grthtrhthjhtyjytjytkergtrhtrjytjerhrfh4:24 29/09/2026.
--------------------------------------------------------------------------
*/
/** @file
* @brief
*/
if (!defined('GLPI_ROOT')) {
die("Sorry. You can't access this file directly");
}
/**
* Profile class
**/
class Profile extends CommonDBTM {
// Specific ones
/// Helpdesk fields of helpdesk profiles
static public $helpdesk_rights = array('create_ticket_on_login', 'followup',
'knowbase', 'helpdesk_hardware', 'helpdesk_item_type',
'password_update', 'reminder_public',
'reservation', 'rssfeed_public',
'show_group_hardware', 'task', 'ticket',
'tickettemplates_id', 'ticket_cost',
'ticketvalidation', 'ticket_status');
/// Common fields used for all profiles type
static public $common_fields = array('id', 'interface', 'is_default', 'name');
public $dohistory = true;
static $rightname = 'profile';
function getForbiddenStandardMassiveAction() {
$forbidden = parent::getForbiddenStandardMassiveAction();
$forbidden[] = 'update';
return $forbidden;
}
static function getTypeName($nb=0) {
return _n('Profile', 'Profiles', $nb);
}
function defineTabs($options=array()) {
$ong = array();
$this->addDefaultFormTab($ong);
$this->addStandardTab(__CLASS__, $ong, $options);
$this->addStandardTab('Profile_User', $ong, $options);
$this->addStandardTab('Log',$ong, $options);
return $ong;
}
function getTabNameForItem(CommonGLPI $item, $withtemplate=0) {
if (!$withtemplate) {
switch ($item->getType()) {
case __CLASS__ :
if ($item->fields['interface'] == 'helpdesk') {
$ong[3] = __('Assistance'); // Helpdesk
$ong[4] = __('Life cycles');
$ong[6] = __('Tools');
} else {
$ong[2] = __('Assets');
$ong[3] = __('Assistance');
$ong[4] = __('Life cycles');
$ong[5] = __('Management');
$ong[6] = __('Tools');
$ong[7] = __('Administration');
$ong[8] = __('Setup');
}
return $ong;
}
}
return '';
}
static function displayTabContentForItem(CommonGLPI $item, $tabnum=1, $withtemplate=0) {
if ($item->getType() == __CLASS__) {
$item->cleanProfile();
switch ($tabnum) {
case 2 :
$item->showFormAsset();
break;
case 3 :
if ($item->fields['interface'] == 'helpdesk') {
$item->showFormTrackingHelpdesk();
} else {
$item->showFormTracking();
}
break;
case 4 :
if ($item->fields['interface'] == 'helpdesk') {
$item->showFormLifeCycleHelpdesk();
} else {
$item->showFormLifeCycle();
}
break;
case 5 :
$item->showFormManagement();
break;
case 6 :
if ($item->fields['interface'] == 'helpdesk') {
$item->showFormToolsHelpdesk();
} else {
$item->showFormTools();
}
break;
case 7 :
$item->showFormAdmin();
break;
case 8 :
$item->showFormSetup();
break;
}
}
return true;
}
function post_updateItem($history=1) {
global $DB;
if (count($this->profileRight) > 0) {
ProfileRight::updateProfileRights($this->getID(), $this->profileRight);
unset($this->profileRight);
}
if (in_array('is_default',$this->updates) && ($this->input["is_default"] == 1)) {
$query = "UPDATE ". $this->getTable()."
SET `is_default` = '0'
WHERE `id` <> '".$this->input['id']."'";
$DB->query($query);
}
// To avoid log out and login when rights change (very useful in debug mode)
if (isset($_SESSION['glpiactiveprofile']['id'])
&& $_SESSION['glpiactiveprofile']['id'] == $this->input['id']) {
if (in_array('helpdesk_item_type', $this->updates)) {
$_SESSION['glpiactiveprofile']['helpdesk_item_type'] = importArrayFromDB($this->input['helpdesk_item_type']);
}
///TODO other needed fields
}
}
function post_addItem() {
global $DB;
$rights = ProfileRight::getAllPossibleRights();
ProfileRight::updateProfileRights($this->fields['id'], $rights);
unset($this->profileRight);
if (isset($this->fields['is_default']) && ($this->fields["is_default"] == 1)) {
$query = "UPDATE ". $this->getTable()."
