1be42d13de
Changes Dbal\DatabaseName, Dbal\TableName and Triggers\TriggerName to implements the new Identifier\Identifier interface. Moves Dbal\DatabaseName, Dbal\TableName and Triggers\TriggerName to the Identifiers namespace. Renames the tryFromValue() and fromValue() methods to just tryFrom() and from() respectively. Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
102 lines
3.2 KiB
PHP
102 lines
3.2 KiB
PHP
<?php
|
|
/**
|
|
* Controller for table privileges
|
|
*/
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace PhpMyAdmin\Controllers\Table;
|
|
|
|
use PhpMyAdmin\CheckUserPrivileges;
|
|
use PhpMyAdmin\Controllers\AbstractController;
|
|
use PhpMyAdmin\DatabaseInterface;
|
|
use PhpMyAdmin\Http\ServerRequest;
|
|
use PhpMyAdmin\Identifiers\DatabaseName;
|
|
use PhpMyAdmin\Identifiers\InvalidIdentifier;
|
|
use PhpMyAdmin\Identifiers\TableName;
|
|
use PhpMyAdmin\Message;
|
|
use PhpMyAdmin\ResponseRenderer;
|
|
use PhpMyAdmin\Server\Privileges;
|
|
use PhpMyAdmin\Template;
|
|
use PhpMyAdmin\Util;
|
|
|
|
use function __;
|
|
use function mb_strtolower;
|
|
|
|
/**
|
|
* Controller for table privileges
|
|
*/
|
|
class PrivilegesController extends AbstractController
|
|
{
|
|
public function __construct(
|
|
ResponseRenderer $response,
|
|
Template $template,
|
|
private Privileges $privileges,
|
|
private DatabaseInterface $dbi,
|
|
) {
|
|
parent::__construct($response, $template);
|
|
}
|
|
|
|
public function __invoke(ServerRequest $request): void
|
|
{
|
|
try {
|
|
$db = DatabaseName::from($request->getParam('db'));
|
|
$table = TableName::from($request->getParam('table'));
|
|
if ($this->dbi->getLowerCaseNames() === 1) {
|
|
$db = DatabaseName::from(mb_strtolower($db->getName()));
|
|
$table = TableName::from(mb_strtolower($table->getName()));
|
|
}
|
|
} catch (InvalidIdentifier $exception) {
|
|
$this->response->addHTML(Message::error($exception->getMessage())->getDisplay());
|
|
|
|
return;
|
|
}
|
|
|
|
$checkUserPrivileges = new CheckUserPrivileges($this->dbi);
|
|
$checkUserPrivileges->getPrivileges();
|
|
|
|
$this->addScriptFiles(['server/privileges.js', 'vendor/zxcvbn-ts.js']);
|
|
|
|
/**
|
|
* Checks if the user is allowed to do what they try to...
|
|
*/
|
|
$isGrantUser = $this->dbi->isGrantUser();
|
|
$isCreateUser = $this->dbi->isCreateUser();
|
|
|
|
if (! $this->dbi->isSuperUser() && ! $isGrantUser && ! $isCreateUser) {
|
|
$this->render('server/sub_page_header', ['type' => 'privileges', 'is_image' => false]);
|
|
$this->response->addHTML(
|
|
Message::error(__('No Privileges'))
|
|
->getDisplay(),
|
|
);
|
|
|
|
return;
|
|
}
|
|
|
|
if (! $isGrantUser && ! $isCreateUser) {
|
|
$this->response->addHTML(Message::notice(
|
|
__('You do not have the privileges to administrate the users!'),
|
|
)->getDisplay());
|
|
}
|
|
|
|
$scriptName = Util::getScriptNameForOption($GLOBALS['cfg']['DefaultTabTable'], 'table');
|
|
|
|
$privileges = [];
|
|
if ($this->dbi->isSuperUser()) {
|
|
$privileges = $this->privileges->getAllPrivileges($db, $table);
|
|
}
|
|
|
|
$this->render('table/privileges/index', [
|
|
'db' => $db->getName(),
|
|
'table' => $table->getName(),
|
|
'is_superuser' => $this->dbi->isSuperUser(),
|
|
'table_url' => $scriptName,
|
|
'text_dir' => $GLOBALS['text_dir'],
|
|
'is_createuser' => $this->dbi->isCreateUser(),
|
|
'is_grantuser' => $this->dbi->isGrantUser(),
|
|
'privileges' => $privileges,
|
|
]);
|
|
$this->render('export_modal');
|
|
}
|
|
}
|
