source: trunk/workflow/inc/engine/class.ajax_ldap.inc.php @ 7655

<?php
        /**
        * @package Galaxia
        * @author Mauricio Luiz Viani - viani@celepar.pr.gov.br
        */

class ajax_ldap
{
        /**
        * @var object $ds data source
        * @access public
        */
        var $ds;
        /**
        * @var $user_context
        * @access public
        */
        var $user_context  = '';
        /**
        * @var $group_context
        * @access public
        */
        var $group_context = '';
        /**
        *
        * @return void
        * @access public
        */
        function ajax_ldap()
        {
                $tmpLDAP = &Factory::getInstance('WorkflowLDAP');
                $this->user_context  = $tmpLDAP->getUserContext();
                $this->group_context = $tmpLDAP->getGroupContext();

                $this->ds =& Factory::getInstance('WorkflowObjects')->getLDAP();
        }

        /**
        * @param integer $account_id
        * @param $wich
        * @return
        * @access public
        */
        function id2name($account_id,$which='account_lid')
        {
                if ($which == 'account_lid' || $which == 'account_type')        // groups only support account_lid and account_type
                {
                        $allValues = array();
                        $sri = ldap_search($this->ds, $this->group_context, '(&(gidnumber=' . (int)$account_id . ')(phpgwaccounttype=g))');
                        $allValues = ldap_get_entries($this->ds, $sri);

                        $attr = $which == 'account_lid' ? 'cn' : 'phpgwaccounttype';
                        if (@$allValues[0]['cn'][0])
                        {
                                return $allValues[0]['cn'][0];
                        }
                }
                $to_ldap = array(
                                'account_lid'   => 'uid',
                                'account_email' => 'mail',
                                'account_firstname' => 'surname',
                                'account_lastname'  => 'cn',
                                'account_type'      => 'phpgwaccounttype',
                );
                if (!isset($to_ldap[$which])) return False;

                $allValues = array();
                $sri = ldap_search($this->ds, $this->user_context, '(&(uidnumber=' . (int)$account_id . ')(phpgwaccounttype=u))');
                $allValues = ldap_get_entries($this->ds, $sri);

                if (@$allValues[0][$to_ldap[$which]][0])
                {
                        return $allValues[0][$to_ldap[$which]][0];
                }
                return False;
        }

        /**
        * Get full account data from account id
        * @return array the whole config-array for that app
        * @access public
        */
        function id2fullname($account_id)
    {
                return Factory::getInstance('WorkflowLDAP')->getName($account_id);
    }

    /**
        * Close the ldap connection
        * @return void
        * @access public
        */
    function close()
    {
        ldap_close($this->ds);
    }

    /**
    * Return groups IDs and names of a given user
    * @param $accountID ID of the user that we want to know the groups
        * @return mixed Array containing the groups informations or false in case no group was found
        * @access public
        */
    function membership($accountID = '')
        {
                if ($accountID == '')
                        $accountID = $_SESSION['phpgw_info']['workflow']['account_id'];

                $ldap =& Factory::getInstance('WorkflowLDAP');
                if (count($output = $ldap->getUserGroups($accountID)) == 0)
                        return false;
                else
                        return $output;
        }
        /**
        * @param string $app
        * @param string $required
        * @param string $accountid
        * @return mixed
        * @access public
        */
        function get_location_list_for_id($app, $required, $accountid = '')
        {
                $GLOBALS['ajax']->db->select('phpgw_acl','acl_location,acl_rights',array(
                                'acl_appname' => $app,
                                'acl_account' => $accountid,
                        ),__LINE__,__FILE__);

                $locations = false;
                while ($GLOBALS['ajax']->db->next_record())
                {
                        if ($GLOBALS['ajax']->db->f('acl_rights') & $required)
                        {
                                $locations[] = $GLOBALS['ajax']->db->f('acl_location');
                        }
                }
                return $locations;
        }
        /**
        * Return members from accountid
        *
        * @param integer $accountid
        * @return mixed (boolean or array)
        * @access public
        */
        function member($accountid = '')
        {
                        $security_equals = Array();
                        $security_equals = $this->get_ids_for_location($accountid, 1, 'phpgw_group');

                        if ($security_equals == False)
                        {
                                return False;
                        }

                        $members = array();
            $security_equals_count = count($security_equals);

                        for ($idx=0; $idx<$security_equals_count; ++$idx)
                        {
                                $name = $this->id2name((int)$security_equals[$idx]);
                                $members[] = Array('account_id' => (int)$security_equals[$idx], 'account_name' => $name);
                        }

                        return $members;
                }
        /**
         * Return accounts from location
         *
         * @param $location
         * @param $required
         * @param $app
         * @return void
         * @access public
         */
        function get_ids_for_location($location, $required, $app = False)
        {

                        $GLOBALS['ajax']->db->select('phpgw_acl',array('acl_account','acl_rights'),array(
                                'acl_appname'  => $app,
                                'acl_location' => $location,
                                ),__LINE__,__FILE__);

                        $accounts = false;
                        while ($GLOBALS['ajax']->db->next_record())
                        {
                                if (!!($GLOBALS['ajax']->db->f('acl_rights') & $required))
                                {
                                        $accounts[] = (int) $GLOBALS['ajax']->db->f('acl_account');
                                }
                        }
                        return $accounts;
        }

}
?>