SET `is_default` = '0'
WHERE `id` <> '".$this->fields['id']."'";
$DB->query($query);
}
}
function cleanDBonPurge() {
global $DB;
$gpr = new ProfileRight();
$gpr->cleanDBonItemDelete($this->getType(), $this->fields['id']);
$gpu = new Profile_User();
$gpu->cleanDBonItemDelete($this->getType(), $this->fields['id']);
Rule::cleanForItemAction($this);
// PROFILES and UNIQUE_PROFILE in RuleMailcollector
Rule::cleanForItemCriteria($this, 'PROFILES');
Rule::cleanForItemCriteria($this, 'UNIQUE_PROFILE');
$gki = new KnowbaseItem_Profile();
$gki->cleanDBonItemDelete($this->getType(), $this->fields['id']);
$gr = new Profile_Reminder();
$gr->cleanDBonItemDelete($this->getType(), $this->fields['id']);
}
function prepareInputForUpdate($input) {
if (isset($input["_helpdesk_item_types"])) {
if ((!isset($input["helpdesk_item_type"])) || (!is_array($input["helpdesk_item_type"]))) {
$input["helpdesk_item_type"] = array();
}
// Linear_HIT: $input["helpdesk_item_type"] = array_keys($input["helpdesk_item_type"]
$input["helpdesk_item_type"] = exportArrayToDB($input["helpdesk_item_type"]);
}
if (isset($input['helpdesk_hardware']) && is_array($input['helpdesk_hardware'])) {
$helpdesk_hardware = 0;
foreach ($input['helpdesk_hardware'] as $right => $value) {
if ($value) {
$helpdesk_hardware += $right;
}
}
$input['helpdesk_hardware'] = $helpdesk_hardware;
}
if (isset($input["_cycle_ticket"])) {
$tab = Ticket::getAllStatusArray();
$cycle = array();
foreach ($tab as $from => $label) {
foreach ($tab as $dest => $label) {
if (($from != $dest)
&& (!isset($input["_cycle_ticket"][$from][$dest])
|| ($input["_cycle_ticket"][$from][$dest] == 0))) {
$cycle[$from][$dest] = 0;
}
}
}
$input["ticket_status"] = exportArrayToDB($cycle);
}
if (isset($input["_cycle_problem"])) {
$tab = Problem::getAllStatusArray();
$cycle = array();
foreach ($tab as $from => $label) {
foreach ($tab as $dest => $label) {
if (($from != $dest)
&& ($input["_cycle_problem"][$from][$dest] == 0)) {
$cycle[$from][$dest] = 0;
}
}
}
$input["problem_status"] = exportArrayToDB($cycle);
}
if (isset($input["_cycle_change"])) {
$tab = Change::getAllStatusArray();
$cycle = array();
foreach ($tab as $from => $label) {
foreach ($tab as $dest => $label) {
if (($from != $dest)
&& ($input["_cycle_change"][$from][$dest] == 0)) {
$cycle[$from][$dest] = 0;
}
}
}
$input["change_status"] = exportArrayToDB($cycle);
}
$this->profileRight = array();
foreach (ProfileRight::getAllPossibleRights() as $right => $default) {
if (isset($input['_'.$right])) {
if (!is_array($input['_'.$right])) {
$input['_'.$right] = array('1' => $input['_'.$right]);
}
$newvalue = 0;
foreach ($input['_'.$right] as $value => $valid) {
if ($valid) {
if (($underscore_pos = strpos($value, '_')) !== false) {
$value = substr($value, 0, $underscore_pos);
}
$newvalue += $value;
}
}
// Update rights only if changed
if (!isset($this->fields[$right]) || ($this->fields[$right] != $newvalue)) {
$this->profileRight[$right] = $newvalue;
}
unset($input['_'.$right]);
}
}
// check if right if the last write profile on Profile object
if (($this->fields['profile'] & UPDATE)
&& isset($input['profile']) && !($input['profile'] & UPDATE)
&& (countElementsInTable("glpi_profilerights",
"`name` = 'profile' AND `rights` & ".UPDATE))) {
Session::addMessageAfterRedirect(__("This profile is the last with write rights on profiles"),
false, ERROR);
Session::addMessageAfterRedirect(__("Deletion refused"), false, ERROR);
unset($input["profile"]);
}
return $input;
}
/**
* check right before delete
