e values, just in case
$result = ArrayHelper::toInteger($result);
if (empty($result)) {
$result = [1];
} else {
$result = array_unique($result);
}
}
self::$groupsByUser[$storeId] = $result;
}
return self::$groupsByUser[$storeId];
}
/**
* Method to return a list of user Ids contained in a Group
*
* @param integer $groupId The group Id
* @param boolean $recursive Recursively include all child groups (optional)
*
* @return array
*
* @since 1.7.0
* @todo This method should move somewhere else
*/
public static function getUsersByGroup($groupId, $recursive = false)
{
// Cast as integer until method is typehinted.
$groupId = (int) $groupId;
// Get a database object.
$db = Factory::getDbo();
$test = $recursive ? ' >= ' : ' = ';
// First find the users contained in the group
$query = $db->createQuery()
->select('DISTINCT(' . $db->quoteName('user_id') . ')')
->from($db->quoteName('#__usergroups', 'ug1'))
->join(
'INNER',
$db->quoteName('#__usergroups', 'ug2'),
$db->quoteName('ug2.lft') . $test . $db->quoteName('ug1.lft') . ' AND ' . $db->quoteName('ug1.rgt') . $test . $db->quoteName('ug2.rgt')
)
->join('INNER', $db->quoteName('#__user_usergroup_map', 'm'), $db->quoteName('ug2.id') . ' = ' . $db->quoteName('m.group_id'))
->where($db->quoteName('ug1.id') . ' = :groupId')
->bind(':groupId', $groupId, ParameterType::INTEGER);
$db->setQuery($query);
$result = $db->loadColumn();
// Clean up any NULL values, just in case
$result = ArrayHelper::toInteger($result);
return $result;
}
/**
* Method to return a list of view levels for which the user is authorised.
*
* @param integer $userId Id of the user for which to get the list of authorised view levels.
*
* @return array List of view levels for which the user is authorised.
*
* @since 1.7.0
*/
public static function getAuthorisedViewLevels($userId)
{
// Only load the view levels once.
if (empty(self::$viewLevels)) {
// Get a database object.
$db = Factory::getDbo();
// Build the base query.
$query = $db->createQuery()
->select($db->quoteName(['id', 'rules']))
->from($db->quoteName('#__viewlevels'));
// Set the query for execution.
$db->setQuery($query);
// Build the view levels array.
foreach ($db->loadAssocList() as $level) {
self::$viewLevels[$level['id']] = (array) json_decode($level['rules']);
}
}
// Initialise the authorised array.
$authorised = [1];
// Check for the recovery mode setting and return early.
$user = User::getInstance($userId);
$root_user = Factory::getApplication()->get('root_user');
if (($user->username && $user->username == $root_user) || (is_numeric($root_user) && $user->id > 0 && $user->id == $root_user)) {
// Find the super user levels.
foreach (self::$viewLevels as $level => $rule) {
foreach ($rule as $id) {
if ($id > 0 && self::checkGroup($id, 'core.admin')) {
$authorised[] = $level;
break;
}
}
}
return array_values(array_unique($authorised));
}
// Get all groups that the user is mapped to recursively.
$groups = self::getGroupsByUser($userId);
// Find the authorised levels.
foreach (self::$viewLevels as $level => $rule) {
foreach ($rule as $id) {
if (($id < 0) && (($id * -1) == $userId)) {
$authorised[] = $level;
break;
}
if (($id >= 0) && \in_array($id, $groups)) {
// Check to see if the group is mapped to the level.
$authorised[] = $level;
break;
}
}
}
return array_values(array_unique($authorised));
}
/**
* Method to return a list of actions from a file for which permissions can be set.
*
* @param string $file The path to the XML file.
* @param string $xpath An optional xpath to search for the fields.
*
* @return boolean|array False if case of error or the list of actions available.
*
* @since 3.0.0
*/
public static function getActionsFromFile($file, $xpath = "/access/section[@name='component']/")
{
if (!is_file($file) || !is_readable($file)) {
// If unable to find the file return false.
return false;
}
// Else return the actions from the xml.
$xml = simplexml_load_file($file);
return self::getActionsFromData($xml, $xpath);
}
/**
* Method to return a list of actions from a string or from an xml for which permissions can be set.
*
* @param string|\SimpleXMLElement $data The XML string or an XML element.
* @param string $xpath An optional xpath to search for the fields.
*
* @return boolean|array False if case of error or the list of actions available.
*
* @since 3.0.0
*/
public static function getActionsFromData($data, $xpath = "/access/section[@name='component']/")
{
// If the data to load isn't already an XML element or string return false.
if ((!($data instanceof \SimpleXMLElement)) && (!\is_string($data))) {
return false;
}
// Attempt to load the XML if a string.
if (\is_string($data)) {
try {
$data = new \SimpleXMLElement($data);
} catch (\Exception) {
return false;
}
// Make sure the XML loaded correctly.
if (!$data) {
return false;
}
}
// Initialise the actions array
$actions = [];
// Get the elements from the xpath
$elements = $data->xpath($xpath . 'action[@name][@title]');
// If there some elements, analyse them
if (!empty($elements)) {
foreach ($elements as $element) {
// Add the action to the actions array
$action = [
'name' => (string) $element['name'],
'title' => (string) $element['title'],
];
if (isset($element['description'])) {
$action['description'] = (string) $element['description'];
}
$actions[] = (object) $action;
}
}
// Finally return the actions array
return $actions;
}
}
An Error Occurred: Whoops, looks like something went wrong.
Sorry, there was a problem we could not recover from.
The server returned a "500 - Whoops, looks like something went wrong."