Release 0.8.1

SVN:0.8.1[195]

tags/0.7.1/addons/userrights/userrightsmatrix.class.inc.php

@@ -0,0 +1,410 @@
+<?php
+
+/**
+ * UserRightsMatrix
+ * User management Module 
+ *
+ * @package     iTopORM
+ * @author      Romain Quetiez <romainquetiez@yahoo.fr>
+ * @author      Denis Flaven <denisflave@free.fr>
+ * @license     http://www.opensource.org/licenses/lgpl-license.php LGPL
+ * @link        www.itop.com
+ * @since       1.0
+ * @version     1.1.1.1 $
+ */
+
+
+class UserRightsMatrixUsers extends DBObject
+{
+	public static function Init()
+	{
+		$aParams = array
+		(
+			"category" => "addon/userrights",
+			"name" => "user",
+			"description" => "users and credentials",
+			"key_type" => "autoincrement",
+			"key_label" => "",
+			"name_attcode" => "login",
+			"state_attcode" => "",
+			"reconc_keys" => array(),
+			"db_table" => "priv_ur_matrixusers",
+			"db_key_field" => "id",
+			"db_finalclass_field" => "",
+		);
+		MetaModel::Init_Params($aParams);
+		//MetaModel::Init_InheritAttributes();
+		MetaModel::Init_AddAttribute(new AttributeInteger("userid", array("label"=>"User id", "description"=>"User identifier (depends on the business model)", "allowed_values"=>null, "sql"=>"userid", "default_value"=>0, "is_null_allowed"=>false, "depends_on"=>array())));
+		MetaModel::Init_AddAttribute(new AttributeString("login", array("label"=>"login", "description"=>"user identification string", "allowed_values"=>null, "sql"=>"login", "default_value"=>null, "is_null_allowed"=>false, "depends_on"=>array())));
+		MetaModel::Init_AddAttribute(new AttributeString("password", array("label"=>"password", "description"=>"user authentication string", "allowed_values"=>null, "sql"=>"pwd", "default_value"=>null, "is_null_allowed"=>false, "depends_on"=>array())));
+
+		//MetaModel::Init_InheritFilters();
+		MetaModel::Init_AddFilterFromAttribute("userid");
+		MetaModel::Init_AddFilterFromAttribute("login");
+	}
+}
+
+class UserRightsMatrixClassGrant extends DBObject
+{
+	public static function Init()
+	{
+		$aParams = array
+		(
+			"category" => "addon/userrights",
+			"name" => "class_permission",
+			"description" => "permissions on classes",
+			"key_type" => "autoincrement",
+			"key_label" => "",
+			"name_attcode" => "",
+			"state_attcode" => "",
+			"reconc_keys" => array(),
+			"db_table" => "priv_ur_matrixclasses",
+			"db_key_field" => "id",
+			"db_finalclass_field" => "",
+		);
+		MetaModel::Init_Params($aParams);
+		//MetaModel::Init_InheritAttributes();
+		MetaModel::Init_AddAttribute(new AttributeExternalKey("userid", array("targetclass"=>"UserRightsMatrixUsers", "jointype"=> "", "label"=>"user", "description"=>"user account", "allowed_values"=>null, "sql"=>"userid", "is_null_allowed"=>false, "depends_on"=>array())));
+		MetaModel::Init_AddAttribute(new AttributeExternalField("login", array("label"=>"Login", "description"=>"Login", "allowed_values"=>null, "extkey_attcode"=> 'userid', "target_attcode"=>"login")));
+		MetaModel::Init_AddAttribute(new AttributeString("class", array("label"=>"class", "description"=>"class name", "allowed_values"=>null, "sql"=>"class", "default_value"=>null, "is_null_allowed"=>false, "depends_on"=>array())));
+
+		MetaModel::Init_AddAttribute(new AttributeString("action", array("label"=>"action", "description"=>"operations to perform on the given class", "allowed_values"=>null, "sql"=>"action", "default_value"=>"", "is_null_allowed"=>false, "depends_on"=>array())));
+		MetaModel::Init_AddAttribute(new AttributeEnum("permission", array("label"=>"permission", "description"=>"allowed or not allowed?", "allowed_values"=>new ValueSetEnum('yes,no'), "sql"=>"permission", "default_value"=>"yes", "is_null_allowed"=>false, "depends_on"=>array())));
+
+		//MetaModel::Init_InheritFilters();
+		MetaModel::Init_AddFilterFromAttribute("userid");
+		MetaModel::Init_AddFilterFromAttribute("login");
+		MetaModel::Init_AddFilterFromAttribute("class");
+		MetaModel::Init_AddFilterFromAttribute("action");
+	}
+}
+
+class UserRightsMatrixClassStimulusGrant extends DBObject
+{
+	public static function Init()
+	{
+		$aParams = array
+		(
+			"category" => "addon/userrights",
+			"name" => "stimulus_permission",
+			"description" => "permissions on stimilus in the life cycle of the object",
+			"key_type" => "autoincrement",
+			"key_label" => "",
+			"name_attcode" => "",
+			"state_attcode" => "",
+			"reconc_keys" => array(),
+			"db_table" => "priv_ur_matrixclassesstimulus",
+			"db_key_field" => "id",
+			"db_finalclass_field" => "",
+		);
+		MetaModel::Init_Params($aParams);
+		//MetaModel::Init_InheritAttributes();
+		MetaModel::Init_AddAttribute(new AttributeExternalKey("userid", array("targetclass"=>"UserRightsMatrixUsers", "jointype"=> "", "label"=>"user", "description"=>"user account", "allowed_values"=>null, "sql"=>"userid", "is_null_allowed"=>false, "depends_on"=>array())));
+		MetaModel::Init_AddAttribute(new AttributeExternalField("login", array("label"=>"Login", "description"=>"Login", "allowed_values"=>null, "extkey_attcode"=> 'userid', "target_attcode"=>"login")));
+		MetaModel::Init_AddAttribute(new AttributeString("class", array("label"=>"class", "description"=>"class name", "allowed_values"=>null, "sql"=>"class", "default_value"=>null, "is_null_allowed"=>false, "depends_on"=>array())));
+
+		MetaModel::Init_AddAttribute(new AttributeString("stimulus", array("label"=>"action", "description"=>"operations to perform on the given class", "allowed_values"=>null, "sql"=>"action", "default_value"=>"", "is_null_allowed"=>false, "depends_on"=>array())));
+		MetaModel::Init_AddAttribute(new AttributeEnum("permission", array("label"=>"permission", "description"=>"allowed or not allowed?", "allowed_values"=>new ValueSetEnum('yes,no'), "sql"=>"permission", "default_value"=>"yes", "is_null_allowed"=>false, "depends_on"=>array())));
+
+		//MetaModel::Init_InheritFilters();
+		MetaModel::Init_AddFilterFromAttribute("userid");
+		MetaModel::Init_AddFilterFromAttribute("login");
+		MetaModel::Init_AddFilterFromAttribute("class");
+		MetaModel::Init_AddFilterFromAttribute("stimulus");
+	}
+}
+
+class UserRightsMatrixAttributeGrant extends DBObject
+{
+	public static function Init()
+	{
+		$aParams = array
+		(
+			"category" => "addon/userrights",
+			"name" => "attribute_permission",
+			"description" => "permissions at the attributes level",
+			"key_type" => "autoincrement",
+			"key_label" => "",
+			"name_attcode" => "",
+			"state_attcode" => "",
+			"reconc_keys" => array(),
+			"db_table" => "priv_ur_matrixattributes",
+			"db_key_field" => "id",
+			"db_finalclass_field" => "",
+		);
+		MetaModel::Init_Params($aParams);
+		//MetaModel::Init_InheritAttributes();
+		MetaModel::Init_AddAttribute(new AttributeExternalKey("userid", array("targetclass"=>"UserRightsMatrixUsers", "jointype"=> "", "label"=>"user", "description"=>"user account", "allowed_values"=>null, "sql"=>"userid", "is_null_allowed"=>false, "depends_on"=>array())));
+		MetaModel::Init_AddAttribute(new AttributeExternalField("login", array("label"=>"Login", "description"=>"Login", "allowed_values"=>null, "extkey_attcode"=> 'userid', "target_attcode"=>"login")));
+		MetaModel::Init_AddAttribute(new AttributeString("class", array("label"=>"class", "description"=>"class name", "allowed_values"=>null, "sql"=>"class", "default_value"=>null, "is_null_allowed"=>false, "depends_on"=>array())));
+		MetaModel::Init_AddAttribute(new AttributeString("attcode", array("label"=>"attribute", "description"=>"attribute code", "allowed_values"=>null, "sql"=>"attcode", "default_value"=>null, "is_null_allowed"=>false, "depends_on"=>array())));
+
+		MetaModel::Init_AddAttribute(new AttributeString("action", array("label"=>"action", "description"=>"operations to perform on the given class", "allowed_values"=>null, "sql"=>"action", "default_value"=>"", "is_null_allowed"=>false, "depends_on"=>array())));
+		MetaModel::Init_AddAttribute(new AttributeEnum("permission", array("label"=>"permission", "description"=>"allowed or not allowed?", "allowed_values"=>new ValueSetEnum('yes,no'), "sql"=>"permission", "default_value"=>"yes", "is_null_allowed"=>false, "depends_on"=>array())));
+
+		//MetaModel::Init_InheritFilters();
+		MetaModel::Init_AddFilterFromAttribute("userid");
+		MetaModel::Init_AddFilterFromAttribute("login");
+		MetaModel::Init_AddFilterFromAttribute("class");
+		MetaModel::Init_AddFilterFromAttribute("attcode");
+		MetaModel::Init_AddFilterFromAttribute("action");
+	}
+}
+
+
+
+
+class UserRightsMatrix extends UserRightsAddOnAPI
+{
+	static public $m_aActionCodes = array(
+		UR_ACTION_READ => 'read',
+		UR_ACTION_MODIFY => 'modify',
+		UR_ACTION_DELETE => 'delete',
+		UR_ACTION_BULK_READ => 'bulk read',
+		UR_ACTION_BULK_MODIFY => 'bulk modify',
+		UR_ACTION_BULK_DELETE => 'bulk delete',
+	);
+
+	// Installation: create the very first user
+	public function CreateAdministrator($sAdminUser, $sAdminPwd)
+	{
+		// Maybe we should check that no other user with userid == 0 exists
+		$oUser = new UserRightsMatrixUsers();
+		$oUser->Set('login', $sAdminUser);
+		$oUser->Set('password', $sAdminPwd);
+		$oUser->Set('userid', 1); // one is for root !
