includes/api/ApiUserrights.php

   1 <?php
   2
   3 /*
   4  * Created on Mar 24, 2009
   5  * API for MediaWiki 1.8+
   6  *
   7  * Copyright (C) 2009 Roan Kattouw <Firstname>.<Lastname>@home.nl
   8  *
   9  * This program is free software; you can redistribute it and/or modify
  10  * it under the terms of the GNU General Public License as published by
  11  * the Free Software Foundation; either version 2 of the License, or
  12  * (at your option) any later version.
  13  *
  14  * This program is distributed in the hope that it will be useful,
  15  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  17  * GNU General Public License for more details.
  18  *
  19  * You should have received a copy of the GNU General Public License along
  20  * with this program; if not, write to the Free Software Foundation, Inc.,
  21  * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
  22  * http://www.gnu.org/copyleft/gpl.html
  23  */
  24
  25 if ( !defined( 'MEDIAWIKI' ) ) {
  26         // Eclipse helper - will be ignored in production
  27         require_once ( "ApiBase.php" );
  28 }
  29
  30 /**
  31  * @ingroup API
  32  */
  33 class ApiUserrights extends ApiBase {
  34
  35         public function __construct( $main, $action ) {
  36                 parent :: __construct( $main, $action );
  37         }
  38
  39         public function execute() {
  40                 global $wgUser;
  41                 $params = $this->extractRequestParams();
  42                 if ( is_null( $params['user'] ) )
  43                         $this->dieUsageMsg( array( 'missingparam', 'user' ) );
  44                 if ( is_null( $params['token'] ) )
  45                         $this->dieUsageMsg( array( 'missingparam', 'token' ) );
  46
  47                 $form = new UserrightsPage;
  48                 $user = $form->fetchUser( $params['user'] );
  49                 if ( $user instanceof WikiErrorMsg )
  50                         $this->dieUsageMsg( array_merge(
  51                                 (array)$user->getMessageKey(), $user->getMessageArgs() ) );
  52
  53                 if ( !$wgUser->matchEditToken( $params['token'], $user->getName() ) )
  54                         $this->dieUsageMsg( array( 'sessionfailure' ) );
  55
  56                 $r['user'] = $user->getName();
  57                 list( $r['added'], $r['removed'] ) =
  58                         $form->doSaveUserGroups(
  59                                 $user, (array)$params['add'],
  60                                 (array)$params['remove'], $params['reason'] );
  61
  62                 $this->getResult()->setIndexedTagName( $r['added'], 'group' );
  63                 $this->getResult()->setIndexedTagName( $r['removed'], 'group' );
  64                 $this->getResult()->addValue( null, $this->getModuleName(), $r );
  65         }
  66
  67         public function mustBePosted() {
  68                 return true;
  69         }
  70
  71         public function isWriteMode() {
  72                 return true;
  73         }
  74
  75         public function getAllowedParams() {
  76                 return array (
  77                         'user' => null,
  78                         'add' => array(
  79                                 ApiBase :: PARAM_TYPE => User::getAllGroups(),
  80                                 ApiBase :: PARAM_ISMULTI => true
  81                         ),
  82                         'remove' => array(
  83                                 ApiBase :: PARAM_TYPE => User::getAllGroups(),
  84                                 ApiBase :: PARAM_ISMULTI => true
  85                         ),
  86                         'token' => null,
  87                         'reason' => array(
  88                                 ApiBase :: PARAM_DFLT => ''
  89                         )
  90                 );
  91         }
  92
  93         public function getParamDescription() {
  94                 return array (
  95                         'user' => 'User name',
  96                         'add' => 'Add the user to these groups',
  97                         'remove' => 'Remove the user from these groups',
  98                         'token' => 'A userrights token previously retrieved through list=users',
  99                         'reason' => 'Reason for the change',
 100                 );
 101         }
 102
 103         public function getDescription() {
 104                 return array(
 105                         'Add/remove a user to/from groups',
 106                 );
 107         }
 108
 109     public function getPossibleErrors() {
 110                 return array_merge( parent::getPossibleErrors(), array(
 111                         array( 'missingparam', 'user' ),
 112                         array( 'missingparam', 'token' ),
 113                         array( 'sessionfailure' ),
 114         ) );
 115         }
 116
 117         protected function getExamples() {
 118                 return array (
 119                         'api.php?action=userrights&user=FooBot&add=bot&remove=sysop|bureaucrat&token=123ABC'
 120                 );
 121         }
 122
 123         public function getVersion() {
 124                 return __CLASS__ . ': $Id$';
 125         }
 126 }