flashii/misuzu
flashii/misuzu
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

// unfuck the permissions a bit so i can push to release

Browse source
This commit is contained in:
flash 2018-12-16 22:52:41 +01:00
parent 3294cdbf5b
commit 1042f0f6f7
2 changed files with 43 additions and 28 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
public/index.php
View file

@ -1,6 +1,24 @@
<?php
require_once '../misuzu.php';
if (!empty($_GET['pdump'])) {
header('Content-Type: text/plain');
for ($i = 0; $i < 10; $i++) {
$perms = [];
echo "# USER {$i}\n";
foreach (MSZ_PERM_MODES as $mode) {
$perms = decbin(perms_get_user($mode, $i));
echo "{$mode}: {$perms}\n";
}
echo "\n";
}
return;
}
if (config_get_default(false, 'Site', 'embed_linked_data')) {
tpl_var('linked_data', [
'name' => config_get('Site', 'name'),

53
src/perms.php
View file

@ -54,39 +54,36 @@ function perms_get_user(string $prefix, int $user): int
return 0;
}
if ($user === 1) {
return 0x7FFFFFFF;
}
$allowKey = perms_get_key($prefix, MSZ_PERMS_ALLOW);
$denyKey = perms_get_key($prefix, MSZ_PERMS_DENY);
$overrideKey = perms_get_key($prefix, MSZ_PERMS_OVERRIDE);
$getPerms = db_prepare("
SELECT
(user.`{$allowKey}` &~ user.`{$denyKey}`) | (
(
SELECT
(BIT_OR(roles.`{$allowKey}`) &~ BIT_OR(roles.`{$denyKey}`)) | (
(
SELECT global.{$allowKey} | global.{$denyKey}
FROM `msz_permissions` as global
WHERE global.`user_id` IS NULL
AND global.`role_id` IS NULL
) &~ BIT_OR(roles.`{$overrideKey}`)
)
FROM `msz_permissions` as roles
WHERE roles.`user_id` IS NULL
AND roles.`role_id` IN (
SELECT `role_id`
FROM `msz_user_roles`
WHERE `user_id` = :user_id_2
)
) &~ user.`{$overrideKey}`
)
FROM `msz_permissions` as user
WHERE user.`user_id` = :user_id_1
AND user.`role_id` IS NULL
SELECT BIT_OR(_pu.`{$allowKey}`) &~ BIT_OR(_pu.`{$denyKey}`) | (
(
SELECT BIT_OR(_pr.`{$allowKey}`) &~ BIT_OR(_pr.`{$denyKey}`) | (
(
SELECT BIT_OR(_pg.`{$allowKey}`) &~ BIT_OR(_pg.`{$denyKey}`)
FROM `msz_permissions` as _pg
WHERE _pg.`user_id` IS NULL
AND _pg.`role_id` IS NULL
) &~ BIT_OR(_pr.`{$overrideKey}`)
)
FROM `msz_permissions` as _pr
WHERE _pr.`user_id` IS NULL
AND _pr.`role_id` IN (
SELECT _prr.`role_id`
FROM `msz_user_roles` as _pru
LEFT JOIN `msz_roles` as _prr
ON _prr.`role_id` = _pru.`role_id`
WHERE _pru.`user_id` = :user_id_2
ORDER BY _prr.`role_hierarchy`
)
) &~ BIT_OR(_pu.`{$overrideKey}`)
)
FROM `msz_permissions` as _pu
WHERE _pu.`user_id` = :user_id_1
AND _pu.`role_id` IS NULL
");
$getPerms->bindValue('user_id_1', $user);
$getPerms->bindValue('user_id_2', $user);