From 068cb53a9ea44cf276c6b0e39ef92182b883d5fa Mon Sep 17 00:00:00 2001
From: friendica <info@friendica.com>
Date: Thu, 26 Jan 2012 20:08:02 -0800
Subject: page delegation

---
 mod/delegate.php | 140 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
 mod/removeme.php |   3 ++
 2 files changed, 143 insertions(+)
 create mode 100644 mod/delegate.php

(limited to 'mod')

diff --git a/mod/delegate.php b/mod/delegate.php
new file mode 100644
index 000000000..56d11970f
--- /dev/null
+++ b/mod/delegate.php
@@ -0,0 +1,140 @@
+<?php
+
+function delegate_content(&$a) {
+
+	if(! local_user()) {
+		notice( t('Permission denied.') . EOL);
+		return;
+	}
+
+	if($a->argc > 2 && $a->argv[1] === 'add' && intval($a->argv[2])) {
+
+		// delegated admins can view but not change delegation permissions
+
+		if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
+			goaway($a->get_baseurl() . '/delegate');
+
+
+		$id = $a->argv[2];
+
+		$r = q("select `nickname` from user where uid = %d limit 1",
+			intval($id)
+		);
+		if(count($r)) {
+			$r = q("select id from contact where uid = %d and nurl = '%s' limit 1",
+				intval(local_user()),
+				dbesc(normalise_link($a->get_baseurl() . '/profile/' . $r[0]['nickname']))
+			);
+			if(count($r)) {
+				q("insert into manage ( uid, mid ) values ( %d , %d ) ",
+					intval($a->argv[2]),
+					intval(local_user())
+				);
+			}
+		}
+		goaway($a->get_baseurl() . '/delegate');
+	}
+
+	if($a->argc > 2 && $a->argv[1] === 'remove' && intval($a->argv[2])) {
+
+		// delegated admins can view but not change delegation permissions
+
+		if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
+			goaway($a->get_baseurl() . '/delegate');
+
+		q("delete from manage where uid = %d and mid = %d limit 1",
+			intval($a->argv[2]),
+			intval(local_user())
+		);
+		goaway($a->get_baseurl() . '/delegate');
+
+	}
+
+	$full_managers = array();
+
+	// These people can manage this account/page with full privilege
+
+	$r = q("SELECT * FROM `user` WHERE `uid` = %d AND `email` = '%s' AND `password` = '%s' LIMIT 1",
+		intval(local_user()),
+		dbesc($a->user['email']),
+		dbesc($a->user['password'])
+	);
+	if(count($r))
+		$full_managers = $r;
+
+	$delegates = array();
+
+	// find everybody that currently has delegated management to this account/page
+
+	$r = q("select * from user where uid in ( select uid from manage where mid = %d ) ",
+		intval(local_user())
+	);
+
+	if(count($r))
+		$delegates = $r;
+
+	$uids = array();
+
+	if(count($full_managers))
+		foreach($full_managers as $rr)
+			$uids[] = $rr['uid'];
+
+	if(count($delegates))
+		foreach($delegates as $rr)
+			$uids[] = $rr['uid'];
+
+	// find every contact who might be a candidate for delegation
+
+	$r = q("select nurl from contact where substring_index(contact.nurl,'/',3) = '%s' 
+		and contact.uid = %d and contact.self = 0 and network = '%s' ",
+		dbesc($a->get_baseurl()),
+		intval(local_user()),
+		dbesc(NETWORK_DFRN)
+	); 
+
+	if(! count($r)) {
+		notice( t('No potential page delegates located.') . EOL);
+		return;
+	}
+
+	$nicknames = array();
+
+	if(count($r)) {
+		foreach($r as $rr) {
+			$nicknames[] = "'" . dbesc(basename($rr['nurl'])) . "'";
+		}
+	}
+
+	$potentials = array();
+
+	$nicks = implode(',',$nicknames);
+
+	// get user records for all potential page delegates who are not already delegates or managers
+
+	$r = q("select `uid`, `username`, `nickname` from user where nickname in ( $nicks )");
+
+	if(count($r))
+		foreach($r as $rr)
+			if(! in_array($rr['uid'],$uids))
+				$potentials[] = $rr;
+
+	$o = replace_macros(get_markup_template('delegate.tpl'),array(
+		'$header' => t('Delegate Page Management'),
+		'$base' => $a->get_baseurl(),
+		'$desc' => t('Delegates are able to manage all aspects of this account/page except for basic account settings. Please do not delegate your personal account to anybody that you do not trust completely.'),
+		'$head_managers' => t('Existing Page Managers'),
+		'$managers' => $full_managers,
+		'$head_delegates' => t('Existing Page Delegates'),
+		'$delegates' => $delegates,
+		'$head_potentials' => t('Potential Delegates'),
+		'$potentials' => $potentials,
+		'$remove' => t('Remove'),
+		'$add' => t('Add'),
+		'$none' => t('No entries.')
+	));
+
+
+	return $o;
+
+
+}
\ No newline at end of file
diff --git a/mod/removeme.php b/mod/removeme.php
index c181ee6ea..ee88bd76a 100755
--- a/mod/removeme.php
+++ b/mod/removeme.php
@@ -5,6 +5,9 @@ function removeme_post(&$a) {
 	if(! local_user())
 		return;
 
+	if(x($_SESSION,'submanage') && intval($_SESSION['submanage']))
+		return;
+
 	if((! x($_POST,'qxz_password')) || (! strlen(trim($_POST['qxz_password']))))
 		return;
 
-- 
cgit v1.2.3