Merge branch '2019.03-RC'

[friendica.git] / src / Model / PermissionSet.php

diff --git a/src/Model/PermissionSet.php b/src/Model/PermissionSet.php
index c31e88bf17680a312cb8c8bbd088272d4a1d1b5b..3148d4da03360330f7127b729e7a56f98788838d 100644 (file)
--- a/src/Model/PermissionSet.php
+++ b/src/Model/PermissionSet.php
@@ -5,10 +5,7 @@
 namespace Friendica\Model;
 
 use Friendica\BaseObject;
-use Friendica\Database\DBM;
-use dba;
-
-require_once 'include/dba.php';
+use Friendica\Database\DBA;
 
 /**
  * @brief functions for interacting with the permission set of an object (item, photo, event, ...)
@@ -19,9 +16,10 @@ class PermissionSet extends BaseObject
         * Fetch the id of a given permission set. Generate a new one when needed
         *
         * @param array $postarray The array from an item, picture or event post
-        * @return id
+        * @return int id
+        * @throws \Exception
         */
-       public static function fetchIDForPost($postarray)
+       public static function fetchIDForPost(&$postarray)
        {
                $condition = ['uid' => $postarray['uid'],
                        'allow_cid' => self::sortPermissions(defaults($postarray, 'allow_cid', '')),
@@ -29,13 +27,19 @@ class PermissionSet extends BaseObject
                        'deny_cid' => self::sortPermissions(defaults($postarray, 'deny_cid', '')),
                        'deny_gid' => self::sortPermissions(defaults($postarray, 'deny_gid', ''))];
 
-               $set = dba::selectFirst('permissionset', ['id'], $condition);
+               $set = DBA::selectFirst('permissionset', ['id'], $condition);
 
-               if (!DBM::is_result($set)) {
-                       dba::insert('permissionset', $condition, true);
+               if (!DBA::isResult($set)) {
+                       DBA::insert('permissionset', $condition, true);
 
-                       $set = dba::selectFirst('permissionset', ['id'], $condition);
+                       $set = DBA::selectFirst('permissionset', ['id'], $condition);
                }
+
+               $postarray['allow_cid'] = null;
+               $postarray['allow_gid'] = null;
+               $postarray['deny_cid'] = null;
+               $postarray['deny_gid'] = null;
+
                return $set['id'];
        }
 
@@ -57,4 +61,48 @@ class PermissionSet extends BaseObject
 
                return '<' . implode('><', $elements) . '>';
        }
+
+       /**
+        * @brief Returns a permission set for a given contact
+        *
+        * @param integer $uid        User id whom the items belong
+        * @param integer $contact_id Contact id of the visitor
+        * @param array   $groups     Possibly previously fetched group ids for that contact
+        *
+        * @return array of permission set ids.
+        * @throws \Exception
+        */
+
+       static public function get($uid, $contact_id, $groups = null)
+       {
+               if (empty($groups) && DBA::exists('contact', ['id' => $contact_id, 'uid' => $uid, 'blocked' => false])) {
+                       $groups = Group::getIdsByContactId($contact_id);
+               }
+
+               if (empty($groups) || !is_array($groups)) {
+                       return [];
+               }
+               $group_str = '<<>>'; // should be impossible to match
+
+               foreach ($groups as $g) {
+                       $group_str .= '|<' . intval($g) . '>';
+               }
+
+               $contact_str = '<' . $contact_id . '>';
+
+               $condition = ["`uid` = ? AND (`allow_cid` = '' OR`allow_cid` REGEXP ?)
+                       AND (`deny_cid` = '' OR NOT `deny_cid` REGEXP ?)
+                       AND (`allow_gid` = '' OR `allow_gid` REGEXP ?)
+                       AND (`deny_gid` = '' OR NOT `deny_gid` REGEXP ?)",
+                       $uid, $contact_str, $contact_str, $group_str, $group_str];
+
+               $ret = DBA::select('permissionset', ['id'], $condition);
+               $set = [];
+               while ($permission = DBA::fetch($ret)) {
+                       $set[] = $permission['id'];
+               }
+               DBA::close($ret);
+
+               return $set;
+       }
 }