|
Mikael Johansson
|
Monday 11 July 2005 9:51:27 am
I am writing an extension and I think I'm getting into trouble because I do things that shold be done in PHP in my templates and vice versa. Could someone please explain the general idea? Template programming is very convenient because all the objects are avaliable directly, but some things don't seem to be possible in the template code (removing nodes, doing SQL queries, etc). Theoretically everything could be done in PHP I guess, but there is little documentation about it and I don't think it is the eZpublish way.
Mikael Johansson, Sweden
|
|
Mikael Johansson
|
Monday 11 July 2005 9:55:39 am
I'll give you an example just to get started: I have User groups with some extened attributes (Group phone number, group emiail, etc) and these groups contain users. I want my group administrator, who has edit rights on one of the groups, to be able to remove users from this group. The administrator does not (can not) have edit rights on the users. This is what I have done so far, but I think I have complicated stuff by doing it all in template programming.
{* removelocation.tpl
/*
*
* Input: nodeID of the location to delete as eZpublish template variable
* Output: Success or failure of removing the node
* Result: Node is removed.
*
* written by Mikael Johansson, mjo[at]chs.chalmers.se July 2005
*/
*}
{* Check permissions *}
{* 1. Current user.contentobject_id == thenode.contentobject_id
2. Current user has admin rights on thenode.
*}
{def $permsOK = false}
{def $chscurruser = fetch( 'user', 'current_user' )}
{def $thenode = fetch('content', 'node', hash('node_id', $nodeID))}
{if eq($chscurruser.contentobject_id, $thenode.contentobject_id)}
user is trying to remove itself from the group. That's ok
{set $permsOK = true}
{/if}
{if $thenode.parent.can_edit}
<div> user is admin for the group. Permissions ok </div>
{set $permsOK = true}
{/if}
{if eq($permsOK, false)}
<div>Insufficient access rights.</div>
{else}
<div>Perms ok, removing...</div>
// CODE HERE FOR REMOVING THE NODE
}
{/if}
Mikael Johansson, Sweden
|