41 lines
1.5 KiB
PHP
41 lines
1.5 KiB
PHP
<?php
|
|
|
|
use api\classes\API_permissions;
|
|
use api\classes\API_usergroups;
|
|
|
|
session_start();
|
|
require_once $_SERVER['DOCUMENT_ROOT'] . '/api/classes/API_permissions.php';
|
|
require_once $_SERVER['DOCUMENT_ROOT'] . '/api/classes/API_usergroups.php';
|
|
|
|
$API_permissions = new API_permissions();
|
|
$API_usergroups = new API_usergroups();
|
|
|
|
if ($API_permissions->request_method === 'GET') {
|
|
# to be made, get all the access-rights and implement the builder
|
|
|
|
} elseif ($API_permissions->request_method === 'PUT') {
|
|
|
|
# when called from the frontend will not be forwarding to a url since when its called from the frontend it doesnt need a redirection
|
|
$API_permissions->return_url = false;
|
|
|
|
$API_permissions->checkPermissions('admin-access-control-permissions', 'RW');
|
|
|
|
$requiredFields = [
|
|
'permission_uuid' => ['type' => 'uuid'],
|
|
'user_group_uuid' => ['type' => 'uuid'],
|
|
'permission_value' => ['type' => 'enum', 'values' => ['NA', 'RO', 'RW']],
|
|
];
|
|
|
|
$API_permissions->validateData($requiredFields);
|
|
|
|
# check if the permission exists
|
|
$_GET['builder'] = [1 => ['where' => [0 => 'permission_uuid', 1 => $API_permissions->data['permission_uuid']]]];
|
|
$API_permissions->getPermission();
|
|
|
|
# check if the user_group_uuid exists
|
|
$_GET['builder'] = [1 => ['where' => [0 => 'user_group_uuid', 1 => $API_permissions->data['user_group_uuid']]]];
|
|
$API_usergroups->getUsergroup();
|
|
|
|
# Update the permission
|
|
$API_permissions->updateAccessRights();
|
|
} |