Adds an admin interface for Google Apps accounts.
[platal.git] / modules / googleapps.php
1 <?php
2 /***************************************************************************
3 * Copyright (C) 2003-2008 Polytechnique.org *
4 * http://opensource.polytechnique.org/ *
5 * *
6 * This program is free software; you can redistribute it and/or modify *
7 * it under the terms of the GNU General Public License as published by *
8 * the Free Software Foundation; either version 2 of the License, or *
9 * (at your option) any later version. *
10 * *
11 * This program is distributed in the hope that it will be useful, *
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
14 * GNU General Public License for more details. *
15 * *
16 * You should have received a copy of the GNU General Public License *
17 * along with this program; if not, write to the Free Software *
18 * Foundation, Inc., *
19 * 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA *
20 ***************************************************************************/
21
22 class GoogleAppsModule extends PLModule
23 {
24 function handlers()
25 {
26 global $globals;
27 if (!$globals->mailstorage->googleapps_domain) {
28 return array();
29 }
30
31 return array(
32 'googleapps' => $this->make_hook('index', AUTH_MDP),
33 'admin/googleapps' => $this->make_hook('admin', AUTH_MDP. 'admin'),
34 'admin/googleapps/job' => $this->make_hook('admin_job', AUTH_MDP, 'admin'),
35 'admin/googleapps/user' => $this->make_hook('admin_user', AUTH_MDP, 'admin'),
36 );
37 }
38
39 function handler_index(&$page, $action = null, $subaction = null)
40 {
41 require_once("emails.inc.php");
42 require_once("googleapps.inc.php");
43 $page->changeTpl('googleapps/index.tpl');
44 $page->addJsLink('motdepasse.js');
45 $page->assign('xorg_title', 'Polytechnique.org - Compte Google Apps');
46
47 $account = new GoogleAppsAccount(S::v('uid'), S::v('forlife'));
48
49 // Fills up the 'is Google Apps redirection active' variable.
50 $page->assign('redirect_active', false);
51 $page->assign('redirect_unique', true);
52
53 if ($account->active()) {
54 $redirect = new Redirect(S::v('uid'));
55 $page->assign('redirect_unique', !$redirect->other_active(NULL));
56
57 $storage = new MailStorageGoogleApps(S::v('uid'));
58 $page->assign('redirect_active', $storage->active());
59 }
60
61 // Updates the Google Apps account as required.
62 if ($action) {
63 if ($action == 'password') {
64 if ($subaction == 'sync') {
65 $account->set_password_sync(true);
66 $account->set_password(S::v('password'));
67 $page->trig("Ton mot de passe Google Apps sera dorénavant synchronisé avec ton mot de passe Polytechnique.org.");
68 } else if ($subaction == 'nosync') {
69 $account->set_password_sync(false);
70 } else if (Post::has('response2') && !$account->sync_password) {
71 $account->set_password(Post::v('response2'));
72 }
73 }
74
75 if ($action == 'suspend' && Post::has('suspend') && $account->active()) {
76 if ($account->pending_update_suspension) {
77 $page->trig("Ton compte est déjà en cours de désactivation.");
78 } else {
79 $storage = new MailStorageGoogleApps(S::v('uid'));
80 if ($storage->disable()) {
81 $account->suspend();
82 $page->trig("Ton compte Google Apps est dorénavant désactivé.");
83 } else {
84 $page->trig("Ton compte Google Apps est ta seule adresse de redirection. Ton compte ne peux pas être désactivé.");
85 }
86 }
87 } elseif ($action == 'unsuspend' && Post::has('unsuspend') && $account->suspended()) {
88 $account->unsuspend(Post::b('redirect_mails', true));
89 $page->trig("Ta demande de réactivation a bien été prise en compte.");
90 }
91
92 if ($action == 'create') {
93 $page->assign('has_password_sync', Get::has('password_sync'));
94 $page->assign('password_sync', Get::b('password_sync', true));
95 }
96 if ($action == 'create' && Post::has('password_sync') && Post::has('redirect_mails')) {
97 $password_sync = Post::b('password_sync');
98 $redirect_mails = Post::b('redirect_mails');
99 if ($password_sync) {
100 $password = S::v('password');
101 } else {
102 $password = Post::v('response2');
103 }
104
105 $account->create($password_sync, $password, $redirect_mails);
106 $page->trig("La demande de création de ton compte Google Apps a bien été enregistrée.");
107 }
108 }
109
110 $page->assign('account', $account);
111 }
112
113 function handler_admin(&$page, $action = null) {
114 require_once("googleapps.inc.php");
115 $page->changeTpl('googleapps/admin.tpl');
116 $page->assign('xorg_title', 'Polytechnique.org - Administration Google Apps');
117 $page->assign('googleapps_admin', GoogleAppsAccount::is_administrator(S::v('uid')));
118
119 if ($action == 'ack') {
120 $qid = @func_get_arg(2);
121 if ($qid) {
122 XDB::execute(
123 "DELETE FROM gapps_queue
124 WHERE q_id = {?} AND p_status = 'hardfail'", $qid);
125 $page->trig("La requête échouée a bien été retirée.");
126 }
127 }
128
129 // Retrieves latest pending administrative requests from the gappsd queue.