+		$oUser->DBInsert();
+		$this->SetupUser($oUser, true);
+		return true;
+	}
+
+	public function Setup()
+	{
+		// Users must be added manually
+		// This procedure will then update the matrix when a new user is found or a new class/attribute appears
+		$oUserSet = new DBObjectSet(DBObjectSearch::FromSibuSQL("UserRightsMatrixUsers"));
+		while ($oUser = $oUserSet->Fetch())
+		{
+			$this->SetupUser($oUser);
+		}
+		return true;
+	}
+
+	protected function SetupUser($oUser, $bNewUser = false)
+	{
+		$iUserId = $oUser->GetKey();
+
+		foreach(array('bizmodel', 'application', 'gui', 'core/cmdb') as $sCategory)
+		{
+			foreach (MetaModel::GetClasses($sCategory) as $sClass)
+			{
+				foreach (self::$m_aActionCodes as $iActionCode => $sAction)
+				{
+					if ($bNewUser)
+					{
+						$bAddCell = true;
+					}
+					else
+					{
+						$oSet = new DBObjectSet(DBObjectSearch::FromOQL("SELECT UserRightsMatrixClassGrant WHERE class = '$sClass' AND action = '$sAction' AND userid = $iUserId"));
+						$bAddCell = ($oSet->Count() < 1);
+					}
+					if ($bAddCell)
+					{
+						// Create a new entry
+						$oMyClassGrant = MetaModel::NewObject("UserRightsMatrixClassGrant");
+						$oMyClassGrant->Set("userid", $oUser->GetKey());
+						$oMyClassGrant->Set("class", $sClass);
+						$oMyClassGrant->Set("action", $sAction);
+						$oMyClassGrant->Set("permission", "yes");
+						$iId = $oMyClassGrant->DBInsert();
+					}
+				}
+				foreach (MetaModel::EnumStimuli($sClass) as $sStimulusCode => $oStimulus)
+				{
+					if ($bNewUser)
+					{
+						$bAddCell = true;
+					}
+					else
+					{
+						$oSet = new DBObjectSet(DBObjectSearch::FromOQL("SELECT UserRightsMatrixClassStimulusGrant WHERE class = '$sClass' AND stimulus = '$sStimulusCode' AND userid = $iUserId"));
+						$bAddCell = ($oSet->Count() < 1);
+					}
+					if ($bAddCell)
+					{
+						// Create a new entry
+						$oMyClassGrant = MetaModel::NewObject("UserRightsMatrixClassStimulusGrant");
+						$oMyClassGrant->Set("userid", $oUser->GetKey());
+						$oMyClassGrant->Set("class", $sClass);
+						$oMyClassGrant->Set("stimulus", $sStimulusCode);
+						$oMyClassGrant->Set("permission", "yes");
+						$iId = $oMyClassGrant->DBInsert();
+					}
+				}
+				foreach (MetaModel::GetAttributesList($sClass) as $sAttCode)
+				{
+					if ($bNewUser)
+					{
+						$bAddCell = true;
+					}
+					else
+					{
+						$oSet = new DBObjectSet(DBObjectSearch::FromOQL("SELECT UserRightsMatrixAttributeGrant WHERE class = '$sClass' AND attcode = '$sAttCode' AND userid = $iUserId"));
+						$bAddCell = ($oSet->Count() < 1);
+					}
+					if ($bAddCell)
+					{
+						foreach (array('read', 'modify') as $sAction)
+						{
+							// Create a new entry
+							$oMyAttGrant = MetaModel::NewObject("UserRightsMatrixAttributeGrant");
+							$oMyAttGrant->Set("userid", $oUser->GetKey());
+							$oMyAttGrant->Set("class", $sClass);
+							$oMyAttGrant->Set("attcode", $sAttCode);
+							$oMyAttGrant->Set("action", $sAction);
+							$oMyAttGrant->Set("permission", "yes");
+							$iId = $oMyAttGrant->DBInsert();
+						}
+					}
+				}
+			}
+		}
+		// Create the "My Bookmarks" menu item (parent_id = 0, rank = 6)
+		if ($bNewUser)
+		{
+			$bAddMenu = true;
+		}
+		else
+		{
+			$oSet = new DBObjectSet(DBObjectSearch::FromOQL("SELECT menuNode WHERE type = 'user' AND parent_id = 0 AND user_id = $iUserId"));
+			$bAddMenu = ($oSet->Count() < 1);
+		}
+		if ($bAddMenu)
+		{
+			$oMenu = MetaModel::NewObject('menuNode');
+			$oMenu->Set('type', 'user');
+			$oMenu->Set('parent_id', 0);	// It's a toplevel entry
+			$oMenu->Set('rank', 6);			// Located just above the Admin Tools section (=7)
+			$oMenu->Set('name', 'My Bookmarks');
+			$oMenu->Set('label', 'My Favorite Items');
+			$oMenu->Set('hyperlink', 'UI.php');
+			$oMenu->Set('template', '<p></p><p></p><p style="text-align:center; font-family:Georgia, Times, serif; font-size:32px;">My bookmarks</p><p style="text-align:center; font-family:Georgia, Times, serif; font-size:14px;"><i>This section contains my most favorite search results</i></p>');
+			$oMenu->Set('user_id', $iUserId);
+			$oMenu->DBInsert();
+		}
+	}
+
+
+	public function Init()
+	{
+		// Could be loaded in a shared memory (?)
+		return true;
+	}
+
+	public function CheckCredentials($sUserName, $sPassword)
+	{
+		$oSet = new DBObjectSet(DBObjectSearch::FromOQL("SELECT UserRightsMatrixUsers WHERE login = '$sUserName'"));
+		if ($oSet->Count() < 1)
+		{
+		// todo: throw an exception?
+			return false;
+		}
+
+		$oLogin = $oSet->Fetch();
+		if ($oLogin->Get('password') == $sPassword)
+		{
+			return true;
+		}
+		// todo: throw an exception?
+		return false;
+	}
+
+	public function GetFilter($sUserName, $sClass)
+	{
+		$oNullFilter  = new DBObjectSearch($sClass);
+		return $oNullFilter;
+	}
+
+	public function IsActionAllowed($sUserName, $sClass, $iActionCode, dbObjectSet $aInstances)
+	{
+		if (!array_key_exists($iActionCode, self::$m_aActionCodes))
+		{
+			return UR_ALLOWED_NO;
+		}
+		$sAction = self::$m_aActionCodes[$iActionCode];
+
+		$oSet = new DBObjectSet(DBObjectSearch::FromOQL("SELECT UserRightsMatrixClassGrant WHERE class = '$sClass' AND action = '$sAction' AND login = '$sUserName'"));
+		if ($oSet->Count() < 1)
+		{
+			return UR_ALLOWED_NO;
+		}
+
+		$oGrantRecord = $oSet->Fetch();
+		switch ($oGrantRecord->Get('permission'))
+		{
+			case 'yes':
+				$iRetCode = UR_ALLOWED_YES;
+				break;
+			case 'no':
+			default:
+				$iRetCode = UR_ALLOWED_NO;
+				break;
+		}
+		return $iRetCode;
+	}
+
+	public function IsActionAllowedOnAttribute($sUserName, $sClass, $sAttCode, $iActionCode, dbObjectSet $aInstances)
+	{
+		if (!array_key_exists($iActionCode, self::$m_aActionCodes))
+		{
+			return UR_ALLOWED_NO;
+		}
+		$sAction = self::$m_aActionCodes[$iActionCode];
+
+		$oSet = new DBObjectSet(DBObjectSearch::FromOQL("SELECT UserRightsMatrixAttributeGrant WHERE UserRightsMatrixAttributeGrant.class = '$sClass' AND UserRightsMatrixAttributeGrant.attcode = '$sAttCode' AND UserRightsMatrixAttributeGrant.action = '$sAction' AND UserRightsMatrixAttributeGrant.login = '$sUserName'"));
+		if ($oSet->Count() < 1)
+		{
+			return UR_ALLOWED_NO;
+		}
+
+		$oGrantRecord = $oSet->Fetch();
+		switch ($oGrantRecord->Get('permission'))
+		{
+			case 'yes':
+				$iRetCode = UR_ALLOWED_YES;
+				break;
+			case 'no':
+			default:
+				$iRetCode = UR_ALLOWED_NO;
+				break;
+		}
+		return $iRetCode;
+	}
+
+	public function IsStimulusAllowed($sUserName, $sClass, $sStimulusCode, dbObjectSet $aInstances)
+	{
+		$oSet = new DBObjectSet(DBObjectSearch::FromOQL("SELECT UserRightsMatrixClassStimulusGrant WHERE class = '$sClass' AND stimulus = '$sStimulusCode' AND login = '$sUserName'"));
+		if ($oSet->Count() < 1)
+		{
+			return UR_ALLOWED_NO;
+		}
+
+		$oGrantRecord = $oSet->Fetch();
+		switch ($oGrantRecord->Get('permission'))
+		{
+			case 'yes':
+				$iRetCode = UR_ALLOWED_YES;
+				break;
+			case 'no':
+			default:
+				$iRetCode = UR_ALLOWED_NO;
+				break;
+		}
+		return $iRetCode;
+	}
+}
+
+UserRights::SelectModule('UserRightsMatrix');
+
+?>

tags/0.7.1/application/displayblock.class.inc.php

@@ -0,0 +1,682 @@
+<?php
+require_once('../application/webpage.class.inc.php');
+require_once('../application/utils.inc.php');
+require_once('../core/userrights.class.inc.php');
+/**
+ * Helper class to manage 'blocks' of HTML pieces that are parts of a page and contain some list of cmdb objects
+ *
+ * Each block is actually rendered as a <div></div> tag that can be rendered synchronously
+ * or as a piece of Javascript/JQuery/Ajax that will get its content from another page (ajax.render.php).
