piwik_useradmin.php

Go to the documentation of this file.

<?php
/*
 ----------------------------------------------------------------------
 LICENSE
 
 This program is free software; you can redistribute it and/or
 modify it under the terms of the GNU General Public License (GPL)
 as published by the Free Software Foundation; either version 2
 of the License, or (at your option) any later version.
 
 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 GNU General Public License for more details.
 
 To read the license please visit http://www.gnu.org/copyleft/gpl.html
 ----------------------------------------------------------------------
*/
 
/**
 * Manages piwik user accounts
 * @copyright AlternC-Team 2000-2017 https://alternc.com/
 */
 
 require_once("../class/config.php");
include_once("head.php");
 
$fields = array (
   "user_name"       => array ("post", "string", FALSE),
   "site_id"         => array ("post", "integer", -1),
   "right"           => array ("post", "string", FALSE),
);
getFields($fields);
 
if ($user_name === FALSE)
{
    $msg->raise("ERROR", "piwik", _('No piwik user specified'));
}
else
{
   // Add a user to a piwik website
   if ($site_id != -1 && $right !== FALSE) {
      $db->query("SELECT COUNT(*) AS ok FROM piwik_sites WHERE uid=? AND piwik_id=?;",array($cuid,$site_id));
      $db->next_record();
      if ($db->f('ok')!=1)
      {
         $msg->raise("ERROR", "piwik", _("You don't own this piwik website"));
      }
      else
      {
         $db->query("SELECT COUNT(*) AS ok FROM piwik_users WHERE uid=? AND login=?",array($cuid,$user_name));
         $db->next_record();
         if ($db->f('ok')!=1)
         {
            $msg->raise("ERROR", "piwik", _("You don't own this piwik user"));
         }
         else
         {
            $piwik_rights = array("noaccess", "view", "admin");
            if (in_array($right, $piwik_rights))
            {
               $api_data = $piwik->site_set_user_right($site_id, $user_name, $right);
               if ($api_data === FALSE)
                  $msg->raise("ERROR", "piwik", $api_data->message);
                  $msg->raise("ERROR", "piwik", $api_data->message);
               else
                  $msg->raise("INFO", "piwik", _('success'));
            }
            else
            {
               $msg->raise("ERROR", "piwik", _("This right does not exist"));
            }
         }
      }
   }
 
   $user_piwik_sites = array();
   $db->query("SELECT piwik_id FROM piwik_sites WHERE uid=?",array($cuid));
   while ($db->next_record()) 
      array_push($user_piwik_sites, $db->f('piwik_id'));
   // Weird behaviour of php: array_push products an array such as:
   // array_push(array(1,2,3) , 4) produces
   // array(0 => 1, 1 => 2, 2 => 3, 3 => 4)
   // So for further comparison, we need to exchange keys and values
   $user_piwik_sites = array_flip($user_piwik_sites);
 
   $user_piwik_users = array();
   $db->query("SELECT login FROM piwik_users WHERE uid=?",arary($cuid));
   while ($db->next_record())
      array_push ($user_piwik_users, $db->f('login'));
   // Swap keys and values, see user_piwik_sites
   $user_piwik_users = array_flip($user_piwik_users);
}
 
?>
<h3><?php printf('%s "%s"', _("Rights for user"), $user_name); ?></h3>
<?php
echo $msg->msg_html_all();
 
$raw_sites = $piwik->get_site_list();
$piwik_sites = array();
foreach ($raw_sites AS $site) {
   $piwik_sites[ $site->idsite ] = array('name' => $site->name, 'url' => $site->main_url);
}
 
$raw_access = $piwik->get_site_access($user_name);
 
$piwik_user_sites = array_intersect_ukey($piwik_sites, $user_piwik_sites, "strcmp");
$available_user_sites = $piwik_user_sites;
 
echo '<ul>';
foreach ($raw_access AS $access)
{
   unset($available_user_sites[ $access->site ]);
   printf("<li>%s -> %s</li>\n", $piwik_sites[ $access->site ]['name'], $access->access);
}
echo '</ul>';
if (count($available_user_sites)>0)
{
?>
<h3><?php printf('%s "%s"', _("Add rights to user"), $user_name); ?></h3>
<ul>
<?php
foreach ($available_user_sites AS $current_id_site => $available_user_site)
{
   printf('<li>%s <form method="post"><input type="hidden" name="site_id" value="%d">
<input type="hidden" name="csrf" value="'.csrf_get(true).'" />
<select name="right">
   <option value="noaccess">%s</option>
   <option value="view">%s</option>
   <option value="admin">%s</option>
</select>
<input type="submit" name="add" value="ajouter" class="inb" /></form></li>', $available_user_site['name'], $current_id_site, _("noacces"), _("view"), _("admin"));
}
?>
</li>
<?php 
}
include_once("foot.php"); ?>