67 lines
2.0 KiB
PHP
67 lines
2.0 KiB
PHP
<?php
|
|
|
|
use api\classes\API_usergroups;
|
|
|
|
session_start();
|
|
require_once $_SERVER['DOCUMENT_ROOT'] . '/api/classes/API_usergroups.php';
|
|
|
|
|
|
$API_usergroups = new API_usergroups();
|
|
|
|
if ($API_usergroups->request_method === 'GET') {
|
|
|
|
# GET a user group(s)
|
|
|
|
} elseif ($API_usergroups->request_method === 'POST') {
|
|
|
|
# Create a new user group
|
|
|
|
$API_usergroups->checkPermissions('admin-access-control-user-groups', 'RW');
|
|
|
|
$requiredFields = [
|
|
'user_group_name' => ['type' => 'string'],
|
|
'user_group_slugify' => ['type' => 'slugify'],
|
|
'user_group_weight' => ['type' => 'int'],
|
|
'user_group_type' => ['type' => 'enum', 'values' => ['admin', 'user']],
|
|
];
|
|
|
|
$API_usergroups->validateData($requiredFields);
|
|
|
|
# superuser group is a fixed group name for the superuser
|
|
if ($API_usergroups->data['user_group_name'] === 'superuser' || $API_usergroups->data['user_group_slugify'] === 'superuser') {
|
|
$API_usergroups->apiOutput(400, ['error' => 'superuser group cannot be created'], 'cannot_add_superuser_group');
|
|
}
|
|
|
|
$API_usergroups->createUsergroups();
|
|
|
|
|
|
} elseif ($API_usergroups->request_method === 'PUT') {
|
|
|
|
# Update a user group
|
|
|
|
$requiredFields = [
|
|
'user_group_uuid' => ['type' => 'uuid'],
|
|
'user_group_name' => ['type' => 'string'],
|
|
'user_group_weight' => ['type' => 'int'],
|
|
];
|
|
|
|
$API_usergroups->validateData($requiredFields);
|
|
|
|
$API_usergroups->updateUserGroup();
|
|
|
|
} elseif ($API_usergroups->request_method === 'DELETE') {
|
|
|
|
# Delete a user group
|
|
|
|
$API_usergroups->checkPermissions('admin-access-control-user-groups', 'RW');
|
|
|
|
# when called from the frontend will not be forwarding to a url since when its called from the frontend it doesnt need a redirection
|
|
$API_usergroups->return_url = false;
|
|
|
|
$requiredFields = ['user_group_uuid' => ['type' => 'uuid']];
|
|
|
|
$API_usergroups->validateData($requiredFields);
|
|
|
|
# Delete the device from the database.
|
|
$API_usergroups->deleteUsergroup();
|
|
} |