grocy/controllers/UsersController.php
2026-08-26 20:08:22 +02:00

106 lines
3.2 KiB
PHP

<?php
namespace Grocy\Controllers;
use Grocy\Controllers\Users\User;
use Grocy\Services\SessionService;
use Grocy\Services\UserfieldsService;
use Psr\Http\Message\ResponseInterface as Response;
use Psr\Http\Message\ServerRequestInterface as Request;
class UsersController extends BaseController
{
public function PermissionList(Request $request, Response $response, array $args)
{
User::CheckPermission($request, User::PERMISSION_USERS_READ);
return $this->RenderPage($response, 'userpermissions', [
'user' => $this->DB->users($args['userId']),
'permissions' => $this->DB->uihelper_user_permissions()
->where('parent IS NULL')->where('user_id', $args['userId'])
]);
}
public function UserEditForm(Request $request, Response $response, array $args)
{
if ($args['userId'] == 'new')
{
User::CheckPermission($request, User::PERMISSION_USERS_CREATE);
return $this->RenderPage($response, 'userform', [
'mode' => 'create',
'userfields' => UserfieldsService::GetInstance()->GetFields('users')
]);
}
else
{
if ($args['userId'] == GROCY_USER_ID)
{
User::CheckPermission($request, User::PERMISSION_USERS_EDIT_SELF);
}
else
{
User::CheckPermission($request, User::PERMISSION_USERS_EDIT);
}
return $this->RenderPage($response, 'userform', [
'user' => $this->DB->users($args['userId']),
'mode' => 'edit',
'userfields' => UserfieldsService::GetInstance()->GetFields('users'),
'userfieldValues' => UserfieldsService::GetInstance()->GetAllValues('users')
]);
}
}
public function UserSettings(Request $request, Response $response, array $args)
{
return $this->RenderPage($response, 'usersettings', [
'languages' => array_filter(scandir(__DIR__ . '/../localization'), function ($item)
{
if ($item == '.' || $item == '..')
{
return false;
}
return is_dir(__DIR__ . '/../localization/' . $item);
})
]);
}
public function UsersList(Request $request, Response $response, array $args)
{
User::CheckPermission($request, User::PERMISSION_USERS_READ);
return $this->RenderPage($response, 'users', [
'users' => $this->DB->users()->orderBy('username'),
'userfields' => UserfieldsService::GetInstance()->GetFields('users'),
'userfieldValues' => UserfieldsService::GetInstance()->GetAllValues('users')
]);
}
public function SessionList(Request $request, Response $response, array $args)
{
if ($args['userId'] == GROCY_USER_ID)
{
User::CheckPermission($request, User::PERMISSION_USERS_EDIT_SELF);
}
else
{
User::CheckPermission($request, User::PERMISSION_USERS_EDIT);
}
$thisSessionTokenHashes = [];
if (isset($_COOKIE[SessionService::SESSION_TOKEN_COOKIE_NAME_ACCESS]))
{
$thisSessionTokenHashes[] = hash('sha256', $_COOKIE[SessionService::SESSION_TOKEN_COOKIE_NAME_ACCESS]);
}
if (isset($_COOKIE[SessionService::SESSION_TOKEN_COOKIE_NAME_REMEMBER_ME]))
{
$thisSessionTokenHashes[] = hash('sha256', $_COOKIE[SessionService::SESSION_TOKEN_COOKIE_NAME_REMEMBER_ME]);
}
return $this->RenderPage($response, 'managesessions', [
'user' => $this->DB->users($args['userId']),
'thisSessionTokenHashes' => $thisSessionTokenHashes,
'sessionRows' => $this->DB->sessions()->where('user_id', $args['userId'])->orderBy('id')
]);
}
}