diff --git a/interface/lib/classes/remoting.inc.php b/interface/lib/classes/remoting.inc.php index cc76bc725a944cc214915bd5cfbddd8e51b88b4a..7c3d057af148396da462c883dca914f2aa4fe587 100644 --- a/interface/lib/classes/remoting.inc.php +++ b/interface/lib/classes/remoting.inc.php @@ -199,6 +199,69 @@ class remoting { } } + /** + * set record permissions in any table + * @param string session_id + * @param string index_field + * @param string index_value + * @param array permissions + * @author "ispcomm", improved by M. Cramer + */ + public function update_record_permissions($tablename, $index_field, $index_value, $permissions) { + global $app; + + if(!$this->checkPerm($session_id, 'admin_record_permissions')) { + $this->server->fault('permission_denied', 'You do not have the permissions to access this function.'); + return false; + } + + foreach($permissions as $key => $value) { // make sure only sys_ fields are updated + switch($key) { + case 'sys_userid': + // check if userid is valid + $check = $app->db->queryOneRecord('SELECT userid FROM sys_user WHERE userid = ' . $app->functions->intval($value)); + if(!$check || !$check['userid']) { + $this->server->fault('invalid parameters', $value . ' is no valid sys_userid.'); + return false; + } + $value = $app->functions->intval($value); + break; + case 'sys_groupid': + // check if groupid is valid + $check = $app->db->queryOneRecord('SELECT groupid FROM sys_group WHERE groupid = ' . $app->functions->intval($value)); + if(!$check || !$check['groupid']) { + $this->server->fault('invalid parameters', $value . ' is no valid sys_groupid.'); + return false; + } + $value = $app->functions->intval($value); + break; + case 'sys_perm_user': + case 'sys_perm_group': + // check if permissions are valid + $value = strtolower($value); + if(!preg_match('/^[riud]+$/', $value)) { + $this->server->fault('invalid parameters', $value . ' is no valid permission string.'); + return false; + } + + $newvalue = ''; + if(strpos($value, 'r') !== false) $newvalue .= 'r'; + if(strpos($value, 'i') !== false) $newvalue .= 'i'; + if(strpos($value, 'u') !== false) $newvalue .= 'u'; + if(strpos($value, 'd') !== false) $newvalue .= 'd'; + $value = $newvalue; + unset($newvalue); + + break; + default: + $this->server->fault('invalid parameters', 'Only sys_userid, sys_groupid, sys_perm_user and sys_perm_group parameters can be changed with this function.'); + break; + } + } + + return $app->db->datalogUpdate( $tablename, $permissions, $index_field, $index_value ) ; + } + /** Gets the ISPconfig version of the server @param int session_id diff --git a/interface/web/admin/lib/remote.conf.php b/interface/web/admin/lib/remote.conf.php index 4268f47e120e0f706054d2e6b2885b2f024000fc..c40e8bf07257ddbbdaeae7e39395b6081b244398 100644 --- a/interface/web/admin/lib/remote.conf.php +++ b/interface/web/admin/lib/remote.conf.php @@ -1,5 +1,6 @@