ApiUserrights.php

Go to the documentation of this file.

<?php
 
class ApiUserrights extends ApiBase {
 
    private $mUser = null;
 
    protected function getUserRightsPage() {
        return new UserrightsPage;
    }
 
    protected function getAllGroups() {
        return User::getAllGroups();
    }
 
    public function execute() {
        $pUser = $this->getUser();
 
        // Deny if the user is blocked and doesn't have the full 'userrights' permission.
        // This matches what Special:UserRights does for the web UI.
        if ( $pUser->isBlocked() && !$pUser->isAllowed( 'userrights' ) ) {
            $this->dieBlocked( $pUser->getBlock() );
        }
 
        $params = $this->extractRequestParams();
 
        $user = $this->getUrUser( $params );
 
        $form = $this->getUserRightsPage();
        $form->setContext( $this->getContext() );
        $r['user'] = $user->getName();
        $r['userid'] = $user->getId();
        list( $r['added'], $r['removed'] ) = $form->doSaveUserGroups(
            $user, (array)$params['add'],
            (array)$params['remove'], $params['reason']
        );
 
        $result = $this->getResult();
        ApiResult::setIndexedTagName( $r['added'], 'group' );
        ApiResult::setIndexedTagName( $r['removed'], 'group' );
        $result->addValue( null, $this->getModuleName(), $r );
    }
 
    private function getUrUser( array $params ) {
        if ( $this->mUser !== null ) {
            return $this->mUser;
        }
 
        $this->requireOnlyOneParameter( $params, 'user', 'userid' );
 
        $user = isset( $params['user'] ) ? $params['user'] : '#' . $params['userid'];
 
        $form = $this->getUserRightsPage();
        $form->setContext( $this->getContext() );
        $status = $form->fetchUser( $user );
        if ( !$status->isOK() ) {
            $this->dieStatus( $status );
        }
 
        $this->mUser = $status->value;
 
        return $status->value;
    }
 
    public function mustBePosted() {
        return true;
    }
 
    public function isWriteMode() {
        return true;
    }
 
    public function getAllowedParams() {
        return [
            'user' => [
                ApiBase::PARAM_TYPE => 'user',
            ],
            'userid' => [
                ApiBase::PARAM_TYPE => 'integer',
            ],
            'add' => [
                ApiBase::PARAM_TYPE => $this->getAllGroups(),
                ApiBase::PARAM_ISMULTI => true
            ],
            'remove' => [
                ApiBase::PARAM_TYPE => $this->getAllGroups(),
                ApiBase::PARAM_ISMULTI => true
            ],
            'reason' => [
                ApiBase::PARAM_DFLT => ''
            ],
            'token' => [
                // Standard definition automatically inserted
                ApiBase::PARAM_HELP_MSG_APPEND => [ 'api-help-param-token-webui' ],
            ],
        ];
    }
 
    public function needsToken() {
        return 'userrights';
    }
 
    protected function getWebUITokenSalt( array $params ) {
        return $this->getUrUser( $params )->getName();
    }
 
    protected function getExamplesMessages() {
        return [
            'action=userrights&user=FooBot&add=bot&remove=sysop|bureaucrat&token=123ABC'
                => 'apihelp-userrights-example-user',
            'action=userrights&userid=123&add=bot&remove=sysop|bureaucrat&token=123ABC'
                => 'apihelp-userrights-example-userid',
        ];
    }
 
    public function getHelpUrls() {
        return 'https://www.mediawiki.org/wiki/API:User_group_membership';
    }
}