Changeset 2616 for alternc/trunk/bureau/class/m_mysql.php

Timestamp:

11/30/09 07:01:34 (4 years ago)

Author:

benjamin

Message:

Adding Password Policy management to AlternC \!

File:

• alternc/trunk/bureau/class/m_mysql.php (modified) (12 diffs)

alternc/trunk/bureau/class/m_mysql.php

@@ -63 +63 @@
    */
   function alternc_password_policy() {
-    return array("mysql_users"=>"MySQL users");
+    return array("mysql"=>"MySQL users");
   }
 
@@ -252 +252 @@
    */
   function put_mysql_details($password) {
-    global $db,$err,$mem,$cuid;
+    global $db,$err,$mem,$cuid,$admin;
     $err->log("mysql","put_mysql_details");
     $db->query("SELECT * FROM db WHERE uid='$cuid';");
@@ -266 +266 @@
       return false;
     }
+
+    // Check this password against the password policy using common API : 
+    if (is_callable(array($admin,"checkPolicy"))) {
+      if (!$admin->checkPolicy("mysql",$login,$password)) {
+        return false; // The error has been raised by checkPolicy()
+      }
+    }
+
     // Update all the "pass" fields for this user : 
     $db->query("UPDATE db SET pass='$password' WHERE uid='$cuid';");
@@ -278 +286 @@
    */
   function new_mysql($password) {
-    global $db,$err,$mem,$cuid;
+    global $db,$err,$mem,$cuid,$admin;
     $err->log("mysql","new_mysql");
     if (strlen($password)>16) {
@@ -291 +299 @@
     $login=$mem->user["login"];
     $dbname=$mem->user["login"];
+
+    // Check this password against the password policy using common API : 
+    if (is_callable(array($admin,"checkPolicy"))) {
+      if (!$admin->checkPolicy("mysql",$login,$password)) {
+        return false; // The error has been raised by checkPolicy()
+      }
+    }    
+
     // OK, creation now...
     $db->query("INSERT INTO db (uid,login,pass,db) VALUES ('$cuid','".$login."','$password','".$dbname."');");
@@ -457 +473 @@
   }
 
+
+  /* ------------------------------------------------------------ */
+  /** 
+   * Create a new user in MySQL rights tables
+   * @param $usern the username (we will add _[alternc-account] to it)
+   * @param $password The password for this username
+   * @param $passconf The password confirmation
+   * @return TRUE if the user has been created in MySQL or FALSE if an error occurred
+   **/
   function add_user($usern,$password,$passconf) {
-    global $db,$err,$quota,$mem,$cuid;
+    global $db,$err,$quota,$mem,$cuid,$admin;
     $err->log("mysql","add_user",$usern);
     
@@ -487 +512 @@
     }
 
+    // Check this password against the password policy using common API : 
+    if (is_callable(array($admin,"checkPolicy"))) {
+      if (!$admin->checkPolicy("mysql",$user,$password)) {
+        return false; // The error has been raised by checkPolicy()
+      }
+    }
 
     // We create the user account (the "file" right is the only one we need globally to be able to use load data into outfile)
@@ -495 +526 @@
   }
 
+
+
+  /* ------------------------------------------------------------ */
+  /** 
+   * Delete a new user in MySQL rights tables
+   * @param $user the username (we will add _[alternc-account] to it) to delete
+   * @return TRUE if the user has been deleted in MySQL or FALSE if an error occurred
+   **/
   function del_user($user) {
     global $db,$err,$mem,$cuid,$L_MYSQL_DATABASE;
@@ -519 +558 @@
   }
 
+
+  /* ------------------------------------------------------------ */
+  /** 
+   * Return the list of the database rights of user $user
+   * @param $user the username 
+   * @return array An array of database name and rights
+   **/
   function get_user_dblist($user) {
     global $db,$err,$mem,$cuid,$L_MYSQL_DATABASE;
@@ -537 +583 @@
   }
 
+
+
+  /* ------------------------------------------------------------ */
+  /** 
+   * Set the access rights of user $user to database $dbn to be rights $rights
+   * @param $user the username to give rights to
+   * @param $dbn The database to give rights to
+   * @param $rights The rights as an array of MySQL keywords (insert, select ...)
+   * @return boolean TRUE if the rights has been applied or FALSE if an error occurred
+   * 
+   **/
   function set_user_rights($user,$dbn,$rights) {
     global $mem, $db;
@@ -581 +638 @@
     }
 
-    
-    // On remet à zéro tous les droits de l'utilisateur
+    // We reset all user rights on this DB : 
     $db->query("SELECT * FROM mysql.db WHERE User = '$usern' AND Db = '$dbname';");
     if($db->num_rows())
@@ -594 +650 @@
   }
 
+
+
 } /* Class m_mysql */