132 lines
4.8 KiB
PHP
132 lines
4.8 KiB
PHP
<?php
|
|
|
|
class Permissions {
|
|
const VIEW_CHANNEL = 1;
|
|
const SEND_MESSAGES = 2;
|
|
const MANAGE_MESSAGES = 4;
|
|
const MANAGE_CHANNELS = 8;
|
|
const MANAGE_SERVER = 16;
|
|
const ADMINISTRATOR = 32;
|
|
|
|
public static function hasPermission($user_id, $server_id, $permission) {
|
|
$stmt = db()->prepare("SELECT is_admin FROM users WHERE id = ?");
|
|
$stmt->execute([$user_id]);
|
|
$user = $stmt->fetch();
|
|
if ($user && $user['is_admin']) return true;
|
|
|
|
$stmt = db()->prepare("SELECT owner_id FROM servers WHERE id = ?");
|
|
$stmt->execute([$server_id]);
|
|
$server = $stmt->fetch();
|
|
if ($server && $server['owner_id'] == $user_id) return true;
|
|
|
|
$stmt = db()->prepare("
|
|
SELECT SUM(r.permissions) as total_perms
|
|
FROM roles r
|
|
JOIN user_roles ur ON r.id = ur.role_id
|
|
WHERE ur.user_id = ? AND r.server_id = ?
|
|
");
|
|
$stmt->execute([$user_id, $server_id]);
|
|
$row = $stmt->fetch();
|
|
$perms = (int)($row['total_perms'] ?? 0);
|
|
|
|
if ($perms & self::ADMINISTRATOR) return true;
|
|
return ($perms & $permission) === $permission;
|
|
}
|
|
|
|
public static function canViewChannel($user_id, $channel_id) {
|
|
$stmt = db()->prepare("SELECT server_id FROM channels WHERE id = ?");
|
|
$stmt->execute([$channel_id]);
|
|
$c = $stmt->fetch();
|
|
if (!$c) return false;
|
|
$server_id = $c['server_id'];
|
|
|
|
// Check if owner or admin
|
|
if (self::hasPermission($user_id, $server_id, self::ADMINISTRATOR)) return true;
|
|
|
|
// Fetch overrides for all roles the user has in this server
|
|
$stmt = db()->prepare("
|
|
SELECT cp.allow_permissions, cp.deny_permissions
|
|
FROM channel_permissions cp
|
|
JOIN user_roles ur ON cp.role_id = ur.role_id
|
|
WHERE ur.user_id = ? AND cp.channel_id = ?
|
|
");
|
|
$stmt->execute([$user_id, $channel_id]);
|
|
$overrides = $stmt->fetchAll();
|
|
|
|
// Check @everyone override specifically (even if user has no roles assigned)
|
|
$stmt = db()->prepare("SELECT id FROM roles WHERE server_id = ? AND (name = '@everyone' OR name = 'Everyone') LIMIT 1");
|
|
$stmt->execute([$server_id]);
|
|
$everyone_role = $stmt->fetch();
|
|
if ($everyone_role) {
|
|
$stmt = db()->prepare("SELECT allow_permissions, deny_permissions FROM channel_permissions WHERE channel_id = ? AND role_id = ?");
|
|
$stmt->execute([$channel_id, $everyone_role['id']]);
|
|
$eo = $stmt->fetch();
|
|
if ($eo) {
|
|
$overrides[] = $eo;
|
|
}
|
|
}
|
|
|
|
if (empty($overrides)) {
|
|
return true; // Default to yes
|
|
}
|
|
|
|
$allow = false;
|
|
$deny = false;
|
|
foreach($overrides as $o) {
|
|
if ($o['allow_permissions'] & self::VIEW_CHANNEL) $allow = true;
|
|
if ($o['deny_permissions'] & self::VIEW_CHANNEL) $deny = true;
|
|
}
|
|
|
|
if ($allow) return true;
|
|
if ($deny) return false;
|
|
|
|
return true; // Default to yes
|
|
}
|
|
|
|
public static function canSendInChannel($user_id, $channel_id) {
|
|
$stmt = db()->prepare("SELECT server_id FROM channels WHERE id = ?");
|
|
$stmt->execute([$channel_id]);
|
|
$c = $stmt->fetch();
|
|
if (!$c) return false;
|
|
$server_id = $c['server_id'];
|
|
|
|
// Check if owner or admin
|
|
if (self::hasPermission($user_id, $server_id, self::ADMINISTRATOR)) return true;
|
|
|
|
// Check overrides
|
|
$stmt = db()->prepare("
|
|
SELECT cp.allow_permissions, cp.deny_permissions
|
|
FROM channel_permissions cp
|
|
JOIN user_roles ur ON cp.role_id = ur.role_id
|
|
WHERE ur.user_id = ? AND cp.channel_id = ?
|
|
");
|
|
$stmt->execute([$user_id, $channel_id]);
|
|
$overrides = $stmt->fetchAll();
|
|
|
|
// Check @everyone override
|
|
$stmt = db()->prepare("SELECT id FROM roles WHERE server_id = ? AND (name = '@everyone' OR name = 'Everyone') LIMIT 1");
|
|
$stmt->execute([$server_id]);
|
|
$everyone_role = $stmt->fetch();
|
|
if ($everyone_role) {
|
|
$stmt = db()->prepare("SELECT allow_permissions, deny_permissions FROM channel_permissions WHERE channel_id = ? AND role_id = ?");
|
|
$stmt->execute([$channel_id, $everyone_role['id']]);
|
|
$eo = $stmt->fetch();
|
|
if ($eo) {
|
|
$overrides[] = $eo;
|
|
}
|
|
}
|
|
|
|
$allow = false;
|
|
$deny = false;
|
|
foreach($overrides as $o) {
|
|
if ($o['allow_permissions'] & self::SEND_MESSAGES) $allow = true;
|
|
if ($o['deny_permissions'] & self::SEND_MESSAGES) $deny = true;
|
|
}
|
|
|
|
if ($allow) return true;
|
|
if ($deny) return false;
|
|
|
|
return self::hasPermission($user_id, $server_id, self::SEND_MESSAGES);
|
|
}
|
|
}
|