Changeset 1087 for devel

Timestamp:

04/26/07 09:05:09 (2 years ago)

Author:

ben

Message:

Added permissions checking for all of the new community functions.

Files:

• devel/mod/community/lib/communities_actions.php (modified) (1 diff)
• devel/mod/community/lib/communities_edit.php (modified) (1 diff)
• devel/mod/community/lib/communities_members.php (modified) (1 diff)
• devel/mod/community/lib/communities_moderator_of.php (modified) (1 diff)
• devel/mod/community/lib/community_memberships.php (modified) (1 diff)

devel/mod/community/lib/communities_actions.php

@@ -11 +11 @@
-$friend_id = optional_param('friend_id',0,PARAM_INT);
-
-switch($action
+if (isloggedin()
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
-                } else {
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-                }
-            }
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-                         }
-                     } else if ($friend->moderation == "yes") {
-                         $messages[] = sprintf(__gettext("Membership of %s needs to be approved. Your request has been added to the list."), stripslashes($friend->name));
-                         if (user_flag_get("emailnotifications",$owner->ident)) {
-                             $message_body = sprintf(__gettext("%s has applied to join %s!\n\nTo visit this user's profile, click on the following link:\n\n\t".
-                                                                     "%s\n\nTo view all membership requests and approve or deny this user, click here:\n\n\t%s\n\nRegards,\n\nThe %s team."),
-                                                                     $_SESSION['name'], $friend->name, $CFG->wwwroot . user_info("username",$USER->ident) . "/", $CFG->wwwroot . "_communities/members.php?owner=" . $friend_id,$CFG->sitename);
-                             $title = sprintf(__gettext("New %s member request"), $friend->name);
-                             notify_user($owner->ident,$title,$message_body);
-                         }
-                     } else if ($friend->moderation == "priv") {
-                         $messages[] = sprintf(__gettext("%s is a private community. Your membership request has been declined."), stripslashes($friend->name));
-                     }
-                 }
-             }
-}
-     break;
-
-// Unfriend someone
-case "unfriend":
-if (!empty($friend_id) && logged_on
-if (user_type($friend_id) == "community") {
-$name = user_info('username', $friend_id
-$messages[] = sprintf(__gettext("You left %s."), $name);
+    break;
+
+
+    case "unfriend":
+        if (!empty($friend_id) && logged_on) {
+        if (user_type($friend_id) == "community"
+        $name = user_info('username', $friend_id);
+    $messages[] = sprintf(__gettext("You left %s."), $name
+}
-             }
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-          }
-          else{
-            $messages = sprintf(__gettext("%s coundn't be removed from your community"),$name);
-          }
-        }
-      }
-    break;
-
-    case "weblogs:post:add":
-        if (user_type($page_owner) == "community") {
-            $messages[] = __gettext("Your post has been added to the community weblog.");
-        }
-        break;
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-                     } else {
-An error occurred: the membership request could not be approved
+Error: you do not have authority to modify this membership request
-                     }
-                 } else {
-Error: you do not have authority to modify this membership request
+An error occurred: the membership request could not be found
-                 }
-
-
+
-             }
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-                 } else {
-Error: you do not have authority to modify this membership request
+An error occurred: the membership request could not be found
-                 }
-
-
+
-             }
-
-     }
-     break;
-
+
+
+}
+
-}
-?>

devel/mod/community/lib/communities_edit.php

@@ -26 +26 @@
-            $membercount = count($members);
-            $functions[] = "<a href=\"".$CFG->wwwroot.$info->username."/community/members\">".__gettext("Members")."&nbsp;(".$membercount.")</a>";
-user_id
-
-
-$msg= "onclick=\"return confirm('". __gettext("Are you sure you want to delete this community?"
-
-}
-else{
-$_body = &$member
-$msg= "onclick=\"return confirm('". __gettext("Are you sure you want to separate this user from the community?") ."')\"
-$functions[] = "<a href=\"".$CFG->wwwroot.$info->username."/community/separate/".$user_id."\" $msg>".__gettext("Separate")."</a>";
+_SESSION['userid']
+  
+  
+  $msg= "onclick=\"return confirm('". addslashes(__gettext("Are you sure you want to delete this community?")
+  
+    if ($user_id != $_SESSION['userid']) {
+        $_body = &$member;
+      $msg= "onclick=\"return confirm('". addslashes(__gettext("Are you sure you want to separate this user from the community?")) ."')\""
+      $functions[] = "<a href=\"".$CFG->wwwroot.$info->username."/community/separate/".$user_id."\" $msg>".__gettext("Separate")."</a>
+  }
-            }
-            $functions = implode("\n",array_map(create_function('$entry',"return \"<li>\$entry</li>\";"),$functions));

devel/mod/community/lib/communities_members.php

@@ -22 +22 @@
-            // $friends_menu = run("users:infobox:menu",array($info->ident));
-            $functions = array();
-
-
-
+
+
+
+
-            }
-
-
+ if ($community_owner == $info->ident) 
+  
-            }
-            //@todo Add the funcionality to add admin users.

devel/mod/community/lib/communities_moderator_of.php

@@ -23 +23 @@
-            $membercount = count($members);
-            $functions[] = "<a href=\"".$CFG->wwwroot.$info->username."/community/members\">".__gettext("Members")."&nbsp;(".$membercount.")</a>";
-
-
-
+
+
+
+
+
-
-            $functions = implode("\n",array_map(create_function('$entry',"return \"<li>\$entry</li>\";"),$functions));

devel/mod/community/lib/community_memberships.php

@@ -41 +41 @@
-                                 __gettext("Members"),
-                                 $friends,
-url.user_info('ident
+$CFG->wwwroot.user_info('username
-                                 )
-                           );