Permitted hostname selection for non-admin users

Author: phpipam

app/dashboard/index.php

@@ -11,6 +11,8 @@
 
 # set limit
 $Trap->reset_print_limit (30);
+# set permitted hostnames
+$Trap->set_permitted_hostnames ($User->hostnames);
 # fetch all traps for each
 $all_error_traps = $Trap->fetch_traps (array("emergency", "alert", "critical"));
 

app/host/index.php

@@ -14,6 +14,8 @@
 
 # set limit to 10
 $Trap->reset_print_limit (200);
+# set permitted hostnames
+$Trap->set_permitted_hostnames ($User->hostnames);
 
 # fetch all traps
 if(isset($_GET['page'])) {

app/live/index.php

@@ -11,6 +11,8 @@
 
 # set limit to 10
 $Trap->reset_print_limit (200);
+# set permitted hostnames
+$Trap->set_permitted_hostnames ($User->hostnames);
 
 # fetch all traps
 $traps = $Trap->fetch_traps ("all");

app/search/index.php

@@ -8,6 +8,8 @@
 
 # verify that user is logged in
 $User->check_user_session();
+# set permitted hostnames
+$Trap->set_permitted_hostnames ($User->hostnames);
 
 # fetch all unique hosts
 $unique_hosts = $Trap->fetch_unique_hosts ();

app/settings/item-edit.php

@@ -134,7 +134,7 @@
  // content
  $html[] = "<tr>";
  $html[] = " <td>$f->Field <span class='alert alert-danger'>$required</span></td>";
- $html[] = " <td>".$Table_print->prepare_input_item ($f, $item->{$f->Field})."</td>";
+ $html[] = " <td>".$Table_print->prepare_input_item ($f, $item->{$f->Field}, $unique_hosts)."</td>";
  $html[] = "</tr>";
  }
  }

app/settings/item-submit.php

@@ -44,21 +44,30 @@
  $notification_severities[] = str_replace("notification_severities-", "", $k);
  unset($_POST[$k]);
  }
+ elseif (strpos($k, "hostnames")!==false) {
+ $hostnames[] = str_replace("hostnames-", "", $k);
+ unset($_POST[$k]);
+ }
  }
 
  // join
  $_POST['notification_types'] = implode(";", $notification_types);
  $_POST['notification_severities'] = implode(";", $notification_severities);
+ $_POST['hostnames'] = implode(";", $hostnames);
 
  // empty fix
  if (strlen($_POST['notification_types'])==0) { $_POST['notification_types'] = "none"; }
  if (strlen($_POST['notification_severities'])==0) { $_POST['notification_severities'] = "none"; }
+ if (strlen($_POST['hostnames'])==0) { $_POST['hostnames'] = "all"; }
 
  // password
  if($_POST['action']=="edit" && strlen($_POST['password'])==0) { unset($_POST['password']); }
  elseif ($_POST['auth_method']=="ad") { unset($_POST['password']); }
  elseif (strlen($_POST['password'])<8) { $Result->show("danger", "Invalid password - 8 characters required!", true); }
  else { $_POST['password'] = $User->crypt_user_pass ($_POST['password']); }
+
+ // hostnames
+ if ($_POST['role']=="administrator") { $_POST['hostnames'] = "all"; }
 }
 
 # add

app/settings/user-self-edit-submit.php

@@ -61,7 +61,13 @@
 else { $_POST['password'] = $User->crypt_user_pass ($_POST['password']); }
 
 // no role change
+if(isset($_POST['id'])) { unset($_POST['id']); }
 if(isset($_POST['role'])) { unset($_POST['role']); }
+if(isset($_POST['auth_method'])) { unset($_POST['auth_method']); }
+if(isset($_POST['last_login'])) { unset($_POST['last_login']); }
+if(isset($_POST['last_activity'])) { unset($_POST['last_activity']); }
+if(isset($_POST['username'])) { unset($_POST['username']); }
+if(isset($_POST['hostnames'])) { unset($_POST['hostnames']); }
 
 
 // add action

app/settings/user-self-edit.php

@@ -39,7 +39,7 @@
 // loop
 foreach ($fields_db as $f) {
  // no id
- if(!in_array($f->Field, array("id", "role", "auth_method", "last_login", "last_activity", "username"))) {
+ if(!in_array($f->Field, array("id", "role", "auth_method", "last_login", "last_activity", "username", "hostnames"))) {
  // ignore pass
  if($f->Field=="password") {
  $User->user->{$f->Field} = "";

app/severity/index.php

@@ -11,7 +11,8 @@
 
 # set limit to 10
 $Trap->reset_print_limit (200);
-
+# set permitted hostnames
+$Trap->set_permitted_hostnames ($User->hostnames);
 # strip tags
 $_GET = $User->strip_input_tags ($_GET);
 

db/SCHEMA.sql

@@ -142,6 +142,7 @@ CREATE TABLE `users` (
  `last_login` timestamp NULL DEFAULT NULL,
  `last_activity` timestamp NULL DEFAULT NULL,
  `reload_page` INT(32) NULL DEFAULT '900',
+ `hostnames` text COLLATE utf8_bin NOT NULL,
  PRIMARY KEY (`username`),
  KEY `id` (`id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin;