* Get permissions for current user (or all, if admin). */
()
| 442 | * Get permissions for current user (or all, if admin). |
| 443 | */ |
| 444 | public static function getUserPermissions() |
| 445 | { |
| 446 | self::ensureUserCaseMigration(); |
| 447 | global $encryptionKey; |
| 448 | $permissionsFile = USERS_DIR . "userPermissions.json"; |
| 449 | $permissionsArray = []; |
| 450 | |
| 451 | if (file_exists($permissionsFile)) { |
| 452 | $content = file_get_contents($permissionsFile); |
| 453 | $decrypted = decryptData($content, $encryptionKey); |
| 454 | if ($decrypted === false) { |
| 455 | // tolerate legacy plaintext |
| 456 | $permissionsArray = json_decode($content, true); |
| 457 | } else { |
| 458 | $permissionsArray = json_decode($decrypted, true); |
| 459 | } |
| 460 | if (!is_array($permissionsArray)) { |
| 461 | $permissionsArray = []; |
| 462 | } |
| 463 | } |
| 464 | |
| 465 | if (!empty($_SESSION['isAdmin'])) { |
| 466 | return $permissionsArray; |
| 467 | } |
| 468 | |
| 469 | $username = $_SESSION['username'] ?? ''; |
| 470 | foreach ($permissionsArray as $storedUsername => $data) { |
| 471 | if (strcasecmp($storedUsername, $username) === 0) { |
| 472 | return $data; |
| 473 | } |
| 474 | } |
| 475 | |
| 476 | return new \stdClass(); |
| 477 | } |
| 478 | |
| 479 | /** |
| 480 | * Update permissions (encrypted on disk). Skips admins. |
no test coverage detected