+ * The list of cmdbObjects to be displayed into the block is defined by a filter
+ * Right now the type of display is either: list, count, bare_details, details, csv, modify or search
+ * - list produces a table listing the objects
+ * - count produces a paragraphs with a sentence saying 'cont' objects found
+ * - bare_details displays just the details of the attributes of the object  (best if only one)
+ * - details display the full details of each object found using its template (best if only one)
+ * - csv displays a textarea with the CSV export of the list of objects 
+ * - modify displays the form to modify an object (best if only one)
+ * - search displays a search form with the criteria of the filter set
+ */
+class DisplayBlock
+{
+	const TAG_BLOCK = 'itopblock';
+	protected $m_oFilter;
+	protected $m_sStyle;
+	protected $m_bAsynchronous;
+	protected $m_aParams;
+	protected $m_oSet;
+	
+	public function __construct(DBObjectSearch $oFilter, $sStyle = 'list', $bAsynchronous = false, $aParams = array(), $oSet = null)
+	{
+		$this->m_oFilter = $oFilter;
+		$this->m_sStyle = $sStyle;
+		$this->m_bAsynchronous = $bAsynchronous;
+		$this->m_aParams = $aParams;
+		$this->m_oSet = $oSet;
+	}
+	/**
+	 * Constructs a DisplayBlock object from a DBObjectSet already in memory
+	 * @param $oSet DBObjectSet
+	 * @return DisplayBlock The DisplayBlock object, or null if the creation failed
+	 */
+	public static function FromObjectSet(DBObjectSet $oSet, $sStyle, $aParams = array())
+	{
+		$oDummyFilter = new DBObjectSearch($oSet->GetClass());
+		$oBlock = new DisplayBlock($oDummyFilter, $sStyle, false, $aParams, $oSet); // DisplayBlocks built this way are synchronous
+		return $oBlock;
+	}
+	
+	/**
+	 * Constructs a DisplayBlock object from an XML template
+	 * @param $sTemplate string The XML template
+	 * @return DisplayBlock The DisplayBlock object, or null if the template is invalid
+	 */
+	public static function FromTemplate($sTemplate)
+	{
+		$iStartPos = stripos($sTemplate, '<'.self::TAG_BLOCK.' ',0);
+		$iEndPos = stripos($sTemplate, '</'.self::TAG_BLOCK.'>', $iStartPos); 
+		
+		if (($iStartPos === false) || ($iEndPos === false)) return null; // invalid template		
+		$sITopBlock = substr($sTemplate,$iStartPos, $iEndPos-$iStartPos);
+		$sITopData = substr($sITopBlock, 1+stripos($sITopBlock, ">"));
+		$sITopTag = substr($sITopBlock, 0, stripos($sITopBlock, ">"));
+		$aMatches = array();
+		$sBlockClass = "DisplayBlock";
+		$bAsynchronous = false;
+		$sBlockType = 'list';
+		$sEncoding = 'text/serialize';
+		if (preg_match('/ type="(.*)"/U',$sITopTag, $aMatches))
+		{
+			$sBlockType = strtolower($aMatches[1]);
+		}
+		if (preg_match('/ asynchronous="(.*)"/U',$sITopTag, $aMatches))
+		{
+			$bAsynchronous = (strtolower($aMatches[1]) == 'true');
+		}
+		if (preg_match('/ blockclass="(.*)"/U',$sITopTag, $aMatches))
+		{
+			$sBlockClass = $aMatches[1];
+		}
+		if (preg_match('/ objectclass="(.*)"/U',$sITopTag, $aMatches))
+		{
+			$sObjectClass = $aMatches[1];
+		}
+		if (preg_match('/ encoding="(.*)"/U',$sITopTag, $aMatches))
+		{
+			$sEncoding = strtolower($aMatches[1]);
+		}
+		if (preg_match('/ linkage="(.*)"/U',$sITopTag, $aMatches))
+		{
+			// The list to display is a list of links to the specified object
+			$sExtKey = strtolower($aMatches[1]);
+			$aParams['linkage'] = $sExtKey; // Name of the Ext. Key that make this linkage
+		}
+		// Parameters contains a list of extra parameters for the block
+		// the syntax is param_name1:value1;param_name2:value2;...
+		$aParams = array();
+		if (preg_match('/ parameters="(.*)"/U',$sITopTag, $aMatches))
+		{
+			$sParameters = $aMatches[1];
+			$aPairs = explode(';', $sParameters);
+			foreach($aPairs as $sPair)
+			{
+				if (preg_match('/(.*)\:(.*)/',$sPair, $aMatches))
+				{
+					$aParams[trim($aMatches[1])] = trim($aMatches[2]);
+				}
+			}
+		}
+		switch($sEncoding)
+		{
+			case 'text/serialize':
+			$oFilter = CMDBSearchFilter::unserialize($sITopData);
+			break;
+			
+			case 'text/sibusql':
+			$oFilter = CMDBSearchFilter::FromSibusQL($sITopData);
+			break;
+			
+			case 'text/oql':
+			$oFilter = CMDBSearchFilter::FromOQL($sITopData);
+			break;
+		}
+		return new $sBlockClass($oFilter, $sBlockType, $bAsynchronous, $aParams);		
+	}
+	
+	public function Display(web_page $oPage, $sId, $aExtraParams = array())
+	{
+		$aExtraParams = array_merge($aExtraParams, $this->m_aParams);
+		if (!$this->m_bAsynchronous)
+		{
+			// render now
+			$oPage->add("<div id=\"$sId\" class=\"display_block\">\n");
+			$this->RenderContent($oPage, $aExtraParams);
+			$oPage->add("</div>\n");
+		}
+		else
+		{
+			// render it as an Ajax (asynchronous) call
+			$sFilter = $this->m_oFilter->serialize();
+			$oPage->add("<div id=\"$sId\" class=\"display_block loading\">\n");
+			$oPage->p("<img src=\"../images/indicator_arrows.gif\"> Loading...");
+			$oPage->add("</div>\n");
+			$oPage->add('
+			<script language="javascript">
+			$.get("ajax.render.php?filter='.$sFilter.'&style='.$this->m_sStyle.'",
+			   { operation: "ajax" },
+			   function(data){
+				 $("#'.$sId.'").empty();
+				 $("#'.$sId.'").append(data);
+				 $("#'.$sId.'").removeClass("loading");
+				}
+			 );
+			 </script>'); // TO DO: add support for $aExtraParams in asynchronous/Ajax mode
+		}
+	}
+	
+	public function GetDisplay(web_page $oPage, $sId, $aExtraParams = array())
+	{
+		$sHtml = '';
+		$aExtraParams = array_merge($aExtraParams, $this->m_aParams);
+		if (!$this->m_bAsynchronous)
+		{
+			// render now
+			$sHtml .= "<div id=\"$sId\" class=\"display_block\">\n";
+			$sHtml .= $this->GetRenderContent($oPage, $aExtraParams);
+			$sHtml .= "</div>\n";
+		}
+		else
+		{
+			// render it as an Ajax (asynchronous) call
+			$sFilter = $this->m_oFilter->serialize();
+			$sHtml .= "<div id=\"$sId\" class=\"display_block loading\">\n";
+			$sHtml .= $oPage->GetP("<img src=\"../images/indicator_arrows.gif\"> Loading...");
+			$sHtml .= "</div>\n";
+			$sHtml .= '
+			<script language="javascript">
+			$.get("ajax.render.php?filter='.$sFilter.'&style='.$this->m_sStyle.'",
+			   { operation: "ajax" },
+			   function(data){
+				 $("#'.$sId.'").empty();
+				 $("#'.$sId.'").append(data);
+				 $("#'.$sId.'").removeClass("loading");
+				}
+			 );
+			 </script>'; // TO DO: add support for $aExtraParams in asynchronous/Ajax mode
+		}
+		return $sHtml;
+	}
+	
+	public function RenderContent(web_page $oPage, $aExtraParams = array())
+	{
+		$oPage->add($this->GetRenderContent($oPage, $aExtraParams));
+	}
+	
+	public function GetRenderContent(web_page $oPage, $aExtraParams = array())
+	{
+		$sHtml = '';
+		// Add the extra params into the filter if they make sense for such a filter
+		$bDoSearch = utils::ReadParam('dosearch', false);
+		if ($this->m_oSet == null)
+		{
+			$aFilterCodes = array_keys(MetaModel::GetClassFilterDefs($this->m_oFilter->GetClass()));
+			foreach($aFilterCodes as $sFilterCode)
+			{
+				$sExternalFilterValue = utils::ReadParam($sFilterCode, '');
+				if (isset($aExtraParams[$sFilterCode]))
+				{
+					$this->m_oFilter->AddCondition($sFilterCode, $aExtraParams[$sFilterCode]); // Use the default 'loose' operator
+				}
+				else if ($bDoSearch && $sExternalFilterValue != "")
+				{
+					$this->m_oFilter->AddCondition($sFilterCode, $sExternalFilterValue); // Use the default 'loose' operator
+				}
+			}
+			$this->m_oSet = new CMDBObjectSet($this->m_oFilter);
+		}
+		switch($this->m_sStyle)
+		{
