X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=SL%2FMenu.pm;h=7abab0d6a432f8aa7eb157fa5aef39123892ada3;hb=786b3862388eb8d4cdcc5dfc663a37fe0e9a82a1;hp=77bc848fd2b8fec7e23385c491ce48c443500ae8;hpb=181ce4f5bab35c1f270a192f062cd27cd34060ba;p=kivitendo-erp.git diff --git a/SL/Menu.pm b/SL/Menu.pm index 77bc848fd..7abab0d6a 100644 --- a/SL/Menu.pm +++ b/SL/Menu.pm @@ -34,17 +34,26 @@ package Menu; +use SL::Auth; +use SL::Inifile; + sub new { $main::lxdebug->enter_sub(); - my ($type, $menufile, $level) = @_; + my ($type, $menufile) = @_; - use SL::Inifile; - my $self = Inifile->new($menufile, $level); + my $self = {}; + my $inifile = Inifile->new($menufile); - $main::lxdebug->leave_sub(); + map { $self->{$_} = $inifile->{$_} } keys %{ $inifile }; bless $self, $type; + + $self->set_access(); + + $main::lxdebug->leave_sub(); + + return $self; } sub menuitem { @@ -68,8 +77,7 @@ sub menuitem { my $level = $form->escape($item); - my $str = - qq|{path}&action=$action&level=$level&login=$form->{login}&password=$form->{password}|; + my $str = qq|escape($item); - my $str = qq|escape($action) . qq|&level=| . $form->escape($level); my @vars = qw(module action target href); @@ -160,6 +166,63 @@ sub menuitem_v3 { return $str; } +sub menuitem_XML { + $main::lxdebug->enter_sub(); + + my ($self, $myconfig, $form, $item, $other) = @_; + + my $module = $form->{script}; + my $action = "section_menu"; + my $target = ""; + + if ($self->{$item}{module}) { + $module = $self->{$item}{module}; + } + if ($self->{$item}{action}) { + $action = $self->{$item}{action}; + } + if ($self->{$item}{target}) { + $target = $self->{$item}{target}; + } + + my $level = $form->escape($item); + + my $str = qq| link="$module?action=| . $form->escape($action) . + qq|&level=| . $form->escape($level); + + my @vars = qw(module action target href); + + if ($self->{$item}{href}) { + $str = qq| link=$self->{$item}{href}|; + @vars = qw(module target href); + } + + map { delete $self->{$item}{$_} } @vars; + + # add other params + foreach my $key (keys %{ $self->{$item} }) { + $str .= "&" . $form->escape($key, 1) . "="; + ($value, $conf) = split(/=/, $self->{$item}{$key}, 2); + $value = $myconfig->{$value} . "/$conf" if ($conf); + $str .= $form->escape($value, 1); + } + + $str .= '"'; + + + + if ($other) { + foreach my $key (keys(%{$other})) { + $str .= qq| ${key}="| . $form->quote($other->{$key}) . qq|"|; + } + } + + + $main::lxdebug->leave_sub(); + + return $str; +} + sub menuitemNew { my ($self, $myconfig, $form, $item) = @_; @@ -175,8 +238,7 @@ sub menuitemNew { } my $level = $form->escape($item); - my $str = - qq|$module?path=$form->{path}&action=$action&level=$level&login=$form->{login}&password=$form->{password}|; + my $str = qq|$module?action=$action&level=$level|; my @vars = qw(module action target href); if ($self->{$item}{href}) { @@ -240,5 +302,103 @@ sub generate_acl { } } +sub parse_access_string { + my $self = shift; + my $key = shift; + my $access = shift; + + my @stack; + my $cur_ary = []; + + push @stack, $cur_ary; + + while ($access =~ m/^([a-z_]+|\||\&|\(|\)|\s+)/) { + my $token = $1; + substr($access, 0, length($1)) = ""; + + next if ($token =~ /\s/); + + if ($token eq "(") { + my $new_cur_ary = []; + push @stack, $new_cur_ary; + push @{$cur_ary}, $new_cur_ary; + $cur_ary = $new_cur_ary; + + } elsif ($token eq ")") { + pop @stack; + if (!@stack) { + $main::form->error("Error in menu.ini for entry ${key}: missing '('"); + } + $cur_ary = $stack[-1]; + + } elsif (($token eq "|") || ($token eq "&")) { + push @{$cur_ary}, $token; + + } else { + push @{$cur_ary}, $main::auth->check_right($main::form->{login}, $token, 1); + } + } + + if ($access) { + $main::form->error("Error in menu.ini for entry ${name}: unrecognized token at the start of '$access'\n"); + } + + if (1 < scalar @stack) { + $main::form->error("Error in menu.ini for entry ${name}: Missing ')'\n"); + } + + return SL::Auth::evaluate_rights_ary($stack[0]); +} + +sub set_access { + my $self = shift; + + my $key; + + foreach $key (@{ $self->{ORDER} }) { + my $entry = $self->{$key}; + + $entry->{GRANTED} = $entry->{ACCESS} ? $self->parse_access_string($key, $entry->{ACCESS}) : 1; + $entry->{IS_MENU} = $entry->{submenu} || ($key !~ m/--/); + $entry->{NUM_VISIBLE_CHILDREN} = 0; + + if ($key =~ m/--/) { + my $parent = $key; + substr($parent, rindex($parent, '--')) = ''; + $entry->{GRANTED} &&= $self->{$parent}->{GRANTED}; + } + + $entry->{VISIBLE} = $entry->{GRANTED}; + } + + foreach $key (reverse @{ $self->{ORDER} }) { + my $entry = $self->{$key}; + + if ($entry->{IS_MENU}) { + $entry->{VISIBLE} &&= $entry->{NUM_VISIBLE_CHILDREN} > 0; + } + + next if (($key !~ m/--/) || !$entry->{VISIBLE}); + + my $parent = $key; + substr($parent, rindex($parent, '--')) = ''; + $self->{$parent}->{NUM_VISIBLE_CHILDREN}++; + } + +# $self->dump_visible(); + + $self->{ORDER} = [ grep { $self->{$_}->{VISIBLE} } @{ $self->{ORDER} } ]; + + map { delete @{$self->{$_}}{qw(GRANTED IS_MENU NUM_VISIBLE_CHILDREN VISIBLE ACCESS)} if ($_ ne 'ORDER') } keys %{ $self }; +} + +sub dump_visible { + my $self = shift; + foreach my $key (@{ $self->{ORDER} }) { + my $entry = $self->{$key}; + $main::lxdebug->message(0, "$entry->{GRANTED} $entry->{VISIBLE} $entry->{NUM_VISIBLE_CHILDREN} $key"); + } +} + 1;