From b14a7cc845c80aca290562af9a5723b487ebfde8 Mon Sep 17 00:00:00 2001
From: mcramer <m.cramer@pixcept.de>
Date: Fri, 02 Nov 2012 04:05:08 -0400
Subject: [PATCH] Updated:  - Database users have to match the client of the parent website  - Update select boxes for database users on change of parent website

---
 interface/web/sites/lib/lang/de_database.lng    |    1 +
 interface/web/sites/lib/lang/en_database.lng    |    1 +
 interface/web/sites/templates/database_edit.htm |   19 +++++++++++++++++++
 interface/web/sites/ajax_get_json.php           |   20 ++++++++++++++++++++
 interface/web/sites/database_edit.php           |   17 ++++++++++++++++-
 5 files changed, 57 insertions(+), 1 deletions(-)

diff --git a/interface/web/sites/ajax_get_json.php b/interface/web/sites/ajax_get_json.php
index 53702bd..20267eb 100644
--- a/interface/web/sites/ajax_get_json.php
+++ b/interface/web/sites/ajax_get_json.php
@@ -119,6 +119,26 @@
 		
 		$json = $app->functions->json_encode($result);
 	}
+    
+    if($type == 'getdatabaseusers') {
+		$json = '{';
+        
+		$sql = "SELECT sys_groupid FROM web_domain WHERE domain_id = $web_id";
+        $group = $app->db->queryOneRecord($sql);
+        if($group) {
+            $sql = "SELECT database_user_id, database_user FROM web_database_user WHERE sys_groupid = '" . $group['sys_groupid'] . "'";
+            $records = $app->db->queryAllRecords($sql);
+            
+            foreach($records as $record) {
+                $json .= '"'.$record['database_user_id'].'": "'.$record['database_user'].'",';
+            }
+            unset($records);
+            unset($group);
+        }
+        
+        if(substr($json,-1) == ',') $json = substr($json,0,-1);
+		$json .= '}';
+    }
 
 //}
 
diff --git a/interface/web/sites/database_edit.php b/interface/web/sites/database_edit.php
index 959b018..393ec38 100644
--- a/interface/web/sites/database_edit.php
+++ b/interface/web/sites/database_edit.php
@@ -166,7 +166,22 @@
 				}
 
 			}
-		}
+		} else {
+            // check if client of database parent domain is client of db user!
+            $web_group = $app->db->queryOneRecord("SELECT sys_groupid FROM web_domain WHERE domain_id = '".$app->functions->intval($this->dataRecord['parent_domain_id'])."'");
+            if($this->dataRecord['database_user_id']) {
+                $group = $app->db->queryOneRecord("SELECT sys_groupid FROM web_database_user WHERE database_user_id = '".$app->functions->intval($this->dataRecord['database_user_id'])."'");
+                if($group['sys_groupid'] != $web_group['sys_groupid']) {
+                    $app->error($app->tform->wordbook['database_client_differs_txt']);
+                }
+            }
+            if($this->dataRecord['database_ro_user_id']) {
+                $group = $app->db->queryOneRecord("SELECT sys_groupid FROM web_database_user WHERE database_user_id = '".$app->functions->intval($this->dataRecord['database_ro_user_id'])."'");
+                if($group['sys_groupid'] != $web_group['sys_groupid']) {
+                    $app->error($app->tform->wordbook['database_client_differs_txt']);
+                }
+            }
+        }
 
 
 		parent::onSubmit();
diff --git a/interface/web/sites/lib/lang/de_database.lng b/interface/web/sites/lib/lang/de_database.lng
index 5bed48f..70b7721 100644
--- a/interface/web/sites/lib/lang/de_database.lng
+++ b/interface/web/sites/lib/lang/de_database.lng
@@ -14,6 +14,7 @@
 $wb['database_remote_error_ips'] = 'Mindestens eine der eingegebenen IP Adressen ist ungültig.';
 $wb['client_txt'] = 'Kunde';
 $wb['active_txt'] = 'Aktiv';
+$wb['database_client_differs_txt'] = 'Der Kunde dieser Datenbank passt nicht zum Kunden des Datenbankusers.';
 $wb['database_name_error_empty'] = 'Datenbankname ist leer.';
 $wb['database_name_error_unique'] = 'Es existiert bereits eine Datenbank mit diesem Namen am Server. Um einen eindeutigen Namen zu erhalten können sie z.B. den Domainnamen vor dem Datenbanknamen verwenden.';
 $wb['database_name_error_regex'] = 'Ungültiger Datenbankname. Der Datenbankname darf die Zeichen: a-z, A-Z, 0-9 und den Unterstrich beinhalten. Länge: 2 - 64 Zeichen.';
diff --git a/interface/web/sites/lib/lang/en_database.lng b/interface/web/sites/lib/lang/en_database.lng
index a494efc..288f895 100644
--- a/interface/web/sites/lib/lang/en_database.lng
+++ b/interface/web/sites/lib/lang/en_database.lng
@@ -15,6 +15,7 @@
 $wb["database_remote_error_ips"] = 'At least one of the entered ip addresses is invalid.';
 $wb["client_txt"] = 'Client';
 $wb["active_txt"] = 'Active';
+$wb['database_client_differs_txt'] = 'The client of the parent web and the database do not match.';
 $wb["database_name_error_empty"] = 'Database name is empty.';
 $wb["database_name_error_unique"] = 'There is already a database with this name on the server. To get a unique name, e.g. prepend your domain name to the database name.';
 $wb["database_name_error_regex"] = 'Invalid database name. The database name may contain these characters: a-z, A-Z, 0-9 and the underscore. Length: 2 - 64 characters.';
diff --git a/interface/web/sites/templates/database_edit.htm b/interface/web/sites/templates/database_edit.htm
index de2899c..0924626 100644
--- a/interface/web/sites/templates/database_edit.htm
+++ b/interface/web/sites/templates/database_edit.htm
@@ -97,6 +97,25 @@
 
 </div>
 <script language="JavaScript" type="text/javascript">
+    <tmpl_if name="is_admin">    
+    function reloadDatabaseUsers() {
+        var parentDomainId = jQuery('#parent_domain_id').val()
+        jQuery.getJSON('sites/ajax_get_json.php'+ '?' + Math.round(new Date().getTime()), {web_id : parentDomainId, 'type': 'getdatabaseusers'}, function(data) {
+            var options = '<option value=""></option>';
+            $.each(data, function(key, val) {
+                options += '<option value="'+key+'"'+ ($('#database_user_id').val() == key ? ' selected="selected"' : '') +'>'+val+'</option>';
+            });
+            $('#database_user_id').html(options).change();
+            
+            options = '<option value=""></option>';
+            $.each(data, function(key, val) {
+                options += '<option value="'+key+'"'+ ($('#database_ro_user_id').val() == key ? ' selected="selected"' : '') +'>'+val+'</option>';
+            });
+            $('#database_ro_user_id').html(options).change();
+        });
+    }
+    jQuery('#parent_domain_id').change(function() { reloadDatabaseUsers(); });
+    </tmpl_if>
     jQuery('#remote_ips').ispconfigSearch({
         dataSrc: '/sites/ajax_get_json.php?type=get_ipv4',
         resultsLimit: '$ <tmpl_var name="globalsearch_resultslimit_of_txt"> % <tmpl_var name="globalsearch_resultslimit_results_txt">',

--
Gitblit v1.9.1