*
* @since version 0.85
*
* @return boolean
**/
function pre_deleteItem() {
global $DB;
if (($this->fields['profile'] & DELETE)
&& (countElementsInTable("glpi_profilerights",
"`name` = 'profile' AND `rights` & ".DELETE))) {
Session::addMessageAfterRedirect(__("This profile is the last with write rights on profiles"),
false, ERROR);
Session::addMessageAfterRedirect(__("Deletion refused"), false, ERROR);
return false;
}
return true;
}
function prepareInputForAdd($input) {
if (isset($input["helpdesk_item_type"])) {
$input["helpdesk_item_type"] = exportArrayToDB($input["helpdesk_item_type"]);
}
$this->profileRight = array();
foreach (ProfileRight::getAllPossibleRights() as $right => $default) {
if (isset($input[$right])) {
$this->profileRight[$right] = $input[$right];
unset($input[$right]);
}
}
return $input;
}
/**
* Unset unused rights for helpdesk
**/
function cleanProfile() {
if ($this->fields["interface"] == "helpdesk") {
foreach ($this->fields as $key=>$val) {
if (!in_array($key,self::$common_fields)
&& !in_array($key,self::$helpdesk_rights)) {
unset($this->fields[$key]);
}
}
}
// decode array
if (isset($this->fields["helpdesk_item_type"])
&& !is_array($this->fields["helpdesk_item_type"])) {
$this->fields["helpdesk_item_type"] = importArrayFromDB($this->fields["helpdesk_item_type"]);
}
// Empty/NULL case
if (!isset($this->fields["helpdesk_item_type"])
|| !is_array($this->fields["helpdesk_item_type"])) {
$this->fields["helpdesk_item_type"] = array();
}
// Decode status array
$fields_to_decode = array('ticket_status', 'problem_status', 'change_status');
foreach ($fields_to_decode as $val) {
if (isset($this->fields[$val]) && !is_array($this->fields[$val])) {
$this->fields[$val] = importArrayFromDB($this->fields[$val]);
// Need to be an array not a null value
if (is_null($this->fields[$val])) {
$this->fields[$val] = array();
}
}
}
}
/**
* Get SQL restrict request to determine profiles with less rights than the active one
*
* @param $separator string Separator used at the beginning of the request (default 'AND')
*
* @return SQL restrict string
**/
static function getUnderActiveProfileRestrictRequest($separator="AND") {
// I don't understand usefull of this code (yllen)
/* if (in_array('reservation', self::$helpdesk_rights)
&& !Session::haveRight('reservation', ReservationItem::RESERVEANITEM)) {
return false;
}
if (in_array('ticket', self::$helpdesk_rights)
&& !Session::haveRightsOr("ticket", array(CREATE, Ticket::READGROUP))) {
return false;
}
if (in_array('followup', self::$helpdesk_rights)
&& !Session::haveRightsOr('followup',
array(TicketFollowup::ADDMYTICKET, TicketFollowup::UPDATEMY,
TicketFollowup::SEEPUBLIC))) {
return false;
}
if (in_array('task', self::$helpdesk_rights)
&& !Session::haveRight('task', TicketTask::SEEPUBLIC)) {
return false;
}
if (in_array('ticketvalidation', self::$helpdesk_rights)
&& !Session::haveRightsOr('ticketvalidation',
array(TicketValidation::CREATEREQUEST,
TicketValidation::CREATEINCIDENT,
TicketValidation::VALIDATEREQUEST,
TicketValidation::VALIDATEINCIDENT))) {
return false;
}
*/
$query = $separator ." ";
// Not logged -> no profile to see
if (!isset($_SESSION['glpiactiveprofile'])) {
return $query." 0 ";
}
// Profile right : may modify profile so can attach all profile
if (Profile::canCreate()) {
return $query." 1 ";
}
if ($_SESSION['glpiactiveprofile']['interface']=='central') {
$query .= " (`glpi_profiles`.`interface` = 'helpdesk') " ;
}
$query .= " OR (`glpi_profiles`.`interface` = '" .
