bugzilla-4intranet/editvalues.cgi

246 lines
7.4 KiB
Perl
Executable File

#!/usr/bin/perl -wT
# The contents of this file are subject to the Mozilla Public
# License Version 1.1 (the "License"); you may not use this file
# except in compliance with the License. You may obtain a copy of
# the License at http://www.mozilla.org/MPL/
#
# Software distributed under the License is distributed on an "AS
# IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
# implied. See the License for the specific language governing
# rights and limitations under the License.
#
# The Original Code is the Bugzilla Bug Tracking System.
#
# Contributor(s): Max Kanat-Alexander <mkanat@bugzilla.org>
# Frédéric Buclin <LpSolit@gmail.com>
# This is a script to edit the values of fields that have drop-down
# or select boxes. It is largely a copy of editmilestones.cgi, but
# with some cleanup.
use strict;
use lib qw(. lib);
use Bugzilla;
use Bugzilla::Util;
use Bugzilla::Error;
use Bugzilla::Constants;
use Bugzilla::Token;
use Bugzilla::Field;
use Bugzilla::Field::Choice;
###############
# Subroutines #
###############
sub display_field_values {
my $vars = shift;
my $template = Bugzilla->template;
$vars->{'values'} = $vars->{'field'}->legal_values('include_disabled');
$template->process("admin/fieldvalues/list.html.tmpl", $vars)
|| ThrowTemplateError($template->error());
exit;
}
######################################################################
# Main Body Execution
######################################################################
# require the user to have logged in
Bugzilla->login(LOGIN_REQUIRED);
my $dbh = Bugzilla->dbh;
my $cgi = Bugzilla->cgi;
my $template = Bugzilla->template;
my $vars = {};
# Replace this entry by separate entries in templates when
# the documentation about legal values becomes bigger.
$vars->{'doc_section'} = 'edit-values.html';
Bugzilla->user->in_group('editvalues') || ThrowUserError('auth_failure', {
group => 'editvalues',
action => 'edit',
object => 'field_values',
});
#
# often-used variables
#
my $action = trim($cgi->param('action') || '');
my $token = $cgi->param('token');
# Fields listed here must not be edited from this interface.
my @non_editable_fields = qw(product);
my %block_list = map { $_ => 1 } @non_editable_fields;
#
# field = '' -> Show nice list of fields
#
if (!$cgi->param('field')) {
my @field_list = grep { !$block_list{$_->name} }
Bugzilla->get_fields({ is_select => 1 });
$vars->{'fields'} = \@field_list;
$template->process("admin/fieldvalues/select-field.html.tmpl", $vars)
|| ThrowTemplateError($template->error());
exit;
}
# At this point, the field must be defined.
my $field = Bugzilla::Field->check($cgi->param('field'));
if (!$field->is_select || $block_list{$field->name}) {
ThrowUserError('fieldname_invalid', { field => $field });
}
$vars->{'field'} = $field;
#
# action='' -> Show nice list of values.
#
display_field_values($vars) unless $action;
#
# action='add' -> show form for adding new field value.
# (next action will be 'new')
#
if ($action eq 'add') {
$vars->{'token'} = issue_session_token('add_field_value');
$template->process("admin/fieldvalues/create.html.tmpl", $vars)
|| ThrowTemplateError($template->error());
exit;
}
#
# action='new' -> add field value entered in the 'action=add' screen
#
if ($action eq 'new') {
check_token_data($token, 'add_field_value');
my $type = Bugzilla::Field::Choice->type($field);
# Some types have additional parameters inside REQUIRED_CREATE_FIELDS
my $created_value = $type->create({
map { $_ => scalar $cgi->param($_) } grep { defined $cgi->param($_) } ($type->DB_COLUMNS, $type->REQUIRED_CREATE_FIELDS)
});
$created_value->set_visibility_values([ $cgi->param('visibility_value_id') ]);
delete_token($token);
$vars->{'message'} = 'field_value_created';
$vars->{'value'} = $created_value;
display_field_values($vars);
}
if ($action eq 'control_list') {
die('This field has no value field') unless $field->custom && $field->value_field;
my $step = $cgi->param('step') || 0;
my $visibility_value_id = $cgi->param('visibility_value_id');
my $values = [ $cgi->param('values') ];
my $default_value_ids = [ $cgi->param('default_value_ids') ];
my $need_token = 0;
$vars->{'visibility_value_id'} = -1;
if ($visibility_value_id) {
$vars->{'visibility_value_id'} = $visibility_value_id;
my %values = map { $_->{'id'} => $_ } @{$field->{'value_field'}->legal_values()};
$vars->{'field_value'} = $values{$visibility_value_id};
$step++ unless $token;
$need_token = 1;
if ($token) {
check_token_data($token, "edit_control_list");
$field->update_controlled_values($values, $visibility_value_id, $default_value_ids);
$step++;
$need_token = 0;
delete_token($token);
}
}
$vars->{'step'} = $step;
$vars->{'token'} = issue_session_token("edit_control_list") if $need_token;
$template->process("admin/fieldvalues/control-list.html.tmpl",
$vars) || ThrowTemplateError($template->error());
exit;
}
# After this, we always have a value
my $value = Bugzilla::Field::Choice->type($field)->check($cgi->param('value'));
$vars->{'value'} = $value;
#
# action='del' -> ask if user really wants to delete
# (next action would be 'delete')
#
if ($action eq 'del') {
# If the value cannot be deleted, throw an error.
if ($value->is_static) {
ThrowUserError('fieldvalue_not_deletable', $vars);
}
$vars->{'token'} = issue_session_token('delete_field_value');
$template->process("admin/fieldvalues/confirm-delete.html.tmpl", $vars)
|| ThrowTemplateError($template->error());
exit;
}
#
# action='delete' -> really delete the field value
#
if ($action eq 'delete') {
check_token_data($token, 'delete_field_value');
$value->remove_from_db();
delete_token($token);
$vars->{'message'} = 'field_value_deleted';
$vars->{'no_edit_link'} = 1;
display_field_values($vars);
}
#
# action='edit' -> present the edit-value form
# (next action would be 'update')
#
if ($action eq 'edit') {
$vars->{'token'} = issue_session_token('edit_field_value');
$template->process("admin/fieldvalues/edit.html.tmpl", $vars)
|| ThrowTemplateError($template->error());
exit;
}
#
# action='update' -> update the field value
#
if ($action eq 'update') {
check_token_data($token, 'edit_field_value');
$vars->{'value_old'} = $value->name;
my $visibility_values;
if (!($value->is_static || $value->is_default)) {
$value->set_is_active($cgi->param('is_active'));
$value->set_name($cgi->param('value_new'));
$visibility_values = [ $cgi->param('visibility_value_id') ];
}
if ($value->can('set_timetracking')) {
$value->set_timetracking($cgi->param('timetracking') ? 1 : 0);
}
$value->set_sortkey($cgi->param('sortkey'));
$vars->{'changes'} = $value->update();
my $ch = $value->set_visibility_values($visibility_values);
$vars->{'changes'}->{'visibility_values'} = $ch if $visibility_values && $ch;
delete_token($token);
$vars->{'message'} = 'field_value_updated';
display_field_values($vars);
}
#
# No valid action found
#
# We can't get here without $field being defined --
# See the unless($field) block at the top.
ThrowUserError('no_valid_action', { field => $field } );