+			case 'count':
+			if (isset($aExtraParams['group_by']))
+			{
+				$sGroupByField = $aExtraParams['group_by'];
+				$aGroupBy = array();
+				while($oObj = $this->m_oSet->Fetch())
+				{
+					$sValue = $oObj->Get($sGroupByField);
+					$aGroupBy[$sValue] = isset($aGroupBy[$sValue]) ? $aGroupBy[$sValue]+1 : 1;
+				}
+				$sFilter = urlencode($this->m_oFilter->serialize());
+				$aData = array();
+				foreach($aGroupBy as $sValue => $iCount)
+				{
+					$aData[] = array ( 'group' => $sValue,
+									  'value' => "<a href=\"./UI.php?operation=search&dosearch=1&filter=$sFilter&$sGroupByField=".urlencode($sValue)."\">$iCount</a>"); // TO DO: add the context information
+				}
+				$sHtml .= $oPage->GetTable(array('group' => array('label' => MetaModel::GetLabel($this->m_oFilter->GetClass(), $sGroupByField), 'description' => ''), 'value' => array('label'=>'Count', 'description' => 'Number of elements')), $aData);
+			}
+			else
+			{
+				// Simply count the number of elements in the set
+				$iCount = $oSet->Count();
+				$sHtml .= $oPage->GetP("$iCount objects matching the criteria.");
+			}
+			
+			break;
+			
+			case 'list':
+			$bDashboardMode = isset($aExtraParams['dashboard']) ? ($aExtraParams['dashboard'] == 'true') : false;
+			if ( ($this->m_oSet->Count()> 0) && (UserRights::IsActionAllowed($this->m_oSet->GetClass(), UR_ACTION_READ, $this->m_oSet) == UR_ALLOWED_YES) )
+			{
+				$sLinkage = isset($aExtraParams['linkage']) ? $aExtraParams['linkage'] : '';
+				$sHtml .= cmdbAbstractObject::GetDisplaySet($oPage, $this->m_oSet, $sLinkage, !$bDashboardMode /* bDisplayMenu */);
+			}
+			else
+			{
+				$sHtml .= $oPage->GetP("No object to display.");
+				$sClass = $this->m_oFilter->GetClass();
+				if (!$bDashboardMode)
+				{
+					if (UserRights::IsActionAllowed($sClass, UR_ACTION_MODIFY, $this->m_oSet) == UR_ALLOWED_YES)
+					{
+						$sHtml .= $oPage->GetP("<a href=\"./UI.php?operation=new&class=$sClass\">Click here to create a new ".Metamodel::GetName($sClass)."</a>\n");
+					}
+				}
+			}
+			break;
+			
+			case 'details':
+			if (UserRights::IsActionAllowed($this->m_oSet->GetClass(), UR_ACTION_READ, $this->m_oSet) == UR_ALLOWED_YES)
+			{
+				while($oObj = $this->m_oSet->Fetch())
+				{
+					$sHtml .= $oObj->GetDetails($oPage);
+				}
+			}
+			break;
+			
+			case 'bare_details':
+			if (UserRights::IsActionAllowed($this->m_oSet->GetClass(), UR_ACTION_READ, $this->m_oSet) == UR_ALLOWED_YES)
+			{
+				while($oObj = $this->m_oSet->Fetch())
+				{
+					$sHtml .= $oObj->GetBareDetails($oPage);
+				}
+			}
+			break;
+			
+			case 'csv':
+			if (UserRights::IsActionAllowed($this->m_oSet->GetClass(), UR_ACTION_READ, $this->m_oSet) == UR_ALLOWED_YES)
+			{
+				$sHtml .= "<textarea style=\"width:100%;height:98%\">\n";
+				$sHtml .= cmdbAbstractObject::GetSetAsCSV($this->m_oSet);
+				$sHtml .= "</textarea>\n";
+			}
+			break;
+
+			case 'modify':
+			if (UserRights::IsActionAllowed($this->m_oSet->GetClass(), UR_ACTION_MODIFY, $this->m_oSet) == UR_ALLOWED_YES)
+			{
+				while($oObj = $this->m_oSet->Fetch())
+				{
+					$sHtml .= $oObj->GetModifyForm($oPage);
+				}
+			}
+			break;
+			
+			case 'search':
+			$iSearchSectionId = 1;
+			$sStyle = (isset($aExtraParams['open']) && ($aExtraParams['open'] == 'true')) ? 'SearchDrawer' : 'SearchDrawer DrawerClosed';
+			$sHtml .= "<div id=\"Search_$iSearchSectionId\" class=\"$sStyle\">\n";
+			$sHtml .= "<h1>Search form for ".Metamodel::GetName($this->m_oSet->GetClass())."</h1>\n";
+			$oPage->add_ready_script("\$(\"#LnkSearch_$iSearchSectionId\").click(function() {\$(\"#Search_$iSearchSectionId\").slideToggle('normal'); $(\"#LnkSearch_$iSearchSectionId\").toggleClass('open');});");
+			$sHtml .= cmdbAbstractObject::GetSearchForm($oPage, $this->m_oSet, $aExtraParams);
+	 		$sHtml .= "</div>\n";
+	 		$sHtml .= "<div class=\"HRDrawer\"/></div>\n";
+	 		$sHtml .= "<div id=\"LnkSearch_$iSearchSectionId\" class=\"DrawerHandle\">Search</div>\n";
+			break;
+			
+			case 'pie_chart':
+			$sGroupBy = isset($aExtraParams['group_by']) ? $aExtraParams['group_by'] : '';
+			$sFilter = $this->m_oFilter->ToOQL();
+			$sHtml .= "
+			<OBJECT classid=\"clsid:D27CDB6E-AE6D-11cf-96B8-444553540000\"
+				codebase=\"http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,0,0\" 
+				WIDTH=\"400\" 
+				HEIGHT=\"250\" 
+				id=\"charts\" 
+				ALIGN=\"\">
+			<PARAM NAME=movie VALUE=\"../images/charts.swf?library_path=../images/charts_library&xml_source=".urlencode("../pages/ajax.render.php?operation=pie_chart&group_by=$sGroupBy&encoding=oql&filter=".urlencode($sFilter))."\">
+			<PARAM NAME=\"quality\" VALUE=\"high\">
+			<PARAM NAME=\"bgcolor\" VALUE=\"#ffffff\">
+			
+			<EMBED src=\"../images/charts.swf?library_path=../images/charts_library&xml_source=".urlencode("../pages/ajax.render.php?operation=pie_chart&group_by=$sGroupBy&encoding=oql&filter=".urlencode($sFilter))."\" 
+			       quality=\"high\"
+			       bgcolor=\"#ffffff\"  
+			       WIDTH=\"400\" 
+			       HEIGHT=\"250\" 
+			       NAME=\"charts\" 
+			       ALIGN=\"\" 
+			       swLiveConnect=\"true\" 
+			       TYPE=\"application/x-shockwave-flash\" 
+			       PLUGINSPAGE=\"http://www.macromedia.com/go/getflashplayer\">
+			</EMBED>
+			</OBJECT>
+			";
+			break;
+			
+			case 'pie_chart_ajax':
+			if (isset($aExtraParams['group_by']))
+			{
+				$sGroupByField = $aExtraParams['group_by'];
+				$aGroupBy = array();
+				while($oObj = $this->m_oSet->Fetch())
+				{
+					$sValue = $oObj->Get($sGroupByField);
+					$aGroupBy[$sValue] = isset($aGroupBy[$sValue]) ? $aGroupBy[$sValue]+1 : 1;
+				}
+				$sFilter = urlencode($this->m_oFilter->serialize());
+				$aData = array();
+				$sHtml .= "<chart>\n";
+				$sHtml .= "<chart_type>3d pie</chart_type>\n";
+				$sHtml .= "<chart_data>\n";
+				$sHtml .= "<row>\n";
+				$sHtml .= "<null/>\n";
+				foreach($aGroupBy as $sValue => $void)
+				{
+					$sHtml .= "<string>$sValue</string>\n";
+				}
+				$sHtml .= "</row>\n";
+				$sHtml .= "<row>\n";
+				$sHtml .= "<string></string>\n";
+				foreach($aGroupBy as $void => $iCount)
+				{
+					$sHtml .= "<number>$iCount</number>\n";
+				}
+				$sHtml .= "</row>\n";
+				$sHtml .= "</chart_data>\n";
+				$sHtml .= "
+	<chart_value color='ffffff' alpha='90' font='arial' bold='true' size='10' position='inside' prefix='' suffix='' decimals='0' separator='' as_percentage='true' />
+
+	<draw>
+		<text color='000000' alpha='10' font='arial' rotation='0' bold='true' size='30' x='0' y='140' width='400' height='150' h_align='center' v_align='bottom'>|||||||||||||||||||||||||||||||||||||||||||||||</text>
+	</draw>
+
+	<legend_label layout='horizontal' bullet='circle' font='arial' bold='true' size='13' color='000000' alpha='85' />
+	<legend_rect fill_color='ffffff' fill_alpha='10' line_color='ffffff' line_alpha='50' line_thickness='0' />
+	<series_color>
+		<color>ddaa41</color>
+		<color>88dd11</color>
+		<color>4e62dd</color>
+		<color>ff8811</color>
+		<color>4d4d4d</color>
+		<color>5a4b6e</color>
+		<color>1188ff</color>
+	</series_color>
+				";
+				$sHtml .= "</chart>\n";
+			}
+			else
+			{
+				// Simply count the number of elements in the set
+				$iCount = $oSet->Count();
+				$sHtml .= "<chart>\n</chart>\n";
+			}
+			break;
+			
+			case 'open_flash_chart':
+			static $iChartCounter = 0;
+			$sChartType = isset($aExtraParams['chart_type']) ? $aExtraParams['chart_type'] : 'pie';
+			$sTitle = isset($aExtraParams['chart_title']) ? $aExtraParams['chart_title'] : '';
+			$sGroupBy = isset($aExtraParams['group_by']) ? $aExtraParams['group_by'] : '';
+			$sFilter = $this->m_oFilter->ToOQL();
+			$sHtml .= "<script>
+			swfobject.embedSWF(\"../images/open-flash-chart.swf\", \"my_chart_{$iChartCounter}\", \"400\", \"400\",\"9.0.0\", \"expressInstall.swf\",
+			{\"data-file\":\"".urlencode("../pages/ajax.render.php?operation=open_flash_chart&params[group_by]=$sGroupBy&params[chart_type]=$sChartType&params[chart_title]=$sTitle&encoding=oql&filter=".urlencode($sFilter))."\"});
+</script>\n";
+			$sHtml .= "<div id=\"my_chart_{$iChartCounter}\">Here goes the chart</div>\n";
+			$iChartCounter++;
+			break;
+			
+			case 'open_flash_chart_ajax':
+			include './php-ofc-library/open-flash-chart.php';
+			$sChartType = isset($aExtraParams['chart_type']) ? $aExtraParams['chart_type'] : 'pie';
+
+			$oChart = new open_flash_chart();
+			switch($sChartType)
+			{
+				case 'bars':
+				$oChartElement = new bar_glass();
+
+				if (isset($aExtraParams['group_by']))
+				{
+					$sGroupByField = $aExtraParams['group_by'];
+					$aGroupBy = array();
+					while($oObj = $this->m_oSet->Fetch())
+					{
+						$sValue = $oObj->Get($sGroupByField);
+						$aGroupBy[$sValue] = isset($aGroupBy[$sValue]) ? $aGroupBy[$sValue]+1 : 1;
+					}
+					$sFilter = urlencode($this->m_oFilter->serialize());
+					$aData = array();
+					$aLabels = array();
+					foreach($aGroupBy as $sValue => $iValue)
+					{
+						$aData[] = $iValue;
+						$aLabels[] = $sValue;
+					}
+					$maxValue = max($aData);
+					$oYAxis = new y_axis();
+					$aMagicValues = array(1,2,5,10);
+					$iMultiplier = 1;
+					$index = 0;
+					$iTop = $aMagicValues[$index % count($aMagicValues)]*$iMultiplier;
+					while($maxValue > $iTop)
+					{
+						$index++;
+						$iTop = $aMagicValues[$index % count($aMagicValues)]*$iMultiplier;
+						if (($index % count($aMagicValues)) == 0)
+						{
+							$iMultiplier = $iMultiplier * 10;
+						}
+					}
+					//echo "oYAxis->set_range(0, $iTop, $iMultiplier);\n";
+					$oYAxis->set_range(0, $iTop, $iMultiplier);
+					$oChart->set_y_axis( $oYAxis );
+
+					$oChartElement->set_values( $aData );
+					$oXAxis = new x_axis();
+					$oXLabels = new x_axis_labels();
+					// set them vertical
+					$oXLabels->set_vertical();
+					// set the label text
+					$oXLabels->set_labels($aLabels);
+					// Add the X Axis Labels to the X Axis
+					$oXAxis->set_labels( $oXLabels );
+					$oChart->set_x_axis( $oXAxis );
+				}
+				break;
+				
+				case 'pie':
+				default:
+				$oChartElement = new pie();
+				$oChartElement->set_start_angle( 35 );
+				$oChartElement->set_animate( true );
+				$oChartElement->set_tooltip( '#label# - #val# (#percent#)' );
+				if (isset($aExtraParams['group_by']))
+				{
+					$sGroupByField = $aExtraParams['group_by'];
+					$aGroupBy = array();
+					while($oObj = $this->m_oSet->Fetch())
+					{
+						$sValue = $oObj->Get($sGroupByField);
+						$aGroupBy[$sValue] = isset($aGroupBy[$sValue]) ? $aGroupBy[$sValue]+1 : 1;
+					}
+					$sFilter = urlencode($this->m_oFilter->serialize());
+					$aData = array();
+					foreach($aGroupBy as $sValue => $iValue)
+					{
+						$aData[] = new pie_value($iValue, $sValue);
+					}
+	
+	
+					$oChartElement->set_values( $aData );
+					$oChart->x_axis = null;
+				}
+			}				
+			if (isset($aExtraParams['chart_title'])) //@@ BUG: not passed via ajax !!!
+			{
+				$oTitle = new title( $aExtraParams['chart_title'] );
+				$oChart->set_title( $oTitle );
+			}
+			$oChart->set_bg_colour('#FFFFFF');
+			$oChart->add_element( $oChartElement );
+			
+			$sHtml = $oChart->toPrettyString();
+			break;
+			
+			default:
+			// Unsupported style, do nothing.
+			$sHtml .= "Error: unsupported style of block: ".$this->m_sStyle;
+		}
+		return $sHtml;
+	}
+}
+
+/**
+ * Helper class to manage 'blocks' of HTML pieces that are parts of a page and contain some list of cmdb objects
+ *
+ * Each block is actually rendered as a <div></div> tag that can be rendered synchronously
+ * or as a piece of Javascript/JQuery/Ajax that will get its content from another page (ajax.render.php).
+ * The list of cmdbObjects to be displayed into the block is defined by a filter
+ * Right now the type of display is either: list, count or details
+ * - list produces a table listing the objects
+ * - count produces a paragraphs with a sentence saying 'cont' objects found
+ * - details display (as  table) the details of each object found (best if only one)
+ */
+class HistoryBlock extends DisplayBlock
+{
+	public function GetRenderContent(web_page $oPage, $aExtraParams = array())
+	{
+		$sHtml = '';
+		// Add the extra params into the filter if they make sense for such a filter
+		$aFilterCodes = array_keys(MetaModel::GetClassFilterDefs($this->m_oFilter->GetClass()));
+		foreach($aFilterCodes as $sFilterCode)
+		{
+			if (isset($aExtraParams[$sFilterCode]))
+			{
+				$this->m_oFilter->AddCondition($sFilterCode, $aExtraParams[$sFilterCode]); // Use the default 'loose' operator
+			}
+		}
+		$oSet = new CMDBObjectSet($this->m_oFilter, array('date'=>false));
+		$sHtml .= "<!-- filter: ".($this->m_oFilter->ToOQL())."-->\n";
+		switch($this->m_sStyle)
+		{
+			case 'toggle':
+			$oLatestChangeOp = $oSet->Fetch();
+			if (is_object($oLatestChangeOp))
+			{
+				global $oContext; // User Context.. should be statis instead of global...
+				// There is one change in the list... only when the object has been created !
+				$sDate = $oLatestChangeOp->GetAsHTML('date');
+				$oChange = $oContext->GetObject('CMDBChange', $oLatestChangeOp->Get('change'));
+				$sUserInfo = $oChange->GetAsHTML('userinfo');
+				$oSet->Load(); // Reset the pointer to the beginning of the set: there should be a better way to do this...
+				$sHtml .= $oPage->GetStartCollapsibleSection("Last modified on $sDate by $sUserInfo.");
+				$sHtml .= cmdbAbstractObject::GetDisplaySet($oPage, $oSet);			
+				$sHtml .= $oPage->GetEndCollapsibleSection();
+			}
+			break;
+						
+			default:
+			$sHtml .= parent::GetRenderContent($oPage, $aExtraParams);
+		}
+		return $sHtml;
+	}
+}
+
+class MenuBlock extends DisplayBlock
+{
+	public function GetRenderContent(web_page $oPage, $aExtraParams = array())
+	{
+		$sHtml = '';
+		$oAppContext = new ApplicationContext();
+		$sContext = $oAppContext->GetForLink();
+		$sClass = $this->m_oFilter->GetClass();
+		$oSet = new CMDBObjectSet($this->m_oFilter);
+		$sFilter = $this->m_oFilter->serialize();
+		$aActions = array();
+		$sUIPage = cmdbAbstractObject::ComputeUIPage($sClass);
+		switch($oSet->Count())
+		{
+			case 0:
+			// No object in the set, the only possible action is "new"
+			$bIsModifyAllowed = UserRights::IsActionAllowed($sClass, UR_ACTION_MODIFY, $oSet);
+			if ($bIsModifyAllowed) { $aActions[] = array ('label' => 'New', 'url' => "../page/$sUIPage?operation=new&class=$sClass&$sContext"); }
+			break;
+			
+			case 1:
+			$oObj = $oSet->Fetch();
+			$id = $oObj->GetKey();
+			$bIsModifyAllowed = UserRights::IsActionAllowed($sClass, UR_ACTION_MODIFY, $oSet);
+			$bIsDeleteAllowed = UserRights::IsActionAllowed($sClass, UR_ACTION_DELETE, $oSet);
+			$bIsBulkModifyAllowed = UserRights::IsActionAllowed($sClass, UR_ACTION_BULK_MODIFY, $oSet);
+			$bIsBulkDeleteAllowed = UserRights::IsActionAllowed($sClass, UR_ACTION_BULK_DELETE, $oSet);
+			// Just one object in the set, possible actions are "new / clone / modify and delete"
