| ︙ | | |
145
146
147
148
149
150
151
152
153
154
155
156
157
158
|
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
|
+
+
|
@ <td valign="top">
@ <b>Notes:</b>
@ <ol>
@ <li><p>The permission flags are as follows:</p>
@ <table>
@ <tr><td valign="top"><b>a</b></td>
@ <td><i>Admin:</i> Create and delete users</td></tr>
@ <tr><td valign="top"><b>b</b></td>
@ <td><i>Attach:</i> Add attachments to wiki or tickets</td></tr>
@ <tr><td valign="top"><b>c</b></td>
@ <td><i>Append-Tkt:</i> Append to tickets</td></tr>
@ <tr><td valign="top"><b>d</b></td>
@ <td><i>Delete:</i> Delete wiki and tickets</td></tr>
@ <tr><td valign="top"><b>e</b></td>
@ <td><i>Email:</i> View sensitive data such as EMail addresses</td></tr>
@ <tr><td valign="top"><b>f</b></td>
|
| ︙ | | |
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
|
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
|
-
+
|
/*
** WEBPAGE: /setup_uedit
*/
void user_edit(void){
const char *zId, *zLogin, *zInfo, *zCap, *zPw;
char *oaa, *oas, *oar, *oaw, *oan, *oai, *oaj, *oao, *oap;
char *oak, *oad, *oac, *oaf, *oam, *oah, *oag, *oae;
char *oat, *oau, *oav, *oaz;
char *oat, *oau, *oav, *oab, *oaz;
const char *inherit[128];
int doWrite;
int uid;
int higherUser = 0; /* True if user being edited is SETUP and the */
/* user doing the editing is ADMIN. Disallow editing */
/* Must have ADMIN privleges to access this page
|
| ︙ | | |
274
275
276
277
278
279
280
281
282
283
284
285
286
287
|
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
|
+
|
** to the page that displays a list of users.
*/
doWrite = cgi_all("login","info","pw") && !higherUser;
if( doWrite ){
char zCap[50];
int i = 0;
int aa = P("aa")!=0;
int ab = P("ab")!=0;
int ad = P("ad")!=0;
int ae = P("ae")!=0;
int ai = P("ai")!=0;
int aj = P("aj")!=0;
int ak = P("ak")!=0;
int an = P("an")!=0;
int ao = P("ao")!=0;
|
| ︙ | | |
295
296
297
298
299
300
301
302
303
304
305
306
307
308
|
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
|
+
|
int ah = P("ah")!=0;
int ag = P("ag")!=0;
int at = P("at")!=0;
int au = P("au")!=0;
int av = P("av")!=0;
int az = P("az")!=0;
if( aa ){ zCap[i++] = 'a'; }
if( ab ){ zCap[i++] = 'b'; }
if( ac ){ zCap[i++] = 'c'; }
if( ad ){ zCap[i++] = 'd'; }
if( ae ){ zCap[i++] = 'e'; }
if( af ){ zCap[i++] = 'f'; }
if( ah ){ zCap[i++] = 'h'; }
if( ag ){ zCap[i++] = 'g'; }
if( ai ){ zCap[i++] = 'i'; }
|
| ︙ | | |
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
|
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
|
-
+
+
|
/* Load the existing information about the user, if any
*/
zLogin = "";
zInfo = "";
zCap = "";
zPw = "";
oaa = oac = oad = oae = oaf = oag = oah = oai = oaj = oak = oam =
oaa = oab = oac = oad = oae = oaf = oag = oah = oai = oaj = oak = oam =
oan = oao = oap = oar = oas = oat = oau = oav = oaw = oaz = "";
if( uid ){
zLogin = db_text("", "SELECT login FROM user WHERE uid=%d", uid);
zInfo = db_text("", "SELECT info FROM user WHERE uid=%d", uid);
zCap = db_text("", "SELECT cap FROM user WHERE uid=%d", uid);
zPw = db_text("", "SELECT pw FROM user WHERE uid=%d", uid);
if( strchr(zCap, 'a') ) oaa = " checked";
if( strchr(zCap, 'b') ) oab = " checked";
if( strchr(zCap, 'c') ) oac = " checked";
if( strchr(zCap, 'd') ) oad = " checked";
if( strchr(zCap, 'e') ) oae = " checked";
if( strchr(zCap, 'f') ) oaf = " checked";
