Added the per-user 'manage contacts' permission.

[cocanwiki.git] / scripts / page.ml

diff --git a/scripts/page.ml b/scripts/page.ml
index 6c7bb75..70c25b3 100644 (file)
--- a/scripts/page.ml
+++ b/scripts/page.ml
@@ -1,7 +1,22 @@
-(* COCANWIKI scripts.
+(* COCANWIKI - a wiki written in Objective CAML.
  * Written by Richard W.M. Jones <rich@merjis.com>.
  * Copyright (C) 2004 Merjis Ltd.
- * $Id: page.ml,v 1.3 2004/09/07 14:58:34 rich Exp $
+ * $Id: page.ml,v 1.12 2004/09/17 15:24:54 rich Exp $
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; see the file COPYING.  If not, write to
+ * the Free Software Foundation, Inc., 59 Temple Place - Suite 330,
+ * Boston, MA 02111-1307, USA.
  *)
 
 open Apache
@@ -16,9 +31,6 @@ open Cocanwiki_template
 open Cocanwiki_ok
 open Cocanwiki_date
 
-let template_page = get_template "page.html"
-let template_404  = get_template "page_404.html"
-
 (* Maximum level of redirection. *)
 let max_redirect = 4
 
@@ -26,7 +38,10 @@ type fp_status = FPOK of int * string * string * Dbi.datetime * bool
               | FPRedirect of string
               | FPNotFound
 
-let run r (q : cgi) (dbh : Dbi.connection) (hostid, _, _) _ =
+let run r (q : cgi) (dbh : Dbi.connection) hostid {edit_anon=edit_anon} user =
+  let template_page = get_template dbh hostid "page.html" in
+  let template_404  = get_template dbh hostid "page_404.html" in
+
   let page = q#param "page" in
   let page = if page = "" then "index" else page in
 
@@ -39,6 +54,11 @@ let run r (q : cgi) (dbh : Dbi.connection) (hostid, _, _) _ =
       | [ `Bool has_host_css ] -> has_host_css
       | _ -> assert false in
 
+  (* Can the user edit?  Manage users?  etc. *)
+  let can_edit = can_edit edit_anon user in
+  let can_manage_users = can_manage_users user in
+  let can_manage_contacts = can_manage_contacts user in
+
   (* This code generates ordinary pages. *)
   let make_page title description pageid last_modified_date has_page_css
       version page page' =
@@ -47,8 +67,6 @@ let run r (q : cgi) (dbh : Dbi.connection) (hostid, _, _) _ =
     t#set "description" description;
     t#set "pageid" (string_of_int pageid);
     t#set "last_modified_date" (printable_date last_modified_date);
-    t#set "cocanwiki_package" Cocanwiki_version.package;
-    t#set "cocanwiki_version" Cocanwiki_version.version;
 
     if page <> page' then (* redirection *) (
       t#set "page" page';
@@ -62,6 +80,10 @@ let run r (q : cgi) (dbh : Dbi.connection) (hostid, _, _) _ =
     t#conditional "has_host_css" has_host_css;
     t#conditional "has_page_css" has_page_css;
 
+    t#conditional "can_edit" can_edit;
+    t#conditional "can_manage_users" can_manage_users;
+    t#conditional "can_manage_contacts" can_manage_contacts;
+
     (* Pull out the sections in this page. *)
     let sth = dbh#prepare_cached
                "select ordering, sectionname, content, divname
@@ -97,6 +119,14 @@ let run r (q : cgi) (dbh : Dbi.connection) (hostid, _, _) _ =
           t#conditional "is_old_version" true;
           t#set "old_version" (string_of_int pageid));
 
+    (* Login status. *)
+    (match user with
+        Anonymous ->
+          t#conditional "user_logged_in" false
+       | User (_, username, _) ->
+          t#conditional "user_logged_in" true;
+          t#set "username" username);
+
     q#template t
   in
 
@@ -113,7 +143,13 @@ let run r (q : cgi) (dbh : Dbi.connection) (hostid, _, _) _ =
              ('a'..'z' | 'A'..'Z' | '0'..'9') as c -> c
            | _ -> ' ') page in
 
-    template_404#set "search_terms" search_terms;
+    t#set "search_terms" search_terms;
+
+    t#conditional "has_host_css" has_host_css;
+
+    t#conditional "can_edit" can_edit;
+    t#conditional "can_manage_users" can_manage_users;
+    t#conditional "can_manage_contacts" can_manage_contacts;
 
     q#template t
   in
@@ -186,9 +222,13 @@ let run r (q : cgi) (dbh : Dbi.connection) (hostid, _, _) _ =
   in
 
   (* Here we deal with the complex business of redirects and versions. *)
-  let allow_redirect = not (q#param_true "no_redirect") in
-  let version =
-    try Some (int_of_string (q#param "version")) with Not_found -> None in
+  (* Only allow the no_redirect and version syntax for editors. *)
+  let allow_redirect, version =
+    if can_edit then (
+      not (q#param_true "no_redirect"),
+      try Some (int_of_string (q#param "version")) with Not_found -> None
+    ) else
+      (true, None) in
 
   let rec loop page' i =
     if i > max_redirect then (