+			if (isset($aExtraParams['linkage']))
+			{
+				if ($bIsModifyAllowed) { $aActions[] = array ('label' => 'New...', 'url' => "#"); }
+				if ($bIsBulkModifyAllowed) { $aActions[] = array ('label' => 'Modify All...', 'url' => "#"); }
+				if ($bIsBulkDeleteAllowed) { $aActions[] = array ('label' => 'Remove All', 'url' => "#"); }
+				if ($bIsModifyAllowed | $bIsDeleteAllowed) { $aActions[] = array ('label' => 'Manage Links...', 'url' => "#"); }
+			}
+			else
+			{
+				$aActions[] = array ('label' => 'eMail', 'url' => "mailto:?subject=".$oSet->GetFilter()->__DescribeHTML()."&body=".urlencode("http://localhost:81/pages/UI.php?operation=search&filter=$sFilter&$sContext"));
+				$aActions[] = array ('label' => 'CSV Export', 'url' => "../pages/$sUIPage?operation=search&filter=$sFilter&format=csv&$sContext");
+				$aActions[] = array ('label' => 'Bookmark...', 'url' => "../pages/ajax.render.php?operation=create&class=$sClass&filter=$sFilter", 'class' => 'jqmTrigger');
+				if ($bIsModifyAllowed) { $aActions[] = array ('label' => 'New...', 'url' => "../pages/$sUIPage?operation=new&class=$sClass&$sContext"); }
+				if ($bIsModifyAllowed) { $aActions[] = array ('label' => 'Clone...', 'url' => "../pages/$sUIPage?operation=clone&class=$sClass&id=$id&$sContext"); }
+				if ($bIsModifyAllowed) { $aActions[] = array ('label' => 'Modify...', 'url' => "../pages/$sUIPage?operation=modify&class=$sClass&id=$id&$sContext"); }
+				if ($bIsDeleteAllowed) { $aActions[] = array ('label' => 'Delete', 'url' => "../pages/$sUIPage?operation=delete&class=$sClass&id=$id&$sContext"); }
+			}
+			$aTransitions = $oObj->EnumTransitions();
+			$aStimuli = Metamodel::EnumStimuli($sClass);
+			foreach($aTransitions as $sStimulusCode => $aTransitionDef)
+			{
+				$iActionAllowed = UserRights::IsStimulusAllowed($sClass, $sStimulusCode, $oSet);
+				switch($iActionAllowed)
+				{
+					case UR_ALLOWED_YES:
+					$aActions[] = array('label' => $aStimuli[$sStimulusCode]->Get('label'), 'url' => "../pages/UI.php?operation=stimulus&stimulus=$sStimulusCode&class=$sClass&id=$id&$sContext");
+					break;
+					
+					case UR_ALLOWED_DEPENDS:
+					$aActions[] = array('label' => $aStimuli[$sStimulusCode]->Get('label').' (*)', 'url' => "../pages/UI.php?operation=stimulus&stimulus=$sStimulusCode&class=$sClass&id=$id&$sContext");
+					break;
+					
+					default:
+					// Do nothing
+				}
+			}
+			//print_r($aTransitions);
+			break;
+			
+			default:
+			// Check rights
+			// New / Modify
+			$bIsModifyAllowed = UserRights::IsActionAllowed($sClass, UR_ACTION_MODIFY, $oSet);
+			$bIsBulkModifyAllowed = UserRights::IsActionAllowed($sClass, UR_ACTION_BULK_MODIFY, $oSet);
+			$bIsBulkDeleteAllowed = UserRights::IsActionAllowed($sClass, UR_ACTION_BULK_DELETE, $oSet);
+			if (isset($aExtraParams['linkage']))
+			{
+				$bIsDeleteAllowed = UserRights::IsActionAllowed($sClass, UR_ACTION_DELETE, $oSet);
+				if ($bIsModifyAllowed) { $aActions[] = array ('label' => 'New...', 'url' => "#"); }
+				if ($bIsBulkModifyAllowed) { $aActions[] = array ('label' => 'Modify All...', 'url' => "#"); }
+				if ($bIsBulkDeleteAllowed) { $aActions[] = array ('label' => 'Remove All', 'url' => "#"); }
+				if ($bIsModifyAllowed | $bIsDeleteAllowed) { $aActions[] = array ('label' => 'Manage Links...', 'url' => "#"); }
+			}
+			else
+			{
+				// many objects in the set, possible actions are: new / modify all / delete all
+				$aActions[] = array ('label' => 'eMail', 'url' => "mailto:?subject=".$oSet->GetFilter()->__DescribeHTML()."&body=".urlencode("http://localhost:81/pages/UI.php?operation=search&filter=$sFilter&$sContext"));
+				$aActions[] = array ('label' => 'CSV Export', 'url' => "../pages/$sUIPage?operation=search&filter=$sFilter&format=csv&$sContext");
+				$aActions[] = array ('label' => 'Bookmark...', 'url' => "../pages/ajax.render.php?operation=create&class=$sClass&filter=$sFilter", 'class' => 'jqmTrigger');
+				if ($bIsModifyAllowed) { $aActions[] = array ('label' => 'New...', 'url' => "../pages/$sUIPage?operation=new&class=$sClass&$sContext"); }
+				if ($bIsBulkModifyAllowed) { $aActions[] = array ('label' => 'Modify All...', 'url' => "../pages/$sUIPage?operation=modify_all&filter=$sFilter&$sContext"); }
+				if ($bIsBulkDeleteAllowed) { $aActions[] = array ('label' => 'Delete All', 'url' => "../pages/$sUIPage?operation=delete_all&filter=$sFilter&$sContext"); }
+			}
+		}
+		$sHtml .= "<div class=\"jd_menu_itop\"><ul class=\"jd_menu jd_menu_itop\">\n<li>Actions\n<ul>\n";
+		foreach ($aActions as $aAction)
+		{
+			$sClass = isset($aAction['class']) ? " class=\"{$aAction['class']}\"" : "";
+			$sHtml .= "<li><a href=\"{$aAction['url']}\"$sClass>{$aAction['label']}</a></li>\n<li>\n";
+		}
+		$sHtml .= "</ul>\n</li>\n</ul></div>\n";
+		$oPage->add_ready_script("$(\"ul.jd_menu\").jdMenu();\n");
+		return $sHtml;
+	}
+	
+}
+?>

tags/0.7.1/application/itopwebpage.class.inc.php

@@ -0,0 +1,414 @@
+<?php
+require_once("../application/nicewebpage.class.inc.php");
+require_once("../application/usercontext.class.inc.php");
+require_once("../application/applicationcontext.class.inc.php");
+/**
+ * Web page with some associated CSS and scripts (jquery) for a fancier display
+ */
+class iTopWebPage extends nice_web_page
+{
+	private $m_sMenu;
+	private $m_currentOrganization;
+	private $m_aTabs;
+	private $m_sCurrentTabContainer;
+	private $m_sCurrentTab;
+	
+    public function __construct($sTitle, $currentOrganization)
+    {
+        parent::__construct($sTitle);
+        $this->m_sCurrentTabContainer = '';
+        $this->m_sCurrentTab = '';
+		$this->m_aTabs = array();
+		$this->m_sMenu = "";
+		$oAppContext = new ApplicationContext();
+		$sExtraParams = $oAppContext->GetForLink();
+		$this->add_header("Content-type: text/html; charset=utf-8");
+		$this->add_header("Cache-control: no-cache");
+		$this->m_currentOrganization = $currentOrganization;
+		$this->add_linked_script("../js/jquery.dimensions.js");
+		$this->add_linked_script("../js/splitter.js");
+		$this->add_linked_script("../js/jquery.tablehover.js");
+		$this->add_linked_script("../js/jquery.treeview.js");
+		$this->add_linked_script("../js/jquery.autocomplete.js");
+		$this->add_linked_script("../js/jquery.bgiframe.js");
+		$this->add_linked_script("../js/jquery.jdMenu.js");
+		$this->add_linked_script("../js/date.js");
+		$this->add_linked_script("../js/jquery.date.picker.js");
+		$this->add_linked_script("../js/jquery.tablesorter.min.js");
+		//$this->add_linked_script("../js/jquery-ui-personalized-1.5.3.js");
+		$this->add_linked_script("../js/swfobject.js");
+		$this->add_linked_stylesheet("../css/jquery.treeview.css");
+		$this->add_linked_stylesheet("../css/jquery.autocomplete.css");
+		$this->add_linked_stylesheet("../css/date.picker.css");
+		$this->add_ready_script(
+<<<EOF
+	// Vertical splitter. The min/max/starting sizes for the left (A) pane
+	// are set here. All values are in pixels.
+	$("#MySplitter").splitter({
+		type: "v", 
+		minA: 100, initA: 250, maxA: 500,
+		accessKey: "|"
+	});
+
+	// Horizontal splitter, nested in the right pane of the vertical splitter.
+	if ( $("#TopPane").length > 0)
+	{
+		$("#RightPane").splitter({
+			type: "h" //,
+			//minA: 100, initA: 150, maxA: 500,
+			//accessKey: "_"
+		});
+	}
+	
+	// Manually set the outer splitter's height to fill the browser window.
+	// This must be re-done any time the browser window is resized.
