]> git.mxchange.org Git - friendica.git/blobdiff - src/Core/ACL.php
Merge pull request #8227 from annando/daemon-checks
[friendica.git] / src / Core / ACL.php
index c258e0d0bf5e45936948d5e52af94e284ba7628e..b604218774e3304cc0dc3ea0d4e8baba0e8b3ebf 100644 (file)
-<?php\r
-\r
-/**\r
- * @file src/Core/Acl.php\r
- */\r
-\r
-namespace Friendica\Core;\r
-\r
-use dba;\r
-use Friendica\BaseObject;\r
-use Friendica\Content\Feature;\r
-use Friendica\Database\DBM;\r
-use Friendica\Model\Contact;\r
-use Friendica\Model\GContact;\r
-use Friendica\Util\Network;\r
-use const CONTACT_IS_FRIEND;\r
-use const NETWORK_DFRN;\r
-use const NETWORK_DIASPORA;\r
-use const NETWORK_FACEBOOK;\r
-use const NETWORK_MAIL;\r
-use const NETWORK_OSTATUS;\r
-use const PHP_EOL;\r
-use function dbesc;\r
-use function defaults;\r
-use function get_markup_template;\r
-use function get_server;\r
-use function local_user;\r
-use function remote_user;\r
-use function replace_macros;\r
-\r
-/**\r
- * Handle ACL management and display\r
- *\r
- * @author Hypolite Petovan <mrpetovan@gmail.com>\r
- */\r
-class ACL extends BaseObject\r
-{\r
-       /**\r
-        * Returns a select input tag with all the contact of the local user\r
-        *\r
-        * @param string $selname Name attribute of the select input tag\r
-        * @param string $selclass Class attribute of the select input tag\r
-        * @param array $options Available options:\r
-        * - size: length of the select box\r
-        * - mutual_friends: Only used for the hook\r
-        * - single: Only used for the hook\r
-        * - exclude: Only used for the hook\r
-        * @param array $preselected Contact ID that should be already selected\r
-        * @return string\r
-        */\r
-       public static function getSuggestContactSelectHTML($selname, $selclass, array $options = [], array $preselected = [])\r
-       {\r
-               $a = self::getApp();\r
-\r
-               $networks = null;\r
-\r
-               $size = defaults($options, 'size', 4);\r
-               $mutual = !empty($options['mutual_friends']);\r
-               $single = !empty($options['single']) && empty($options['multiple']);\r
-               $exclude = defaults($options, 'exclude', false);\r
-\r
-               switch (defaults($options, 'networks', Protocol::PHANTOM)) {\r
-                       case 'DFRN_ONLY':\r
-                               $networks = [NETWORK_DFRN];\r
-                               break;\r
-                       case 'PRIVATE':\r
-                               if (!empty($a->user['prvnets'])) {\r
-                                       $networks = [NETWORK_DFRN, NETWORK_MAIL, NETWORK_DIASPORA];\r
-                               } else {\r
-                                       $networks = [NETWORK_DFRN, NETWORK_FACEBOOK, NETWORK_MAIL, NETWORK_DIASPORA];\r
-                               }\r
-                               break;\r
-                       case 'TWO_WAY':\r
-                               if (!empty($a->user['prvnets'])) {\r
-                                       $networks = [NETWORK_DFRN, NETWORK_MAIL, NETWORK_DIASPORA];\r
-                               } else {\r
-                                       $networks = [NETWORK_DFRN, NETWORK_FACEBOOK, NETWORK_MAIL, NETWORK_DIASPORA, NETWORK_OSTATUS];\r
-                               }\r
-                               break;\r
-                       default: /// @TODO Maybe log this call?\r
-                               break;\r
-               }\r
-\r
-               $x = ['options' => $options, 'size' => $size, 'single' => $single, 'mutual' => $mutual, 'exclude' => $exclude, 'networks' => $networks];\r
-\r
-               Addon::callHooks('contact_select_options', $x);\r
-\r
-               $o = '';\r
-\r
-               $sql_extra = '';\r
-\r
-               if (!empty($x['mutual'])) {\r
-                       $sql_extra .= sprintf(" AND `rel` = %d ", intval(CONTACT_IS_FRIEND));\r
-               }\r
-\r
-               if (!empty($x['exclude'])) {\r
-                       $sql_extra .= sprintf(" AND `id` != %d ", intval($x['exclude']));\r
-               }\r
-\r
-               if (!empty($x['networks'])) {\r
-                       /// @TODO rewrite to foreach()\r
-                       array_walk($x['networks'], function (&$value) {\r
-                               $value = "'" . dbesc($value) . "'";\r
-                       });\r
-                       $str_nets = implode(',', $x['networks']);\r
-                       $sql_extra .= " AND `network` IN ( $str_nets ) ";\r
-               }\r
-\r
-               $tabindex = (!empty($options['tabindex']) ? 'tabindex="' . $options["tabindex"] . '"' : '');\r
-\r
-               if (!empty($x['single'])) {\r
-                       $o .= "<select name=\"$selname\" id=\"$selclass\" class=\"$selclass\" size=\"" . $x['size'] . "\" $tabindex >\r\n";\r
-               } else {\r
-                       $o .= "<select name=\"{$selname}[]\" id=\"$selclass\" class=\"$selclass\" multiple=\"multiple\" size=\"" . $x['size'] . "$\" $tabindex >\r\n";\r
-               }\r
-\r
-               $stmt = dba::p("SELECT `id`, `name`, `url`, `network` FROM `contact`\r
-                       WHERE `uid` = ? AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''\r
-                       $sql_extra\r
-                       ORDER BY `name` ASC ", intval(local_user())\r
-               );\r
-\r
-               $contacts = dba::inArray($stmt);\r
-\r
-               $arr = ['contact' => $contacts, 'entry' => $o];\r
-\r
-               // e.g. 'network_pre_contact_deny', 'profile_pre_contact_allow'\r
-               Addon::callHooks($a->module . '_pre_' . $selname, $arr);\r
-\r
-               if (DBM::is_result($contacts)) {\r
-                       foreach ($contacts as $contact) {\r
-                               if (in_array($contact['id'], $preselected)) {\r
-                                       $selected = ' selected="selected" ';\r
-                               } else {\r
-                                       $selected = '';\r
-                               }\r
-\r
-                               $trimmed = mb_substr($contact['name'], 0, 20);\r
-\r
-                               $o .= "<option value=\"{$contact['id']}\" $selected title=\"{$contact['name']}|{$contact['url']}\" >$trimmed</option>\r\n";\r
-                       }\r
-               }\r
-\r
-               $o .= '</select>' . PHP_EOL;\r
-\r
-               Addon::callHooks($a->module . '_post_' . $selname, $o);\r
-\r
-               return $o;\r
-       }\r
-\r
-       /**\r
-        * Returns a select input tag with all the contact of the local user\r
-        *\r
-        * @param string $selname     Name attribute of the select input tag\r
-        * @param string $selclass    Class attribute of the select input tag\r
-        * @param array  $preselected Contact IDs that should be already selected\r
-        * @param int    $size        Length of the select box\r
-        * @param int    $tabindex    Select input tag tabindex attribute\r
-        * @return string\r
-        */\r
-       public static function getMessageContactSelectHTML($selname, $selclass, array $preselected = [], $size = 4, $tabindex = null)\r
-       {\r
-               $a = self::getApp();\r
-\r
-               $o = '';\r
-\r
-               // When used for private messages, we limit correspondence to mutual DFRN/Friendica friends and the selector\r
-               // to one recipient. By default our selector allows multiple selects amongst all contacts.\r
-               $sql_extra = sprintf(" AND `rel` = %d ", intval(CONTACT_IS_FRIEND));\r
-               $sql_extra .= sprintf(" AND `network` IN ('%s' , '%s') ", NETWORK_DFRN, NETWORK_DIASPORA);\r
-\r
-               $tabindex_attr = !empty($tabindex) ? ' tabindex="' . intval($tabindex) . '"' : '';\r
-\r
-               $hidepreselected = '';\r
-               if ($preselected) {\r
-                       $sql_extra .= " AND `id` IN (" . implode(",", $preselected) . ")";\r
-                       $hidepreselected = ' style="display: none;"';\r
-               }\r
-\r
-               $o .= "<select name=\"$selname\" id=\"$selclass\" class=\"$selclass\" size=\"$size\"$tabindex_attr$hidepreselected>\r\n";\r
-\r
-               $stmt = dba::p("SELECT `id`, `name`, `url`, `network` FROM `contact`\r
-                       WHERE `uid` = ? AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND `notify` != ''\r
-                       $sql_extra\r
-                       ORDER BY `name` ASC ", intval(local_user())\r
-               );\r
-\r
-               $contacts = dba::inArray($stmt);\r
-\r
-               $arr = ['contact' => $contacts, 'entry' => $o];\r
-\r
-               // e.g. 'network_pre_contact_deny', 'profile_pre_contact_allow'\r
-               Addon::callHooks($a->module . '_pre_' . $selname, $arr);\r
-\r
-               $receiverlist = [];\r
-\r
-               if (DBM::is_result($contacts)) {\r
-                       foreach ($contacts as $contact) {\r
-                               if (in_array($contact['id'], $preselected)) {\r
-                                       $selected = ' selected="selected"';\r
-                               } else {\r
-                                       $selected = '';\r
-                               }\r
-\r
-                               $trimmed = Protocol::formatMention($contact['url'], $contact['name']);\r
-\r
-                               $receiverlist[] = $trimmed;\r
-\r
-                               $o .= "<option value=\"{$contact['id']}\"$selected title=\"{$contact['name']}|{$contact['url']}\" >$trimmed</option>\r\n";\r
-                       }\r
-               }\r
-\r
-               $o .= '</select>' . PHP_EOL;\r
-\r
-               if ($preselected) {\r
-                       $o .= implode(', ', $receiverlist);\r
-               }\r
-\r
-               Addon::callHooks($a->module . '_post_' . $selname, $o);\r
-\r
-               return $o;\r
-       }\r
-\r
-       /**\r
-        * Return the default permission of the provided user array\r
-        *\r
-        * @param array $user\r
-        * @return array Hash of contact id lists\r
-        */\r
-       public static function getDefaultUserPermissions(array $user = null)\r
-       {\r
-               $matches = [];\r
-\r
-               $acl_regex = '/<([0-9]+)>/i';\r
-\r
-               preg_match_all($acl_regex, defaults($user, 'allow_cid', ''), $matches);\r
-               $allow_cid = $matches[1];\r
-               preg_match_all($acl_regex, defaults($user, 'allow_gid', ''), $matches);\r
-               $allow_gid = $matches[1];\r
-               preg_match_all($acl_regex, defaults($user, 'deny_cid', ''), $matches);\r
-               $deny_cid = $matches[1];\r
-               preg_match_all($acl_regex, defaults($user, 'deny_gid', ''), $matches);\r
-               $deny_gid = $matches[1];\r
-\r
-               Contact::pruneUnavailable($allow_cid);\r
-\r
-               return [\r
-                       'allow_cid' => $allow_cid,\r
-                       'allow_gid' => $allow_gid,\r
-                       'deny_cid' => $deny_cid,\r
-                       'deny_gid' => $deny_gid,\r
-               ];\r
-       }\r
-\r
-       /**\r
-        * Return the full jot ACL selector HTML\r
-        *\r
-        * @param array $user\r
-        * @param bool  $show_jotnets\r
-        * @return string\r
-        */\r
-       public static function getFullSelectorHTML(array $user = null, $show_jotnets = false)\r
-       {\r
-               $perms = self::getDefaultUserPermissions($user);\r
-\r
-               $jotnets = '';\r
-               if ($show_jotnets) {\r
-                       $imap_disabled = !function_exists('imap_open') || Config::get('system', 'imap_disabled');\r
-\r
-                       $mail_enabled = false;\r
-                       $pubmail_enabled = false;\r
-\r
-                       if (!$imap_disabled) {\r
-                               $mailacct = dba::selectFirst('mailacct', ['pubmail'], ['`uid` = ? AND `server` != ""', local_user()]);\r
-                               if (DBM::is_result($mailacct)) {\r
-                                       $mail_enabled = true;\r
-                                       $pubmail_enabled = !empty($mailacct['pubmail']);\r
-                               }\r
-                       }\r
-\r
-                       if (empty($user['hidewall'])) {\r
-                               if ($mail_enabled) {\r
-                                       $selected = $pubmail_enabled ? ' checked="checked"' : '';\r
-                                       $jotnets .= '<div class="profile-jot-net"><input type="checkbox" name="pubmail_enable"' . $selected . ' value="1" /> ' . L10n::t("Post to Email") . '</div>';\r
-                               }\r
-\r
-                               Addon::callHooks('jot_networks', $jotnets);\r
-                       } else {\r
-                               $jotnets .= L10n::t('Connectors disabled, since "%s" is enabled.',\r
-                                               L10n::t('Hide your profile details from unknown viewers?'));\r
-                       }\r
-               }\r
-\r
