You have the following choices for Trust: |
| |
User |
- |
User may log into machines in your experiments |
| |
Local Root |
- |
User may create/destroy experiments in your project and
has root privileges on machines in your experiments |
| |
Group Root |
- |
In addition to Local Root privileges, user may also
approve new group members and
modify user info for other users within the group. This
level of trust is typically given only to TAs and the
like. |
\n";
#
# Find all of the groups that this person has project/group root in, and
# then in all of those groups, all of the people who are awaiting to be
# approved (status = none).
#
# First off, just determine if this person has group/project root anywhere.
#
$query_result =
DBQueryFatal("SELECT pid FROM group_membership WHERE uid='$auth_usr' ".
"and (trust='group_root' or trust='project_root')");
if (mysql_num_rows($query_result) == 0) {
USERERROR("You do not have Root permissions in any Project or Group.", 1);
}
#
# Okay, so this operation sucks out the right people by joining the
# group_membership table with itself. Kinda obtuse if you are not a natural
# DB guy. Sorry. Well, obtuse to me.
#
$query_result =
DBQueryFatal("SELECT g.* FROM group_membership as g ".
"LEFT JOIN group_membership as authed ".
"ON g.pid=authed.pid and g.gid=authed.gid and ".
" g.uid!='$auth_usr' and g.trust='none' ".
"WHERE authed.uid='$auth_usr' and ".
" (authed.trust='group_root' or ".
" authed.trust='project_root')");
if (mysql_num_rows($query_result) == 0) {
USERERROR("You have no new project members who need approval.", 1);
}
#
# Now build a table with a bunch of selections. The thing to note about the
# form inside this table is that the selection fields are constructed with
# name= on the fly, from the uid of the user to be approved. In other words:
#
# uid menu project/group
# name=stoller$$approval-testbed/testbed value=approved,denied,postpone
# name=stoller$$trust-testbed/testbed value=user,local_root
#
# so that we can go through the entire list of post variables, looking
# for these. The alternative is to work backwards, and I do not like that.
#
echo "