+	$(window).bind("resize", function(){
+		var ms = $("#MySplitter");
+		var top = ms.offset().top;		// from dimensions.js
+		var wh = $(window).height();
+		// Account for margin or border on the splitter container
+		var mrg = parseInt(ms.css("marginBottom")) || 0;
+		var brd = parseInt(ms.css("borderBottomWidth")) || 0;
+		ms.css("height", (wh-top-mrg-brd)+"px");
+
+		// IE fires resize for splitter; others don't so do it here
+		if ( !jQuery.browser.msie )
+			ms.trigger("resize");
+
+		
+	}).trigger("resize");
+	
+	var ms = $("#MySplitter");
+	ms.trigger("resize");
+
+	if ( $("#TopPane").length > 0)
+	{
+		$("#RightPane").trigger("resize");
+	}
+	
+	$("#tabbedContent > ul").tabs( 1, { fxFade: true, fxSpeed: 'fast' } ); // tabs
+	$("table.listResults").tableHover(); // hover tables
+	$(".listResults").tablesorter( { headers: { 0:{sorter: false }}, widgets: ['zebra']} ); // sortable and zebra tables
+	$(".date-pick").datePicker( {clickInput: false, createButton: true, startDate: '2000-01-01'} ); // Date picker
+	$('#ModalDlg').jqm({ajax: '@href', trigger: 'a.jqmTrigger', overlay:70, modal:true, toTop:true}); // jqModal Window
+	//$('.display_block').draggable(); // make the blocks draggable
+EOF
+);
+		$this->add_script("
+		// For automplete
+		function findValue(li) {
+			if( li == null ) return alert(\"No match!\");
+			
+			// if coming from an AJAX call, let's use the CityId as the value
+			if( !!li.extra ) var sValue = li.extra[0];
+			
+			// otherwise, let's just display the value in the text box
+			else var sValue = li.selectValue;
+			
+			//alert(\"The value you selected was: \" + sValue);
+		}
+		
+		function selectItem(li) {
+			findValue(li);
+		}
+		
+		function formatItem(row) {
+			return row[0];
+		}
+		
+		function goBack()
+		{
+			window.history.back();
+		}
+		");
+		$this->DisplayMenu();
+	}
+	
+	public function AddToMenu($sHtml)
+	{
+		$this->m_sMenu .= $sHtml;
+	}
+
+    public function DisplayMenu()
+    {
+        // Combo box to select the organization
+		$this->AddToMenu("<div id=\"OrganizationSelection\">
+			  <form style=\"display:inline\"><select style=\"width:150px;font-size:x-small\" name=\"org_id\" \"title=\"Pick an organization\" onChange=\"this.form.submit();\">\n");
+		// List of visible Organizations
+		$oContext = new UserContext();
+		$oSearchFilter = $oContext->NewFilter("bizOrganization");
+		$oSet = new CMDBObjectSet($oSearchFilter);
+		$sSelected = ($this->m_currentOrganization == '') ? ' selected' : '';
+		$this->AddToMenu("<option value=\"\"$sSelected> All Organizations </option>");
+		if ($oSet->Count() > 0)
+		while($oOrg = $oSet->Fetch())
+		{
+			if ($this->m_currentOrganization == $oOrg->GetKey())
+			{
+				$oCurrentOrganization = $oOrg;
+				$sSelected = " selected";
+			}
+			else
+			{
+				$sSelected = "";
+			}
+			$this->AddToMenu("<option value=\"".$oOrg->GetKey()."\"$sSelected>".$oOrg->Get('name')."</option>\n");
+		}
+		$this->AddToMenu("</select></form>\n");
+		$this->AddToMenu("</div>\n");
+		$this->AddToMenu("<ul id=\"browser\" class=\"dir\">\n");
+        $oAppContext = new ApplicationContext();
+        // Display the menu
+        // 1) Application defined menus
+        $oSearchFilter = $oContext->NewFilter("menuNode");
+        $oSearchFilter->AddCondition('parent_id', 0, '=');
+        $oSearchFilter->AddCondition('type', 'application', '=');
+        // There may be more criteria added later to have a specific menu based on the user's profile
+        $oSet = new CMDBObjectSet($oSearchFilter, array('rank' => true));
+        while ($oRootMenuNode = $oSet->Fetch())
+        {
+        	$oRootMenuNode->DisplayMenu($this, 'application', $oAppContext->GetAsHash());
+        }
+        // 2) User defined menus (Bookmarks)
+        $oSearchFilter = $oContext->NewFilter("menuNode");
+        $oSearchFilter->AddCondition('parent_id', 0, '=');
+        $oSearchFilter->AddCondition('type', 'user', '=');
+        $oSearchFilter->AddCondition('user_id', UserRights::GetUserId(), '=');
+        // There may be more criteria added later to have a specific menu based on the user's profile
+        $oSet = new CMDBObjectSet($oSearchFilter, array('rank' => true));
+        while ($oRootMenuNode = $oSet->Fetch())
+        {
+        	$oRootMenuNode->DisplayMenu($this, 'user', $oAppContext->GetAsHash());
+        }
+		$this->AddToMenu("</ul>\n");
+    }
+
+	/**
+	 * Outputs (via some echo) the complete HTML page by assembling all its elements
+	 */
+    public function output()
+    {
+        foreach($this->a_headers as $s_header)
+        {
+            header($s_header);
+        }
+        $s_captured_output = ob_get_contents();
+        ob_end_clean();
+        echo "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\n";
+        echo "<html>\n";
+        echo "<head>\n";
+        echo "<title>{$this->s_title}</title>\n";
+        foreach($this->a_linked_scripts as $s_script)
+        {
+            echo "<script type=\"text/javascript\" src=\"$s_script\"></script>\n";
+        }
+        if (count($this->m_aReadyScripts)>0)
+        {
+			$this->add_script("\$(document).ready(function() {\n".implode("\n", $this->m_aReadyScripts)."\n});");
+		}
+        if (count($this->a_scripts)>0)
+        {
+            echo "<script type=\"text/javascript\">\n";
+            foreach($this->a_scripts as $s_script)
+            {
+                echo "$s_script\n";
+            }
+            echo "</script>\n";
+        }
+        foreach($this->a_linked_stylesheets as $a_stylesheet)
+        {
+			if ($a_stylesheet['condition'] != "")
+			{
+				echo "<!--[if {$a_stylesheet['condition']}]>\n";
+			}
+            echo "<link rel=\"stylesheet\" type=\"text/css\" href=\"{$a_stylesheet['link']}\" />\n";
+			if ($a_stylesheet['condition'] != "")
+			{
+				echo "<![endif]-->\n";
+			}
+        }
+        
+        if (count($this->a_styles)>0)
+        {
+            echo "<style>\n";
+            foreach($this->a_styles as $s_style)
+            {
+                echo "$s_style\n";
+            }
+            echo "</style>\n";
+        }
+		echo "<link rel=\"search\" type=\"application/opensearchdescription+xml\" title=\"iTop\" href=\"./opensearch.xml.php\">\n";
+        echo "</head>\n";
+        echo "<body>\n";
+
+		// Display the header
+		echo "<div id=\"Header\">\n";
+		echo "<div class=\"iTopLogo\"><span>iTop</span></div>\n";
+		//echo "<div id=\"GlobalSearch\"><div style=\"border: 1px solid #999; padding:1px; background-color:#fff;\"><img src=\"/images/magnifier.gif\"/><input style=\"border:0\" type=\"text\" size=\"15\" title=\"Global Search\"></input></div></div>\n";
+		$sText = Utils::ReadParam('text', '');
+		$sOnClick = "";
+		if (empty($sText))
+		{
+			// if no search text is supplied then
+			// 1) the search text is filled with "your search"
+			// 2) clicking on it will erase it
+			$sText = "Your search";
+			$sOnClick = " onclick=\"this.value='';this.onclick=null;\"";
+		}
+		echo "<div id=\"OrganizationSelection\" style=\"position:absolute; top:18px; right:16px; width:400px;\">";
+		echo "<form action=\"../pages/UI.php\" style=\"display:inline\"><div style=\"padding:1px; background-color:#fff;display:inline;\"><img src=\"../images/magnifier.gif\"/><input style=\"border:0\" type=\"text\" size=\"15\" title=\"Global Search\" name=\"text\" value=\"$sText\"$sOnClick></input></div><input type=\"Submit\" value=\"Search\">
+			  <input type=\"hidden\" name=\"operation\" value=\"full_text\"></form>\n";
+		echo "</div>\n";
+
+		echo "</div>\n";
+
+		// Display the menu
+		echo "<div id=\"MySplitter\">\n";
+		echo "  <div id=\"LeftPane\">\n";
+		echo $this->m_sMenu;
+		echo "  </div> <!-- LeftPane -->\n";
+		
+		echo "<div id=\"RightPane\">\n";
+        
+		// Render the tabs in the page (if any)
+		foreach($this->m_aTabs as $sTabContainerName => $m_aTabs)
+		{
+			$sTabs = '';
+			if (count($m_aTabs) > 0)
+			{
+			  $sTabs = "<!-- tabs -->\n<div id=\"tabbedContent\" class=\"light\">\n";
+			  $sTabs .= "<ul>\n";
+			  // Display the unordered list that will be rendered as the tabs
+	          $i = 0;
+			  foreach($m_aTabs as $sTabName => $sTabContent)
+			  {
+			      $sTabs .= "<li><a href=\"#fragment_$i\" class=\"tab\"><span>".htmlentities($sTabName)."</span></a></li>\n";
+			      $i++;
+	          }
+			  $sTabs .= "</ul>\n";
+			  // Now add the content of the tabs themselves
+			  $i = 0;
+			  foreach($m_aTabs as $sTabName => $sTabContent)
+			  {
+			      $sTabs .= "<div id=\"fragment_$i\">".$sTabContent."</div>\n";
+			      $i++;
+	          }
+			  $sTabs .= "</div>\n<!-- end of tabs-->\n";
+	        }
+			$this->s_content = str_replace("\$Tabs:$sTabContainerName\$", $sTabs, $this->s_content);
+		}
+        
+		// Display the page's content
+        echo $this->s_content;
+
+        // Add the captured output
+        if (trim($s_captured_output) != "")
+        {
+            echo "<div class=\"raw_output\">$s_captured_output</div>\n";
+        }
+		echo "<div class=\"jqmWindow\" id=\"ex2\">Please wait...</div>\n"; // jqModal Window
+		echo "</div> <!-- RightPane -->\n";
+		echo "</div> <!-- Splitter -->\n";
+		echo "<div class=\"jqmWindow\" id=\"ModalDlg\"></div>";
