mirror of
https://github.com/nuxsmin/sysPass.git
synced 2026-03-06 08:34:16 +01:00
94f9929be0
* [ADD] Delete multiple items at once * [FIX] Some bugfixes * [MOD] Removed deprecated code
319 lines
11 KiB
PHP
319 lines
11 KiB
PHP
<?php
|
|
/**
|
|
* sysPass
|
|
*
|
|
* @author nuxsmin
|
|
* @link http://syspass.org
|
|
* @copyright 2012-2018, Rubén Domínguez nuxsmin@$syspass.org
|
|
*
|
|
* This file is part of sysPass.
|
|
*
|
|
* sysPass is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* sysPass is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with sysPass. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
namespace SP\Services\Account;
|
|
|
|
use SP\Account\AccountAcl;
|
|
use SP\Account\AccountSearchFilter;
|
|
use SP\Account\AccountSearchItem;
|
|
use SP\Config\ConfigData;
|
|
use SP\Core\Acl\Acl;
|
|
use SP\Core\Session\Session;
|
|
use SP\DataModel\AccountSearchVData;
|
|
use SP\DataModel\Dto\AccountAclDto;
|
|
use SP\DataModel\Dto\AccountCache;
|
|
use SP\Repositories\Account\AccountRepository;
|
|
use SP\Repositories\Account\AccountToTagRepository;
|
|
use SP\Repositories\Account\AccountToUserGroupRepository;
|
|
use SP\Repositories\Account\AccountToUserRepository;
|
|
use SP\Services\Service;
|
|
use SP\Services\User\UserService;
|
|
use SP\Services\UserGroup\UserGroupService;
|
|
|
|
defined('APP_ROOT') || die();
|
|
|
|
/**
|
|
* Class AccountSearchService para la gestión de búsquedas de cuentas
|
|
*/
|
|
class AccountSearchService extends Service
|
|
{
|
|
/**
|
|
* Colores para resaltar las cuentas
|
|
*
|
|
* @var array
|
|
*/
|
|
private static $colors = [
|
|
'2196F3',
|
|
'03A9F4',
|
|
'00BCD4',
|
|
'009688',
|
|
'4CAF50',
|
|
'8BC34A',
|
|
'CDDC39',
|
|
'FFC107',
|
|
'795548',
|
|
'607D8B',
|
|
'9E9E9E',
|
|
'FF5722',
|
|
'F44336',
|
|
'E91E63',
|
|
'9C27B0',
|
|
'673AB7',
|
|
'3F51B5',
|
|
];
|
|
/**
|
|
* @var Session
|
|
*/
|
|
protected $session;
|
|
/**
|
|
* @var ConfigData
|
|
*/
|
|
protected $configData;
|
|
/**
|
|
* @var AccountToTagRepository
|
|
*/
|
|
protected $accountToTagRepository;
|
|
/**
|
|
* @var AccountToUserRepository
|
|
*/
|
|
protected $accountToUserRepository;
|
|
/**
|
|
* @var AccountToUserGroupRepository
|
|
*/
|
|
protected $accountToUserGroupRepository;
|
|
/**
|
|
* @var AccountRepository
|
|
*/
|
|
private $accountRepository;
|
|
|
|
/**
|
|
* @throws \Psr\Container\ContainerExceptionInterface
|
|
* @throws \Psr\Container\NotFoundExceptionInterface
|
|
*/
|
|
protected function initialize()
|
|
{
|
|
$this->accountRepository = $this->dic->get(AccountRepository::class);
|
|
$this->accountToTagRepository = $this->dic->get(AccountToTagRepository::class);
|
|
$this->accountToUserRepository = $this->dic->get(AccountToUserRepository::class);
|
|
$this->accountToUserGroupRepository = $this->dic->get(AccountToUserGroupRepository::class);
|
|
$this->configData = $this->config->getConfigData();
|
|
}
|
|
|
|
/**
|
|
* Procesar los resultados de la búsqueda y crear la variable que contiene los datos de cada cuenta
|
|
* a mostrar.