130 $res = XDB::iterator(
131 "SELECT q_id, q_recipient_id, a.alias, j_type, j_parameters,
132 UNIX_TIMESTAMP(q.p_entry_date) AS p_entry_date
133 FROM gapps_queue AS q
134 LEFT JOIN aliases AS a ON (a.id = q_recipient_id AND a.type = 'a_vie')
135 WHERE p_status IN ('idle', 'active', 'softfail') AND
136 p_admin_request IS TRUE
137 ORDER BY p_entry_date");
138 while ($request = $res->next()) {
139 $j_parameters = json_decode($request['j_parameters'], true);
140 unset($j_parameters['username']);
141 $parameters = array_keys($j_parameters);
142 $request['parameters'] = implode(', ', $parameters);
143
144 $page->append('admin_requests', $request);
145 }
146
147 // Retrieves latest failed requests from the gappsd queue.
148 $res = XDB::iterator(
149 "SELECT q.q_id, q.q_recipient_id, a.alias, q.j_type, q.r_result,
150 UNIX_TIMESTAMP(q.p_entry_date) AS p_entry_date
151 FROM gapps_queue AS q
152 LEFT JOIN aliases AS a ON (a.id = q.q_recipient_id AND a.type = 'a_vie')
153 WHERE q.p_status = 'hardfail'
154 ORDER BY p_entry_date DESC
155 LIMIT 20");
156 $page->assign('failed_requests', $res);
157 }
158
159 function handler_admin_job(&$page, $job = null) {
160 require_once("googleapps.inc.php");
161 $page->changeTpl('googleapps/admin.job.tpl');
162 $page->assign('xorg_title', 'Polytechnique.org - Administration Google Apps');
163 $page->assign('googleapps_admin', GoogleAppsAccount::is_administrator(S::v('uid')));
164
165 if ($job) {
166 $res = XDB::query(
167 "SELECT q.*, ao.alias AS q_owner, ar.alias AS q_recipient
168 FROM gapps_queue AS q
169 LEFT JOIN aliases AS ao ON (ao.id = q.q_owner_id AND ao.type = 'a_vie')
170 LEFT JOIN aliases AS ar ON (ar.id = q.q_recipient_id AND ar.type = 'a_vie')
171 WHERE q_id = {?}", $job);
172 $sql_job = $res->fetchOneAssoc();
173 $sql_job['decoded_parameters'] = var_export(json_decode($sql_job['j_parameters'], true), true);
174 $page->assign('job', $sql_job);
175 }
176 }
177
178 function handler_admin_user(&$page, $user = null, $action = null) {
179 require_once("emails.inc.php");
180 require_once("googleapps.inc.php");
181 $page->changeTpl('googleapps/admin.user.tpl');
182 $page->assign('xorg_title', 'Polytechnique.org - Administration Google Apps');
183 $page->assign('googleapps_admin', GoogleAppsAccount::is_administrator(S::v('uid')));
184
185 if ($user && !is_numeric($user)) {
186 $res = XDB::query("SELECT id FROM aliases WHERE alias = {?} AND type != 'homonyme'", $user);
187 $user = $res->fetchOneCell();
188 }
189
190 if ($user) {
191 $account = new GoogleAppsAccount($user);
192 $storage = new MailStorageGoogleApps($user);
193
194 // Force synchronization of plat/al and Google Apps passwords.
195 if ($action == 'forcesync' && $account->sync_password) {
196 $res = XDB::query("SELECT password FROM auth_user_md5 WHERE user_id = {?}", $user);
197 $account->set_password($res->fetchOneCell());
198 $page->trig('Le mot de passe a été synchronisé.');
199 }
200
201 // Displays basic account information.
202 $page->assign('account', $account);
203 $page->assign('admin_account', GoogleAppsAccount::is_administrator($user));
204 $page->assign('googleapps_storage', $storage->active());
205 $page->assign('user', $user);
206
207 // Retrieves user's pending requests.
208 $res = XDB::iterator(
209 "SELECT q_id, q_recipient_id, p_status, j_type, UNIX_TIMESTAMP(p_entry_date) AS p_entry_date
210 FROM gapps_queue
211 WHERE q_recipient_id = {?}
212 ORDER BY p_entry_date DESC", $user);
213 $page->assign('requests', $res);
214 }
215 }
216 }
217
218 // vim:set et sw=4 sts=4 sws=4 foldmethod=marker enc=utf-8:
219 ?>