-               $tpl = get_markup_template('acl_selector.tpl');\r
-               $o = replace_macros($tpl, [\r
-                       '$showall' => L10n::t('Visible to everybody'),\r
-                       '$show' => L10n::t('show'),\r
-                       '$hide' => L10n::t('don\'t show'),\r
-                       '$allowcid' => json_encode($perms['allow_cid']),\r
-                       '$allowgid' => json_encode($perms['allow_gid']),\r
-                       '$denycid' => json_encode($perms['deny_cid']),\r
-                       '$denygid' => json_encode($perms['deny_gid']),\r
-                       '$networks' => $show_jotnets,\r
-                       '$emailcc' => L10n::t('CC: email addresses'),\r
-                       '$emtitle' => L10n::t('Example: bob@example.com, mary@example.com'),\r
-                       '$jotnets' => $jotnets,\r
-                       '$aclModalTitle' => L10n::t('Permissions'),\r
-                       '$aclModalDismiss' => L10n::t('Close'),\r
-                       '$features' => [\r
-                               'aclautomention' => Feature::isEnabled($user['uid'], 'aclautomention') ? 'true' : 'false'\r
-                       ],\r
-               ]);\r
-\r
-               return $o;\r
-       }\r
-\r
-       /**\r
-        * Searching for global contacts for autocompletion\r
-        *\r
-        * @brief Searching for global contacts for autocompletion\r
-        * @param string $search Name or part of a name or nick\r
-        * @param string $mode   Search mode (e.g. "community")\r
-        * @return array with the search results\r
-        */\r
-       public static function contactAutocomplete($search, $mode)\r
-       {\r
-               if ((Config::get('system', 'block_public')) && (!local_user()) && (!remote_user())) {\r
-                       return [];\r
-               }\r
-\r
-               // don't search if search term has less than 2 characters\r
-               if (!$search || mb_strlen($search) < 2) {\r
-                       return [];\r
-               }\r
-\r
-               if (substr($search, 0, 1) === '@') {\r
-                       $search = substr($search, 1);\r
-               }\r
-\r
-               // check if searching in the local global contact table is enabled\r
-               if (Config::get('system', 'poco_local_search')) {\r
-                       $return = GContact::searchByName($search, $mode);\r
-               } else {\r
-                       $a = self::getApp();\r
-                       $p = $a->pager['page'] != 1 ? '&p=' . $a->pager['page'] : '';\r
-\r
-                       $response = Network::curl(get_server() . '/lsearch?f=' . $p . '&search=' . urlencode($search));\r
-                       if ($response['success']) {\r
-                               $lsearch = json_decode($response['body'], true);\r
-                               if (!empty($lsearch['results'])) {\r
-                                       $return = $lsearch['results'];\r
-                               }\r
-                       }\r
-               }\r
-\r
-               return defaults($return, []);\r
-       }\r
-}\r
+<?php
+
+/**
+ * @file src/Core/Acl.php
+ */
+
+namespace Friendica\Core;
+
+use Friendica\App\Page;
+use Friendica\Database\DBA;
+use Friendica\DI;
+use Friendica\Model\Contact;
+use Friendica\Model\Group;
+
+/**
+ * Handle ACL management and display
+ *
+ * @author Hypolite Petovan <hypolite@mrpetovan.com>
+ */
+class ACL
+{
+       /**
+        * Returns a select input tag with all the contact of the local user
+        *
+        * @param string $selname     Name attribute of the select input tag
+        * @param string $selclass    Class attribute of the select input tag
+        * @param array  $preselected Contact IDs that should be already selected
+        * @param int    $size        Length of the select box
+        * @param int    $tabindex    Select input tag tabindex attribute
+        * @return string
+        * @throws \Exception
+        */
+       public static function getMessageContactSelectHTML($selname, $selclass, array $preselected = [], $size = 4, $tabindex = null)
+       {
+               $a = DI::app();
+
+               $o = '';
+
+               // When used for private messages, we limit correspondence to mutual DFRN/Friendica friends and the selector
+               // to one recipient. By default our selector allows multiple selects amongst all contacts.
