Support https in blog URLs

[dotclear.git] / widget.post.perms.php

<?php

class xorgPostPermsWidget {
  public static function behavior_adminPostFormSidebar($post) {
    $choices = array('public' => array('text' => 'Visible par tous',
                                       'selected' => false),
                     'auth'   => array('text' => 'Visible par les X',
                                       'selected' => false));
    $pos = 'public';
    global $core;
    $type = $core->blog->settings->xorgauth->get('xorg_blog_type');
    if ($type == 'group-admin' || $type == 'group-member') {
      $choices['group'] = array('text' => 'Visible par les membres du groupe',
                                'selected' => false);
    }
    if (!is_null($post)) {
      $metas = unserialize($post->field('post_meta'));
      if (isset($metas['post_xorg_perms'])) {
        $pos = $metas['post_xorg_perms'];
      }
    } else {
      $pos = $core->auth->getOption('post_xorg_perms');
      if ($pos && !isset($choices[$pos])) {
        $pos = 'auth';
      }
    }
    $choices[$pos]['selected'] = true;
    ?>
    <p>
      <label>
        Visibilité du billet&nbsp;:
        <select name="post_xorg_perms">
    <?php
    foreach ($choices as $val => $fields) {
      echo '<option value="' . $val . '"' . ($fields['selected'] ? ' selected="selected"' : '') . '>'
         . $fields['text'] . '</option>';
    }
    ?>
        </select>
      </label>
    </p>
    <?php
  }

  private static function setPermsMeta($cur) {
    $meta = $cur->getField('post_meta');
    if (is_string($meta)) {
      $meta = unserialize($meta);
    }
    if (!is_array($meta)) {
      $meta = array();
    }
    $meta['post_xorg_perms'] = $_POST['post_xorg_perms'];
    $cur->setField('post_meta', serialize($meta));
  }

  public static function behavior_adminBeforePostCreate($cur) {
    self::setPermsMeta($cur);
  }

  public static function behavior_adminBeforePostUpdate($cur, $post_id) {
    self::setPermsMeta($cur);
  }


  public static function behavior_adminPreferencesForm($core) {
    $levels = array('public' => array('text' => 'Visible par tous',
                                      'selected' => false),
                    'auth' => array('text' => 'Visible par les X',
                                    'selected' => false),
                    'group' => array('text' => 'Visible par les membres du groupe (1)',
                                     'selected' => false));
    $pos = $core->auth->getOption('post_xorg_perms');
    if (!$pos || !isset($levels[$pos])) {
      $pos = 'public';
    }
    $levels[$pos]['selected'] = true;
    ?>
    <p>
      <label>
        Visibilité nouveaux billets par défaut&nbsp;:
        <select name="post_xorg_perms">
    <?php
    foreach ($levels as $key => $fields) {
      echo '<option value="' . $key . '"' . ($fields['selected'] ? ' selected="selected"' : '') . '>'
         . $fields['text'] . '</option>';
    }
    ?>
        </select>
        (1) Ne concerne que les blogs de groupes X. Equivaut à "Visible par les X" sur les autres blogs"
      </label>
    </p>
    <?php
  }

  public static function behavior_adminBeforeUserUpdate($cur, $user_id) {
    $opts = $cur->getField('user_options');
    $opts['post_xorg_perms'] = $_POST['post_xorg_perms'];
    $cur->setField('user_options', $opts);
  }

  public static function behavior_coreBlogGetPosts($rs) {
    $rs->extend('xorgPostPermsFilter');
  }

/*  public static function behavior_coreBlogGetComments($rs) {
    $rs->extends('xorgCommentPermsFilter');
  }*/
}

if (class_exists('rsExtPostPublic')) {

class xorgPostPermsFilter extends rsExtPostPublic {
  private static function canRead($rs) {
    $metas = unserialize($rs->field('post_meta'));
    global $core;
    if (!isset($metas['post_xorg_perms'])) {
      return true;
    } elseif ($metas['post_xorg_perms'] == 'public') {
      return true;
    } elseif ($metas['post_xorg_perms'] == 'auth' && $core->auth->checkPassword()) {
      return true;
    } elseif ($metas['post_xorg_perms'] == 'group' && $core->auth->getInfo('xorg_group_member')) {
      return true;
    }
    return false;
  }

  private static function showMessage($rs) {
    $metas = unserialize($rs->field('post_meta'));
    global $core;
    $str = '<p class="error">'
         . 'Vous n\'avez pas les droits suffisants pour lire ce billet&nbsp;:<br />';
    if (!$core->auth->checkPassword()) {
      $str .= 'Vous devez vous <a href="' . $core->blog->url . 'auth/Xorg?path=' . $_SERVER['PATH_INFO'] .'">authentifier</a>';
    } else {
      $str .= 'Tu dois être membre du groupe pour lire ce message';
    }
    return $str . '</p>';
  }

  public static function getContent($rs, $absolute_urls = false) {
    if (self::canRead($rs)) {
      return parent::getContent($rs, $absolute_urls);
    } else if (!self::isExtended($rs)) {
      return self::showMessage($rs);
    } else {
      return null;
    }
  }

  public static function getExcerpt($rs, $absolute_urls = false) {
    if (self::canRead($rs)) {
      return parent::getExcerpt($rs, $absolute_urls);
    } else if (self::isExtended($rs)) {
      return self::showMessage($rs);
    } else {
      return null;
    }
  }

  public static function commentsActive($rs) {
    return self::canRead($rs) && parent::commentsActive($rs);
  }

  public static function trackbacksActive($rs) {
    return self::canRead($rs) && parent::trackbacksActive($rs);
  }

  public static function hasComments($rs) {
    return self::canRead($rs) && parent::hasComments($rs);
  }
}
}
?>