approveuser.php 2.52 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33
<?php
#
# Copyright (c) 2000-2014 University of Utah and the Flux Group.
# 
# {{{EMULAB-LICENSE
# 
# This file is part of the Emulab network testbed software.
# 
# This file is free software: you can redistribute it and/or modify it
# under the terms of the GNU Affero General Public License as published by
# the Free Software Foundation, either version 3 of the License, or (at
# your option) any later version.
# 
# This file is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
# FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public
# License for more details.
# 
# You should have received a copy of the GNU Affero General Public License
# along with this file.  If not, see <http://www.gnu.org/licenses/>.
# 
# }}}
#
chdir("..");
include("defs.php3");
chdir("apt");
include("quickvm_sup.php");
$page_title = "Approve User";

#
# Get current user in case we need an error message.
#
RedirectSecure();
34
$this_user = CheckLoginOrRedirect();
35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96

#
# Verify page arguments.
#
$optargs = RequiredPageArguments("action",      PAGEARG_STRING,
				 "project",     PAGEARG_PROJECT,
				 "user",        PAGEARG_USER);

#
# The user must be logged in.
#
if (!$this_user) {
    RedirectLoginPage();
    exit();
}
$this_idx = $this_user->uid_idx();
$this_uid = $this_user->uid();
$user_uid = $user->uid();
$pid      = $project->pid();

SPITHEADER(1);
SpitWaitModal("waitwait-modal");
SpitOopsModal("oops");
echo "<div id='page-body'></div>\n";

if ($action != "approve" && $action != "deny") {
    SPITUSERERROR("Action is not one of approve or deny");
    return;
}

#
# Check that the current user has the necessary trust level
# to approver users in the project/group.
#
if (! $project->AccessCheck($this_user, $TB_PROJECT_ADDUSER)) {
    SPITUSERERROR("You are not allowed to approve users in this project");
    return;
}

#
# Must be an unapproved member ...
#
$approved = 0;
if (! $project->IsMember($user, $approved)) {
    SPITUSERERROR("User $user_uid is not a member of project $pid");
    return;
}

if ($approved) {
    SPITUSERERROR("User $user_uid is already an approved ".
		  "member of project $pid");
    return;
}

echo "<script type='text/javascript'>\n";
echo "    window.ACTION  = '$action';\n";
echo "    window.USER    = '$user_uid';\n";
echo "    window.PROJECT = '$pid';\n";
echo "    window.AJAXURL = 'server-ajax.php';\n";
echo "</script>\n";

echo "<script src='js/lib/jquery-2.0.3.min.js'></script>\n";
97 98
REQUIRE_SUP();
SPITREQUIRE("js/approveuser.js");
99 100

SPITFOOTER();