+               $sql_extra = sprintf(" AND `rel` = %d ", intval(Contact::FRIEND));
+               $sql_extra .= sprintf(" AND `network` IN ('%s' , '%s') ", Protocol::DFRN, Protocol::DIASPORA);
+
+               $tabindex_attr = !empty($tabindex) ? ' tabindex="' . intval($tabindex) . '"' : '';
+
+               $hidepreselected = '';
+               if ($preselected) {
+                       $sql_extra .= " AND `id` IN (" . implode(",", $preselected) . ")";
+                       $hidepreselected = ' style="display: none;"';
+               }
+
+               $o .= "<select name=\"$selname\" id=\"$selclass\" class=\"$selclass\" size=\"$size\"$tabindex_attr$hidepreselected>\r\n";
+
+               $stmt = DBA::p("SELECT `id`, `name`, `url`, `network` FROM `contact`
+                       WHERE `uid` = ? AND NOT `self` AND NOT `blocked` AND NOT `pending` AND NOT `archive` AND NOT `deleted` AND `notify` != ''
+                       $sql_extra
+                       ORDER BY `name` ASC ", intval(local_user())
+               );
+
+               $contacts = DBA::toArray($stmt);
+
+               $arr = ['contact' => $contacts, 'entry' => $o];
+
+               // e.g. 'network_pre_contact_deny', 'profile_pre_contact_allow'
+               Hook::callAll(DI::module()->getName() . '_pre_' . $selname, $arr);
+
+               $receiverlist = [];
+
+               if (DBA::isResult($contacts)) {
+                       foreach ($contacts as $contact) {
+                               if (in_array($contact['id'], $preselected)) {
+                                       $selected = ' selected="selected"';
+                               } else {
+                                       $selected = '';
+                               }
+
+                               $trimmed = Protocol::formatMention($contact['url'], $contact['name']);
+
+                               $receiverlist[] = $trimmed;
+
+                               $o .= "<option value=\"{$contact['id']}\"$selected title=\"{$contact['name']}|{$contact['url']}\" >$trimmed</option>\r\n";
+                       }
+               }
+
+               $o .= '</select>' . PHP_EOL;
+
+               if ($preselected) {
+                       $o .= implode(', ', $receiverlist);
+               }
+
+               Hook::callAll(DI::module()->getName() . '_post_' . $selname, $o);
+
+               return $o;
+       }
+
+       /**
+        * Return the default permission of the provided user array
+        *
+        * @param array $user
+        * @return array Hash of contact id lists
+        * @throws \Exception
+        */
+       public static function getDefaultUserPermissions(array $user = null)
+       {
+               $aclFormatter = DI::aclFormatter();
+
+               return [
+                       'allow_cid' => Contact::pruneUnavailable($aclFormatter->expand($user['allow_cid'] ?? '')),
+                       'allow_gid' => $aclFormatter->expand($user['allow_gid'] ?? ''),
+                       'deny_cid'  => $aclFormatter->expand($user['deny_cid']  ?? ''),
+                       'deny_gid'  => $aclFormatter->expand($user['deny_gid']  ?? ''),
+               ];
+       }
+
+       /**
+        * Returns the ACL list of contacts for a given user id
+        *
+        * @param int   $user_id
+        * @param array $condition Additional contact lookup table conditions
+        * @return array
+        * @throws \Exception
+        */
+       public static function getContactListByUserId(int $user_id, array $condition = [])
+       {
+               $fields = ['id', 'name', 'addr', 'micro'];
+               $params = ['order' => ['name']];
+               $acl_contacts = Contact::selectToArray(
+                       $fields,
+                       array_merge([
+                               'uid' => $user_id,
+                               'self' => false,
+                               'blocked' => false,
+                               'archive' => false,
+                               'deleted' => false,
+                               'pending' => false,
+                               'rel' => [Contact::FOLLOWER, Contact::FRIEND]
+                       ], $condition),
+                       $params
+               );
+
+               $acl_yourself = Contact::selectFirst($fields, ['uid' => $user_id, 'self' => true]);
+               $acl_yourself['name'] = DI::l10n()->t('Yourself');
+
+               $acl_contacts[] = $acl_yourself;
+
+               $acl_forums = Contact::selectToArray($fields,
+                       ['uid' => $user_id, 'self' => false, 'blocked' => false, 'archive' => false, 'deleted' => false,
+                       'pending' => false, 'contact-type' => Contact::TYPE_COMMUNITY], $params