$_SESSION['glpiactiveprofile']['interface'] . "' ";
// First, get all possible rights
$right_subqueries = array();
foreach (ProfileRight::getAllPossibleRights() as $key => $default) {
$val = isset($_SESSION['glpiactiveprofile'][$key])?$_SESSION['glpiactiveprofile'][$key]:0;
if (!is_array($val) // Do not include entities field added by login
&& (($_SESSION['glpiactiveprofile']['interface'] == 'central')
|| in_array($key,self::$helpdesk_rights))) {
$right_subqueries[] = "(`glpi_profilerights`.`name` = '$key'
AND (`glpi_profilerights`.`rights` | $val) = $val)";
}
}
$query .= " AND ".count($right_subqueries)." = (
SELECT count(*)
FROM `glpi_profilerights`
WHERE `glpi_profilerights`.`profiles_id` = `glpi_profiles`.`id`
AND (".implode(' OR ', $right_subqueries).")))";
return $query;
}
/**
* Is the current user have more right than all profiles in parameters
*
* @param $IDs array of profile ID to test
*
* @return boolean true if have more right
**/
static function currentUserHaveMoreRightThan($IDs=array()) {
global $DB;
if (Session::isCron()) {
return true;
}
if (count($IDs) == 0) {
// Check all profiles (means more right than all possible profiles)
return (countElementsInTable('glpi_profiles')
== countElementsInTable('glpi_profiles',
self::getUnderActiveProfileRestrictRequest('')));
}
$under_profiles = array();
$query = "SELECT *
FROM `glpi_profiles` ".
self::getUnderActiveProfileRestrictRequest("WHERE");
$result = $DB->query($query);
while ($data = $DB->fetch_assoc($result)) {
$under_profiles[$data['id']] = $data['id'];
}
foreach ($IDs as $ID) {
if (!isset($under_profiles[$ID])) {
return false;
}
}
return true;
}
function showLegend() {
echo "";
echo "
";
echo "";
echo __('Caption')." ";
echo "".__('Global right')." ".__('Entity right')."
".__('Name')." ";
echo "".__('Comments')." ";
echo "";
echo "";
echo " ".__('Default profile')." ";
Html::showCheckbox(array('name' => 'is_default',
'checked' => $this->fields['is_default']));
echo " ".__("Profile's interface")." ";
echo "";
Dropdown::showFromArray('interface', self::getInterfaces(),
array('value'=>$this->fields["interface"]));
echo " ".__('Update password')." ";
Html::showCheckbox(array('name' => '_password_update',
'checked' => $this->fields['password_update']));
echo " ".__('Ticket creation form on login')." ";
Html::showCheckbox(array('name' => 'create_ticket_on_login',
'checked' => $this->fields['create_ticket_on_login']));
echo " ";
if ($canedit = Session::haveRightsOr(self::$rightname, array(CREATE, UPDATE, PURGE))) {
echo "
";
if ($canedit = Session::haveRightsOr(self::$rightname, array(CREATE, UPDATE, PURGE))) {
echo "
";
if (($canedit = Session::haveRightsOr(self::$rightname, array(UPDATE, CREATE, PURGE)))
&& $openform) {
echo "
";
if (($canedit = Session::haveRightsOr(self::$rightname, array(UPDATE, CREATE, PURGE)))
&& $openform) {
echo "
";
if (($canedit = Session::haveRightsOr(self::$rightname, array(UPDATE, CREATE, PURGE)))
&& $openform) {
echo "
";
if (($canedit = Session::haveRightsOr(self::$rightname, array(CREATE, UPDATE, PURGE)))
&& $openform) {
echo "
'.__("From \ To").' '));
}
/**
* Print the Life Cycles form for the current profile
*
* @param $openform boolean open the form (true by default)
* @param $closeform boolean close the form (true by default)
**/
function showFormLifeCycle($openform=true, $closeform=true) {
if (!self::canView()) {
return false;
}
echo "";
if (($canedit = Session::haveRightsOr(self::$rightname, array(CREATE, UPDATE, PURGE)))
&& $openform) {
echo "
'.__("From \ To").' '));
}
/**
* Print the Life Cycles form for the current profile
*
* @since version 0.85
*
* @param $openform boolean open the form (true by default)
* @param $closeform boolean close the form (true by default)
**/
function showFormLifeCycleHelpdesk($openform=true, $closeform=true) {
if (!self::canView()) {
return false;
}
echo "";
if (($canedit = Session::haveRightsOr(self::$rightname, array(CREATE, UPDATE, PURGE)))
&& $openform) {
echo "
";
if (($canedit = Session::haveRightsOr(self::$rightname, array(CREATE, UPDATE, PURGE)))
&& $openform) {
echo "
";
if (($canedit = Session::haveRightsOr(self::$rightname, array(CREATE, UPDATE, PURGE)))
&& $openform) {
echo "
".__('Select/unselect all')."