histId = $tables->submitHistory( { 'name' => $name, 'note' => $note, 'text' => $discussion, 'delete' => $delete }, $auth, $addr );
196 $tables->markChecked( $histId );
197 $select = $histId if defined $name || $delete;
198 tulog( $authid, "Discussion submited (admin) $histId ".$addr->get()." ".logEscape( $name )." ".logEscape( $note )." ".logEscape( $discussion ) );
202 if( defined $select && select ne '' ) {
203 $tables->setMainHistory( $addr->get(), $select );
204 tulog( $authid, "Item main history changed ".$addr->get()." $select" );
208 if( $action && $defaultSeen ) {#Approve anything in this item
209 my $subcnt = getFormValue( "loc-$i-subcnt", 0 );
210 for( my $j = 1; $j <= $subcnt; $j ++ ) {
211 my( $id ) = getFormValue( "his-$i-$j", '' ) =~ /^(\d+)$/;
212 next unless defined $id;
213 next if $approved{$id} || $deleted{$id};
214 $tables->markChecked( $id );
215 tulog( $authid, "Discussion checked $id" );
219 return genNewAdminForm( $req, $args, $tables, $errors, $auth );
221 return notLoggedComplaint( $req, $args, $auth );