if( strchr(zCap, 'g') ) oag = " checked";
if( strchr(zCap, 'h') ) oah = " checked";
if( strchr(zCap, 'i') ) oai = " checked";
|
| ︙ | | |
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
|
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
|
+
-
-
-
-
-
+
+
+
+
+
|
@ <input type="checkbox" name="au"%s(oau)/>%s(B('u'))Reader<br>
@ <input type="checkbox" name="av"%s(oav)/>%s(B('v'))Developer<br>
@ <input type="checkbox" name="ag"%s(oag)/>%s(B('g'))Clone<br>
@ <input type="checkbox" name="aj"%s(oaj)/>%s(B('j'))Read Wiki<br>
@ <input type="checkbox" name="af"%s(oaf)/>%s(B('f'))New Wiki<br>
@ <input type="checkbox" name="am"%s(oam)/>%s(B('m'))Append Wiki<br>
@ <input type="checkbox" name="ak"%s(oak)/>%s(B('k'))Write Wiki<br>
@ <input type="checkbox" name="ab"%s(oab)/>%s(B('b'))Attachments<br>
@ <input type="checkbox" name="ar"%s(oar)/>%s(B('r'))Read Tkt<br>
@ <input type="checkbox" name="an"%s(oan)/>%s(B('n'))New Tkt<br>
@ <input type="checkbox" name="ac"%s(oac)/>%s(B('c'))Append Tkt<br>
@ <input type="checkbox" name="aw"%s(oaw)/>%s(B('w'))Write Tkt<br>
@ <input type="checkbox" name="at"%s(oat)/>%s(B('t'))Tkt Report<br>
@ <input type="checkbox" name="ar"%s(oar)/>%s(B('r'))Read Ticket<br>
@ <input type="checkbox" name="an"%s(oan)/>%s(B('n'))New Ticket<br>
@ <input type="checkbox" name="ac"%s(oac)/>%s(B('c'))Append Ticket<br>
@ <input type="checkbox" name="aw"%s(oaw)/>%s(B('w'))Write Ticket<br>
@ <input type="checkbox" name="at"%s(oat)/>%s(B('t'))Ticket Report<br>
@ <input type="checkbox" name="az"%s(oaz)/>%s(B('z'))Download Zip
@ </td>
@ </tr>
@ <tr>
@ <td align="right">Password:</td>
if( zPw[0] ){
/* Obscure the password for all users */
|
| ︙ | | |
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
|
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
|
-
-
-
+
+
+
+
+
+
+
+
|
@ The <b>Check-out</b> privilege allows remote users to "pull".
@ The <b>Clone</b> privilege allows remote users to "clone".
@ </li><p>
@
@ <li><p>
@ The <b>Read Wiki</b>, <b>New Wiki</b>, <b>Append Wiki</b>, and
@ <b>Write Wiki</b> privileges control access to wiki pages. The
@ <b>Read Tkt</b>, <b>New Tkt</b>, <b>Append Tkt</b>, and
@ <b>Write Tkt</b> privileges control access to trouble tickets.
@ The <b>Tkt Report</b> privilege allows the user to create or edit
@ <b>Read Ticket</b>, <b>New Ticket</b>, <b>Append Ticket</b>, and
@ <b>Write Ticket</b> privileges control access to trouble tickets.
@ The <b>Ticket Report</b> privilege allows the user to create or edit
@ ticket report formats.
@ </p></li>
@
@ <li><p>
@ Users with the <b>Password</b> privilege are allowed to change their
@ own password. Recommended ON for most users but OFF for special
@ users "developer", "anonymous", and "nobody".
@ </p></li>
@
@ <li><p>
@ The <b>EMail</b> privilege allows the display of sensitive information
@ such as the email address of users and contact information on tickets.
@ Recommended OFF for "anonymous" and for "nobody" but ON for
@ "developer".
@ </p></li>
@
@ <li><p>
@ The <b>Attachment</b> privilege is needed in order to add attachments
@ to tickets or wiki. Write privilege on the ticket or wiki is also
@ required.</p></li>
@
@ <li><p>
@ Login is prohibited if the password is an empty string.
@ </p></li>
@ </ul>
@
@ <h2>Special Logins</h2>
@
|
| ︙ | | |