+               );
+
+               $acl_contacts = array_merge($acl_forums, $acl_contacts);
+
+               array_walk($acl_contacts, function (&$value) {
+                       $value['type'] = 'contact';
+               });
+
+               return $acl_contacts;
+       }
+
+       /**
+        * Returns the ACL list of groups (including meta-groups) for a given user id
+        *
+        * @param int $user_id
+        * @return array
+        */
+       public static function getGroupListByUserId(int $user_id)
+       {
+               $acl_groups = [
+                       [
+                               'id' => Group::FOLLOWERS,
+                               'name' => DI::l10n()->t('Followers'),
+                               'addr' => '',
+                               'micro' => 'images/twopeople.png',
+                               'type' => 'group',
+                       ],
+                       [
+                               'id' => Group::MUTUALS,
+                               'name' => DI::l10n()->t('Mutuals'),
+                               'addr' => '',
+                               'micro' => 'images/twopeople.png',
+                               'type' => 'group',
+                       ]
+               ];
+               foreach (Group::getByUserId($user_id) as $group) {
+                       $acl_groups[] = [
+                               'id' => $group['id'],
+                               'name' => $group['name'],
+                               'addr' => '',
+                               'micro' => 'images/twopeople.png',
+                               'type' => 'group',
+                       ];
+               }
+
+               return $acl_groups;
+       }
+
+       /**
+        * Return the full jot ACL selector HTML
+        *
+        * @param Page   $page
+        * @param array  $user                  User array
+        * @param bool   $for_federation
+        * @param array  $default_permissions   Static defaults permission array:
+        *                                      [
+        *                                      'allow_cid' => [],
+        *                                      'allow_gid' => [],
+        *                                      'deny_cid' => [],
+        *                                      'deny_gid' => [],
+        *                                      'hidewall' => true/false
+        *                                      ]
+        * @param array  $condition
+        * @param string $form_prefix
+        * @return string
+        * @throws \Friendica\Network\HTTPException\InternalServerErrorException
+        */
+       public static function getFullSelectorHTML(
+               Page $page,
+               array $user = null,
+               bool $for_federation = false,
+               array $default_permissions = [],
+               array $condition = [],
+               $form_prefix = ''
+       ) {
+               if (empty($user['uid'])) {
+                       return '';
+               }
+
+               static $input_group_id = 0;
+
+               $input_group_id++;
+
+               $page->registerFooterScript(Theme::getPathForFile('asset/typeahead.js/dist/typeahead.bundle.js'));
+               $page->registerFooterScript(Theme::getPathForFile('js/friendica-tagsinput/friendica-tagsinput.js'));
+               $page->registerStylesheet(Theme::getPathForFile('js/friendica-tagsinput/friendica-tagsinput.css'));
+               $page->registerStylesheet(Theme::getPathForFile('js/friendica-tagsinput/friendica-tagsinput-typeahead.css'));
+
+               // Defaults user permissions
+               if (empty($default_permissions)) {
+                       $default_permissions = self::getDefaultUserPermissions($user);
+               }
+
+               $default_permissions = [
+                       'allow_cid' => $default_permissions['allow_cid'] ?? [],
+                       'allow_gid' => $default_permissions['allow_gid'] ?? [],
+                       'deny_cid'  => $default_permissions['deny_cid']  ?? [],
+                       'deny_gid'  => $default_permissions['deny_gid']  ?? [],
+                       'hidewall'  => $default_permissions['hidewall']  ?? false,
+               ];
+
+               if (count($default_permissions['allow_cid'])
+                       + count($default_permissions['allow_gid'])
+                       + count($default_permissions['deny_cid'])
+                       + count($default_permissions['deny_gid'])) {
+                       $visibility = 'custom';
+               } else {
+                       $visibility = 'public';
+                       // Default permission display for custom panel