|
|
*
|
|
* @param AccountSearchFilter $accountSearchFilter
|
|
* @return array
|
|
* @throws \Psr\Container\ContainerExceptionInterface
|
|
* @throws \Psr\Container\NotFoundExceptionInterface
|
|
* @throws \SP\Core\Dic\ContainerException
|
|
* @throws \SP\Core\Exceptions\SPException
|
|
*/
|
|
public function processSearchResults(AccountSearchFilter $accountSearchFilter)
|
|
{
|
|
$accountSearchFilter->setStringFilters($this->analyzeQueryString($accountSearchFilter->getTxtSearch()));
|
|
|
|
$accountSearchResponse = $this->accountRepository->getByFilter($accountSearchFilter);
|
|
|
|
// Variables de configuración
|
|
$maxTextLength = $this->configData->isResultsAsCards() ? 40 : 60;
|
|
|
|
$accountLinkEnabled = $this->session->getUserData()->getPreferences()->isAccountLink() || $this->configData->isAccountLink();
|
|
$favorites = $this->dic->get(AccountFavoriteService::class)->getForUserId($this->session->getUserData()->getId());
|
|
|
|
foreach ($accountSearchResponse->getData() as $accountSearchData) {
|
|
$cache = $this->getCacheForAccount($accountSearchData);
|
|
|
|
$acccountAclDto = new AccountAclDto();
|
|
$acccountAclDto->setAccountId($accountSearchData->getId());
|
|
$acccountAclDto->setDateEdit($accountSearchData->getDateEdit());
|
|
$acccountAclDto->setUserId($accountSearchData->getUserId());
|
|
$acccountAclDto->setUserGroupId($accountSearchData->getUserGroupId());
|
|
$acccountAclDto->setUsersId($cache->getUsers());
|
|
$acccountAclDto->setUserGroupsId($cache->getUserGroups());
|
|
|
|
// Obtener la ACL de la cuenta
|
|
$accountAcl = (new AccountAcl(Acl::ACCOUNT_SEARCH))->getAcl($acccountAclDto);
|
|
|
|
// Guardar la ACL
|
|
$this->session->setAccountAcl($accountAcl);
|
|
|
|
// Propiedades de búsqueda de cada cuenta
|
|
$accountsSearchItem = new AccountSearchItem($accountSearchData, $accountAcl);
|
|
|
|
if (!$accountSearchData->getIsPrivate()) {
|
|
$accountsSearchItem->setUsers($cache->getUsers());
|
|
$accountsSearchItem->setUserGroups($cache->getUserGroups());
|
|
}
|
|
|
|
$accountsSearchItem->setTags($this->accountToTagRepository->getTagsByAccountId($accountSearchData->getId()));
|
|
$accountsSearchItem->setTextMaxLength($maxTextLength);
|
|
$accountsSearchItem->setColor($this->pickAccountColor($accountSearchData->getClientId()));
|
|
$accountsSearchItem->setLink($accountLinkEnabled);
|
|
$accountsSearchItem->setFavorite(in_array($accountSearchData->getId(), $favorites, true));
|
|
|
|
$accountsData[] = $accountsSearchItem;
|
|
}
|
|
|
|
$accountsData['count'] = $accountSearchResponse->getCount();
|
|
|
|
return $accountsData;
|
|
}
|
|
|
|
/**
|
|
* Analizar la cadena de consulta por eqituetas especiales y devolver un array
|
|
* con las columnas y los valores a buscar.