+		echo "</body>\n";
+        echo "</html>\n";
+    }
+	
+	public function AddTabContainer($sTabContainer)
+	{
+		$this->m_aTabs[$sTabContainer] = array();
+		$this->add("\$Tabs:$sTabContainer\$");
+	}
+	
+	public function AddToTab($sTabContainer, $sTabLabel, $sHtml)
+	{
+		if (!isset($this->m_aTabs[$sTabContainer][$sTabLabel]))
+		{
+			// Set the content of the tab
+			$this->m_aTabs[$sTabContainer][$sTabLabel] = $sHtml;
+		}
+		else
+		{
+			// Append to the content of the tab
+			$this->m_aTabs[$sTabContainer][$sTabLabel] .= $sHtml;
+		}
+	}
+
+	public function SetCurrentTabContainer($sTabContainer = '')
+	{
+		$sPreviousTabContainer = $this->m_sCurrentTabContainer;
+		$this->m_sCurrentTabContainer = $sTabContainer;
+		return $sPreviousTabContainer;
+	}
+
+	public function SetCurrentTab($sTabLabel = '')
+	{
+		$sPreviousTab = $this->m_sCurrentTab;
+		$this->m_sCurrentTab = $sTabLabel;
+		return $sPreviousTab;
+	}
+	
+	public function StartCollapsibleSection($sSectionLabel, $bOpen = false)
+	{
+		$this->add($this->GetStartCollapsibleSection($sSectionLabel, $bOpen));
+	}
+
+	public function GetStartCollapsibleSection($sSectionLabel, $bOpen = false)
+	{
+		$sHtml = '';
+		static $iSectionId = 0;
+		$sHtml .= "<a id=\"LnkCollapse_$iSectionId\" class=\"CollapsibleLabel\" href=\"#\">$sSectionLabel</a></br>\n";
+		$sStyle = $bOpen ? '' : 'style="display:none" ';
+		$sHtml .= "<div id=\"Collapse_$iSectionId\" $sStyle>";
+		$this->add_ready_script("\$(\"#LnkCollapse_$iSectionId\").click(function() {\$(\"#Collapse_$iSectionId\").slideToggle('normal'); $(\"#LnkCollapse_$iSectionId\").toggleClass('open');});");
+		//$this->add_ready_script("$('#LnkCollapse_$iSectionId').hide();");
+		$iSectionId++;
+		return $sHtml;
+	}
+
+	public function EndCollapsibleSection()
+	{
+		$this->add($this->GetEndCollapsibleSection());
+	}
+
+	public function GetEndCollapsibleSection()
+	{
+		return "</div>";
+	}
+
+    public function add($sHtml)
+    {
+        if (!empty($this->m_sCurrentTabContainer) && !empty($this->m_sCurrentTab))
+        {
+            $this->AddToTab($this->m_sCurrentTabContainer, $this->m_sCurrentTab, $sHtml);
+        }
+        else
+        {
+            parent::add($sHtml);
+        }
+    }
+    
+    /*
+    public function AddSearchForm($sClassName, $bOpen = false)
+    {
+    	$iSearchSectionId = 0;
+    	
+		$sStyle = $bOpen ? 'SearchDrawer' : 'SearchDrawer DrawerClosed';
+		$this->add("<div id=\"Search_$iSearchSectionId\" class=\"$sStyle\">\n");
+		$this->add("<h1>Search form for ".Metamodel::GetName($sClassName)."</h1>\n");
+		$this->add_ready_script("\$(\"#LnkSearch_$iSearchSectionId\").click(function() {\$(\"#Search_$iSearchSectionId\").slideToggle('normal'); $(\"#LnkSearch_$iSearchSectionId\").toggleClass('open');});");
+		$oFilter = new DBObjectSearch($sClassName);
+		$sFilter = $oFilter->serialize();
+		$oSet = new CMDBObjectSet($oFilter);
+		cmdbAbstractObject::DisplaySearchForm($this, $oSet, array('operation' => 'search', 'filter' => $sFilter, 'search_form' => true));
+ 		$this->add("</div>\n");
+ 		$this->add("<div class=\"HRDrawer\"/></div>\n");
+ 		$this->add("<div id=\"LnkSearch_$iSearchSectionId\" class=\"DrawerHandle\">Search</div>\n");
+
+    	
+    	$iSearchSectionId++;
+	}
+	*/
+}
+
+?>

tags/0.7.1/core/userrights.class.inc.php

@@ -0,0 +1,211 @@
+<?php
+
+/**
+ * UserRights
+ * User management API 
+ *
+ * @package     iTopORM
+ * @author      Romain Quetiez <romainquetiez@yahoo.fr>
+ * @author      Denis Flaven <denisflave@free.fr>
+ * @license     http://www.opensource.org/licenses/lgpl-license.php LGPL
+ * @link        www.itop.com
+ * @since       1.0
+ * @version     1.1.1.1 $
+ */
+
+class UserRightException extends CoreException
+{
+}
+
+
+define('UR_ALLOWED_NO', 0);
+define('UR_ALLOWED_YES', 1);
+define('UR_ALLOWED_DEPENDS', 2);
+
+define('UR_ACTION_READ', 1); // View an object
+define('UR_ACTION_MODIFY', 2); // Create/modify an object/attribute
+define('UR_ACTION_DELETE', 3); // Delete an object
+
+define('UR_ACTION_BULK_READ', 4); // Export multiple objects
+define('UR_ACTION_BULK_MODIFY', 5); // Create/modify multiple objects
+define('UR_ACTION_BULK_DELETE', 6); // Delete multiple objects
+
+define('UR_ACTION_APPLICATION_DEFINED', 10000); // Application specific actions (CSV import, View schema...)
+
+/**
+ * User management module API  
+ *
+ * @package     iTopORM
+ * @author      Romain Quetiez <romainquetiez@yahoo.fr>
+ * @license     http://www.opensource.org/licenses/lgpl-license.php LGPL
+ * @link        www.itop.com
+ * @since       1.0
+ * @version     $itopversion$
+ */
+abstract class UserRightsAddOnAPI
+{
+	abstract public function Setup(); // initial installation
+	abstract public function Init(); // loads data (possible optimizations)
+	abstract public function CheckCredentials($iUserId, $sPassword); // returns the id of the user or false
+	abstract public function GetFilter($iUserId, $sClass); // returns a filter object
+	abstract public function IsActionAllowed($iUserId, $sClass, $iActionCode, dbObjectSet $aInstances);
+	abstract public function IsStimulusAllowed($iUserId, $sClass, $sStimulusCode, dbObjectSet $aInstances);
+	abstract public function IsActionAllowedOnAttribute($iUserId, $sClass, $sAttCode, $iActionCode, dbObjectSet $aInstances);
+}
+
+
+
+/**
+ * User management core API  
+ *
+ * @package     iTopORM
+ * @author      Romain Quetiez <romainquetiez@yahoo.fr>
+ * @license     http://www.opensource.org/licenses/lgpl-license.php LGPL
+ * @link        www.itop.com
+ * @since       1.0
+ * @version     $itopversion$
+ */
+class UserRights
+{
+	protected static $m_oAddOn;
+	protected static $m_sUser;
+	protected static $m_sRealUser;
+	protected static $m_iUserId;
+	protected static $m_iRealUserId;
+
+	public static function SelectModule($sModuleName)
+	{
+		if (!class_exists($sModuleName))
+		{
+			trigger_error("Could not select this module, '$sModuleName' in not a valid class name", E_USER_ERROR);
+			return;
+		}
+		if (!is_subclass_of($sModuleName, 'UserRightsAddOnAPI'))
+		{
+			trigger_error("Could not select this module, the class '$sModuleName' is not derived from UserRightsAddOnAPI", E_USER_ERROR);
+			return;
+		}
+		self::$m_oAddOn = new $sModuleName;
+		self::$m_oAddOn->Init();
+		self::$m_sUser = '';
+		self::$m_sRealUser = '';
+		self::$m_iUserId = 0;
+		self::$m_iRealUserId = 0;
+	}
+
+	// Installation: create the very first user
+	public static function CreateAdministrator($sAdminUser, $sAdminPwd)
+	{
+		return self::$m_oAddOn->CreateAdministrator($sAdminUser, $sAdminPwd);
+	}
+	
+	// Installation (e.g: give default values for users)
+	public static function Setup()
+	{
+		// to be discussed...
+		return self::$m_oAddOn->Setup();
+	}
+
+	protected static function IsLoggedIn()
+	{
+		return (!empty(self::$m_sUser));
+	}
+
+	public static function Login($sName, $sPassword)
+	{
+		self::$m_iUserId = self::$m_oAddOn->CheckCredentials($sName, $sPassword);
+		if ( self::$m_iUserId !== false )
+		{
+			self::$m_sUser = $sName;
+			self::$m_iRealUserId = self::$m_iUserId;
+			self::$m_sRealUser = $sName;
+			return true;
+		}
+		else
+		{
+			return false;
+		}
+	}
+
+	public static function Impersonate($sName, $sPassword)
+	{
+		if (!self::CheckLogin()) return false;
+
+		self::$m_iRealUserId = self::$m_oAddOn->CheckCredentials($sName, $sPassword);
+		if ( self::$m_iRealUserId !== false)
+		{
+			self::$m_sUser = $sName;
+			return true;
+		}
+		else
+		{
+			return false;
+		}
+	}
+
+	public static function GetUser()
+	{
+		return self::$m_sUser;
+	}
+
+	public static function GetUserId()
+	{
+		return self::$m_iUserId;
+	}
+
+	public static function GetRealUser()
+	{
+		return self::$m_sRealUser;
+	}
+
+	public static function GetRealUserId()
+	{
+		return self::$m_iRealUserId;
+	}
+
+	protected static function CheckLogin()
+	{
+		if (!self::IsLoggedIn())
+		{
+			//throw new UserRightException('No user logged in', array());	
+			return false;
+		}
+		return true;
+	}
+
+
+	public static function GetFilter($sClass)
+	{
+		if (!MetaModel::HasCategory($sClass, 'bizModel')) return new DBObjectSearch($sClass);
+		if (!self::CheckLogin()) return false;
+
+		return self::$m_oAddOn->GetFilter(self::$m_iUserId, $sClass);
+	}
+
+	public static function IsActionAllowed($sClass, $iActionCode, dbObjectSet $aInstances)
+	{
+		if (!MetaModel::HasCategory($sClass, 'bizModel')) return true;
+		if (!self::CheckLogin()) return false;
+
+		return self::$m_oAddOn->IsActionAllowed(self::$m_iUserId, $sClass, $iActionCode, $aInstances);
+	}
+
+	public static function IsStimulusAllowed($sClass, $sStimulusCode, dbObjectSet $aInstances)
+	{
+		if (!MetaModel::HasCategory($sClass, 'bizModel')) return true;
+		if (!self::CheckLogin()) return false;
+
+		return self::$m_oAddOn->IsStimulusAllowed(self::$m_iUserId, $sClass, $sStimulusCode, $aInstances);
+	}
+
+	public static function IsActionAllowedOnAttribute($sClass, $sAttCode, $iActionCode, dbObjectSet $aInstances)
+	{
+		if (!MetaModel::HasCategory($sClass, 'bizModel')) return true;
+		if (!self::CheckLogin()) return false;
+
+		return self::$m_oAddOn->IsActionAllowedOnAttribute(self::$m_iUserId, $sClass, $sAttCode, $iActionCode, $aInstances);
+	}
+}
+
+
+?>