1 files changed, 102 insertions, 0 deletions
diff --git a/platform/www/lib/plugins/acl/remote.php b/platform/www/lib/plugins/acl/remote.php
new file mode 100644
index 0000000..8d19add
--- /dev/null
+++ b/platform/www/lib/plugins/acl/remote.php
@@ -0,0 +1,102 @@
+<?php
+
+use dokuwiki\Remote\AccessDeniedException;
+
+/**
+ * Class remote_plugin_acl
+ */
+class remote_plugin_acl extends DokuWiki_Remote_Plugin
+{
+
+    /**
+     * Returns details about the remote plugin methods
+     *
+     * @return array Information about all provided methods. {@see dokuwiki\Remote\RemoteAPI}
+     */
+    public function _getMethods()
+    {
+        return array(
+            'listAcls' => array(
+                'args' => array(),
+                'return' => 'Array of ACLs {scope, user, permission}',
+                'name' => 'listAcls',
+                'doc' => 'Get the list of all ACLs',
+            ),'addAcl' => array(
+                'args' => array('string','string','int'),
+                'return' => 'int',
+                'name' => 'addAcl',
+                'doc' => 'Adds a new ACL rule.'
+            ), 'delAcl' => array(
+                'args' => array('string','string'),
+                'return' => 'int',
+                'name' => 'delAcl',
+                'doc' => 'Delete an existing ACL rule.'
+            ),
+        );
+    }
+
+    /**
+     * List all ACL config entries
+     *
+     * @throws AccessDeniedException
+     * @return dictionary {Scope: ACL}, where ACL = dictionnary {user/group: permissions_int}
+     */
+    public function listAcls()
+    {
+        if (!auth_isadmin()) {
+            throw new AccessDeniedException(
+                'You are not allowed to access ACLs, superuser permission is required',
+                114
+            );
+        }
+        /** @var admin_plugin_acl $apa */
+        $apa = plugin_load('admin', 'acl');
+        $apa->initAclConfig();
+        return $apa->acl;
+    }
+
+    /**
+     * Add a new entry to ACL config
+     *
+     * @param string $scope
+     * @param string $user
+     * @param int    $level see also inc/auth.php
+     * @throws AccessDeniedException
+     * @return bool
+     */
+    public function addAcl($scope, $user, $level)
+    {
+        if (!auth_isadmin()) {
+            throw new AccessDeniedException(
+                'You are not allowed to access ACLs, superuser permission is required',
+                114
+            );
+        }
+
+        /** @var admin_plugin_acl $apa */
+        $apa = plugin_load('admin', 'acl');
+        return $apa->addOrUpdateACL($scope, $user, $level);
+    }
+
+    /**
+     * Remove an entry from ACL config
+     *
+     * @param string $scope
+     * @param string $user
+     * @throws AccessDeniedException
+     * @return bool
+     */
+    public function delAcl($scope, $user)
+    {
+        if (!auth_isadmin()) {
+            throw new AccessDeniedException(
+                'You are not allowed to access ACLs, superuser permission is required',
+                114
+            );
+        }
+
+        /** @var admin_plugin_acl $apa */
+        $apa = plugin_load('admin', 'acl');
+        return $apa->deleteACL($scope, $user);
+    }
+}