+                       $default_permissions['allow_gid'] = [Group::FOLLOWERS];
+               }
+
+               $jotnets_fields = [];
+               if ($for_federation) {
+                       $mail_enabled = false;
+                       $pubmail_enabled = false;
+
+                       if (function_exists('imap_open') && !DI::config()->get('system', 'imap_disabled')) {
+                               $mailacct = DBA::selectFirst('mailacct', ['pubmail'], ['`uid` = ? AND `server` != ""', $user['uid']]);
+                               if (DBA::isResult($mailacct)) {
+                                       $mail_enabled = true;
+                                       $pubmail_enabled = !empty($mailacct['pubmail']);
+                               }
+                       }
+
+                       if (!$default_permissions['hidewall']) {
+                               if ($mail_enabled) {
+                                       $jotnets_fields[] = [
+                                               'type' => 'checkbox',
+                                               'field' => [
+                                                       'pubmail_enable',
+                                                       DI::l10n()->t('Post to Email'),
+                                                       $pubmail_enabled
+                                               ]
+                                       ];
+                               }
+
+                               Hook::callAll('jot_networks', $jotnets_fields);
+                       }
+               }
+
+               $acl_contacts = self::getContactListByUserId($user['uid'], $condition);
+
+               $acl_groups = self::getGroupListByUserId($user['uid']);
+
+               $acl_list = array_merge($acl_groups, $acl_contacts);
+
+               $input_names = [
+                       'visibility'    => $form_prefix ? $form_prefix . '[visibility]'    : 'visibility',
+                       'group_allow'   => $form_prefix ? $form_prefix . '[group_allow]'   : 'group_allow',
+                       'contact_allow' => $form_prefix ? $form_prefix . '[contact_allow]' : 'contact_allow',
+                       'group_deny'    => $form_prefix ? $form_prefix . '[group_deny]'    : 'group_deny',
+                       'contact_deny'  => $form_prefix ? $form_prefix . '[contact_deny]'  : 'contact_deny',
+                       'emailcc'       => $form_prefix ? $form_prefix . '[emailcc]'       : 'emailcc',
+               ];
+
+               $tpl = Renderer::getMarkupTemplate('acl_selector.tpl');
+               $o = Renderer::replaceMacros($tpl, [
+                       '$public_title'   => DI::l10n()->t('Public'),
+                       '$public_desc'    => DI::l10n()->t('This content will be shown to all your followers and can be seen in the community pages and by anyone with its link.'),
+                       '$custom_title'   => DI::l10n()->t('Limited/Private'),
+                       '$custom_desc'    => DI::l10n()->t('This content will be shown only to the people in the first box, to the exception of the people mentioned in the second box. It won\'t appear anywhere public.'),
+                       '$allow_label'    => DI::l10n()->t('Show to:'),
+                       '$deny_label'     => DI::l10n()->t('Except to:'),
+                       '$emailcc'        => DI::l10n()->t('CC: email addresses'),
+                       '$emtitle'        => DI::l10n()->t('Example: bob@example.com, mary@example.com'),
+                       '$jotnets_summary' => DI::l10n()->t('Connectors'),
+                       '$jotnets_disabled_label' => DI::l10n()->t('Connectors disabled, since "%s" is enabled.', DI::l10n()->t('Hide your profile details from unknown viewers?')),
+                       '$visibility'     => $visibility,
+                       '$acl_contacts'   => $acl_contacts,
+                       '$acl_groups'     => $acl_groups,
+                       '$acl_list'       => $acl_list,
+                       '$contact_allow'  => implode(',', $default_permissions['allow_cid']),
+                       '$group_allow'    => implode(',', $default_permissions['allow_gid']),
+                       '$contact_deny'   => implode(',', $default_permissions['deny_cid']),
+                       '$group_deny'     => implode(',', $default_permissions['deny_gid']),
+                       '$for_federation' => $for_federation,
+                       '$jotnets_fields' => $jotnets_fields,
+                       '$user_hidewall'  => $default_permissions['hidewall'],
+                       '$input_names'    => $input_names,
+                       '$input_group_id' => $input_group_id,
+               ]);
+
+               return $o;
+       }
+}