User $user was denied membership in project $project. The user will need to reapply again if this was in error. \n"; continue; } if (strcmp($approval, "nuke") == 0) { # # Must delete the group_membership record since we require that the # user reapply once denied. Send the luser email to let him know. # $query_result = DBQueryFatal("delete from group_membership ". "where uid='$user' and pid='$project' and ". " gid='$group'"); # # See if user is in any other projects (even unapproved). # $query_result = DBQueryFatal("select * from group_membership where uid='$user'"); # # If yes, then we cannot safely delete the user account. # if (mysql_num_rows($query_result)) { echo "
User $user was denied membership in project $project.
Since the user is a member (or requesting membership)
in other projects, the account cannot be safely removed.
\n";
continue;
}
#
# No other project membership. If the user is unapproved/newuser,
# it means he was never approved in any project, and so will
# likely not be missed. He will be unapproved if he did his
# verification.
#
if (strcmp($curstatus, "newuser") &&
strcmp($curstatus, "unapproved")) {
echo "
User $user was denied membership in project $project.
Since the user has been approved by, or was active in other
projects in the past, the account cannot be safely removed.
\n";
continue;
}
$query_result = DBQueryFatal("delete FROM users where uid='$user'");
echo "
User $user was denied membership in project $project.
The account has also been terminated with prejudice!
\n";
continue;
}
if (strcmp($approval, "approve") == 0) {
#
# Change the trust value in group_membership accordingly.
#
$query_result =
DBQueryFatal("UPDATE group_membership ".
"set trust='$newtrust',date_approved=now() ".
"WHERE uid='$user' and pid='$project' and ".
" gid='$group'");
#
# Messy. If this is a new user joining a subgroup, and that new user
# is not already in the project, we need to add a second record to
# the project membership.
#
if (strcmp($project, $group)) {
TBGroupMember($user, $project, $project, $isapproved);
if (! $isapproved) {
$query_result =
DBQueryFatal("UPDATE group_membership ".
"set trust='$newtrust',date_approved=now() ".
"WHERE uid='$user' and pid='$project' and ".
" gid='$project'");
}
}
#
# Change the status if necessary. This only happens for new
# users being added to their first project. After this, the status is
# going to be "active", and we just leave it that way.
#
if (strcmp($curstatus, "active")) {
if (strcmp($curstatus, "newuser") == 0) {
$newstatus = "unverified";
}
elseif (strcmp($curstatus, "unapproved") == 0) {
$newstatus = "active";
}
else {
TBERROR("Invalid $user status $curstatus in approveuser.php3",
1);
}
$query_result =
DBQueryFatal("UPDATE users set status='$newstatus' ".
"WHERE uid='$user'");
}
mail("$user_name '$user' <$user_email>",
"TESTBED: Project '$project' Membership Approval",
"\n".
"This message is to notify you that you have been approved\n".
"as a member of project $project with $newtrust permissions.\n".
"\n\n".
"Thanks,\n".
"Testbed Ops\n".
"Utah Network Testbed\n",
"From: $uid_name <$uid_email>\n".
"Cc: $phead_name <$phead_email>\n".
"Bcc: $TBMAIL_APPROVAL\n".
"Errors-To: $TBMAIL_WWW");
#
# Create user account on control node.
#
SUEXEC($uid, "flux", "mkacct-ctrl $user", 0);
echo "
User $user was granted membership in project $project with $newtrust permissions. \n"; continue; } TBERROR("Invalid approval value $approval in approveuser.php3.", 1); } # # Standard Testbed Footer # PAGEFOOTER(); ?>