<?php
/**
 * @author Paul Bukowski <hide@address.com>
 * @version 1.0
 * @copyright Copyright &copy; 2007, Telaxus LLC
 * @license SPL
 * @package epesi-base
 */
defined("_VALID_ACCESS") || die('Direct access forbidden');

require_once('libs/phpgacl/gacl.class.php');
require_once('libs/phpgacl/gacl_api.class.php');

class Acl {
	public static $gacl;
    
	/**
	 * Wrapper to acl_check phpgacl method.
	 * Third and fourth argument can be omited, it will be replaced by currently logged user. Be careful: anonymous user always returns false.
	 * 
	 * @param string
	 * @param string
	 * @param string
	 * @param string
	 * @return bool false on access denied
	 */
	public static function check($a,$b,$c=null,$d=null,$cache=true) {
		static $cached = array();
		if(!isset($d)) {
			$d = self::get_user();
			if(!isset($d))
				return false;
		}
		if(!isset($c)) $c = 'Users';
		if($cache && isset($cached[$a][$b][$c][$d])) {
			return $cached[$a][$b][$c][$d];	
		}
		return $cached[$a][$b][$c][$d] = self::$gacl->acl_check($a,$b,$c,$d);
	}
	
	/**
	 * Get currently logged user.
	 * 
	 * @return string
	 */
	private static $cached_user = false;
	public static function get_user() {
		if (self::$cached_user==false) self::$cached_user = isset($_SESSION['user'])?$_SESSION['user']:null;
		return self::$cached_user;
	}
    
    	/**
	 * Set currently logged user
	 */
	public static function set_user($a=null, $real=false) {
		self::$cached_user = $a;
		if (!$real) return;
		if(isset($a))
			$_SESSION['user'] = $a;
		else
			unset($_SESSION['user']);
	}
    
    	/**
	 * Are you logged?
	 *
	 * @return bool 
	 */
	public static function is_user() {
		return isset($_SESSION['user']);
	}
	
	/**
	 * Add group of users
	 * @param array recurence: key-group name, value-groups dependent
	 * @param int parent
	 */
	public static function add_groups($names, $parent=null) {
		if($parent===null) $parent = Acl::$gacl->get_group_id('User');
		if(is_array($names)) {
			foreach($names as $k=>$v) {
				if(is_array($v) && is_string($k)) {
					self::add_groups($v,self::$gacl->add_group($k,$k, $parent));
				} elseif(is_string($v)) {
					if(!self::$gacl->add_group($v,$v, $parent)) return false;
				} else 
					return false;
			}
		} elseif(is_string($names)) {
			self::$gacl->add_group($names,$names, $parent);
		} else 
			return false;
		return true;
	}
	
	public static function del_group($name) {
		$id = Acl::$gacl->get_group_id($name);
		if($id===false)
			return false;
		
		Acl::$gacl->del_group($id);
		return true;
	}
	
	public static function add_aco($section,$name,$group=null) {
		Acl::add_aco_section($section);
		$ret = Acl::$gacl->add_object($section,$name,$name,0,0,'aco');
		if(!$ret) return false;
		if(isset($group)) {
			if(is_string($group)) $group = array($group);
			foreach($group as $g) {
				$x = Acl::$gacl->get_group_id($g);
				if($x===false) return false;
				$ret = Acl::$gacl->add_acl(array($section =>array($name)), array(), array($x), NULL, NULL,1,1,'','','user');
				if(!$ret) return false;
//				print('adding '.$section.' '.$name.' '.$g.'<br>');
			}
		}
		return $ret;
	}

	public static function del_aco($section,$name) {
		$id = Acl::$gacl->get_object_id($section,$name,'aco');
		if($id===false) return false;
		return Acl::$gacl->del_object($id,'aco',true);
	}
	
	public static function add_aco_section($section) {
		$id = Acl::$gacl->get_object_section_section_id($section,$section,'aco');
		if($id===false)
			Acl::$gacl->add_object_section($section,$section,0,0,'aco');
	}
	
	public static function del_aco_section($section) {
		$id = Acl::$gacl->get_object_section_section_id($section,$section,'aco');
		if($id===false)
			return false;
		return Acl::$gacl->del_object_section($id, 'aco',true);
	}	
}

Acl::$gacl = new gacl_api(array('db'=>& DB::$ado));

?>