|
|
*
|
|
* @param $txt
|
|
* @return array|bool
|
|
* @throws \Psr\Container\ContainerExceptionInterface
|
|
* @throws \Psr\Container\NotFoundExceptionInterface
|
|
* @throws \SP\Core\Exceptions\SPException
|
|
*/
|
|
private function analyzeQueryString($txt)
|
|
{
|
|
if (!preg_match('/^(?P<filter>user|group|file|owner|maingroup):"(?P<text>[\w\.]+)"$/i', $txt, $filters)
|
|
&& !preg_match('/^(?P<filter>expired|private):$/i', $txt, $filters)
|
|
) {
|
|
return [];
|
|
}
|
|
|
|
switch ($filters['filter']) {
|
|
case 'user':
|
|
$userData = $this->dic->get(UserService::class)->getByLogin($filters['text']);
|
|
|
|
if (!is_object($userData)) {
|
|
return [];
|
|
}
|
|
|
|
return [
|
|
'type' => 'user',
|
|
'query' => 'A.userId = ? OR A.id IN (SELECT AU.accountId FROM AccountToUser AU WHERE AU.accountId = A.id AND AU.userId = ? UNION ALL SELECT AUG.accountId FROM AccountToUserGroup AUG WHERE AUG.accountId = A.id AND AUG.userGroupId = ?)',
|
|
'values' => [$userData->getId(), $userData->getId(), $userData->getUserGroupId()]
|
|
];
|
|
break;
|
|
case 'owner':
|
|
$userData = $this->dic->get(UserService::class)->getByLogin($filters['text']);
|
|
|
|
if (!is_object($userData)) {
|
|
return [];
|
|
}
|
|
|
|
return [
|
|
'type' => 'user',
|
|
'query' => 'A.userId = ?',
|
|
'values' => [$userData->getId()]
|
|
];
|
|
break;
|
|
case 'group':
|
|
$userGroupData = $this->dic->get(UserGroupService::class)->getByName($filters['text']);
|
|
|
|
if (!is_object($userGroupData)) {
|
|
return [];
|
|
}
|
|
|
|
return [
|
|
'type' => 'group',
|
|
'query' => 'A.userGroupId = ? OR A.id IN (SELECT AUG.accountId FROM AccountToUserGroup AUG WHERE AUG.accountId = id AND AUG.userGroupId = ?)',
|
|
'values' => [$userGroupData->getId(), $userGroupData->getId()]
|
|
];
|
|
break;
|
|
case 'maingroup':
|
|
$userGroupData = $this->dic->get(UserGroupService::class)->getByName($filters['text']);
|
|
|
|
if (!is_object($userGroupData)) {
|
|
return [];
|
|
}
|
|
|
|
return [
|
|
'type' => 'group',
|
|
'query' => 'A.userGroupId = ?',
|
|
'values' => [$userGroupData->getId()]
|
|
];
|
|
break;
|
|
case 'file':
|
|
return [
|
|
'type' => 'file',
|
|
'query' => 'A.id IN (SELECT AF.accountId FROM AccountFile AF WHERE AF.name LIKE ?)',
|
|
'values' => ['%' . $filters[2] . '%']
|
|
];
|
|
break;
|
|
case 'expired':
|
|
return [
|
|
'type' => 'expired',
|
|
'query' => 'A.passDateChange > 0 AND UNIX_TIMESTAMP() > A.passDateChange',
|
|
'values' => []
|
|
];
|
|
break;
|
|
case 'private':
|
|
return [
|
|
'type' => 'private',
|
|
'query' => '(A.isPrivate = 1 AND A.userId = ?) OR (A.isPrivateGroup = 1 AND A.userGroupId = ?)',
|
|
'values' => [$this->session->getUserData()->getId(), $this->session->getUserData()->getUserGroupId()]
|
|
];
|
|
break;
|
|
default:
|
|
return [];
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Devolver los accesos desde la caché
|
|
*
|
|
* @param AccountSearchVData $accountSearchData
|
|
* @return AccountCache
|
|
*/
|
|
protected function getCacheForAccount(AccountSearchVData $accountSearchData)
|
|
{
|
|
$accountId = $accountSearchData->getId();
|
|
|
|
/** @var AccountCache[] $cache */
|
|
$cache =& $_SESSION['accountsCache'];
|
|
|
|
if (!isset($cache[$accountId])
|
|
|| $cache[$accountId]->getTime() < (int)strtotime($accountSearchData->getDateEdit())
|
|
) {
|
|
$cache[$accountId] = new AccountCache(
|
|
$accountId,
|
|
$this->accountToUserRepository->getUsersByAccountId($accountId),
|
|
$this->accountToUserGroupRepository->getUserGroupsByAccountId($accountId));
|
|
}
|
|
|
|
return $cache[$accountId];
|
|
}
|
|
|
|
/**
|
|
* Seleccionar un color para la cuenta
|
|
*
|
|
* @param int $id El id del elemento a asignar
|
|
* @return mixed
|
|
*/
|
|
private function pickAccountColor($id)
|
|
{
|
|
$accountColor = $this->session->getAccountColor();
|
|
|
|
if (!is_array($accountColor)
|
|
|| !isset($accountColor[$id])
|
|
) {
|
|
// Se asigna el color de forma aleatoria a cada id
|
|
$color = array_rand(self::$colors);
|
|
|
|
$accountColor[$id] = '#' . self::$colors[$color];
|
|
$this->session->setAccountColor($accountColor);
|
|
}
|
|
|
|
return $accountColor[$id];
|
|
}
|
|
} |