<?php declare(strict_types = 0);
class CControllerUsergroupUpdate extends CController {
protected function checkInput() {
'usrgrpid' => 'required|db usrgrp.usrgrpid',
'name' => 'not_empty|db usrgrp.name',
'userids' => 'array_db users.userid',
'gui_access' => 'db usrgrp.gui_access|in '.implode(',', [GROUP_GUI_ACCESS_SYSTEM, GROUP_GUI_ACCESS_INTERNAL, GROUP_GUI_ACCESS_LDAP, GROUP_GUI_ACCESS_DISABLED]),
'userdirectoryid' => 'db usrgrp.userdirectoryid',
'users_status' => 'db usrgrp.users_status|in '.GROUP_STATUS_ENABLED.','.GROUP_STATUS_DISABLED,
'debug_mode' => 'db usrgrp.debug_mode|in '.GROUP_DEBUG_MODE_ENABLED.','.GROUP_DEBUG_MODE_DISABLED,
'ms_hostgroup_right' => 'array',
'hostgroup_right' => 'array',
'ms_templategroup_right' => 'array',
'templategroup_right' => 'array',
'tag_filters' => 'array',
'form_refresh' => 'int32'
$ret = $this->validateInput($fields);
switch ($this->getValidationError()) {
case self::VALIDATION_ERROR:
$response = new CControllerResponseRedirect(
->setArgument('action', 'usergroup.edit')
->setArgument('usrgrpid', $this->getInput('usrgrpid'))
$response->setFormData($this->getInputAll());
CMessageHelper::setErrorTitle(_('Cannot update user group'));
$this->setResponse($response);
case self::VALIDATION_FATAL_ERROR:
$this->setResponse(new CControllerResponseFatal());
protected function checkPermissions() {
return $this->checkAccess(CRoleHelper::UI_ADMINISTRATION_USER_GROUPS);
protected function doAction() {
'users' => zbx_toObject($this->getInput('userids', []), 'userid'),
'hostgroup_rights' => [],
'templategroup_rights' => [],
$this->getInputs($user_group, ['usrgrpid', 'users_status', 'gui_access', 'debug_mode',
'userdirectoryid', 'mfaid'
$user_group['name'] = trim($this->getInput('name'));
$db_hostgroups = API::HostGroup()->get([
'output' => ['groupid', 'name']
$db_templategroups = API::TemplateGroup()->get([
'output' => ['groupid', 'name']
$templategroup_rigts = [];
$this->getInputs($hostgroup_rights, ['ms_hostgroup_right', 'hostgroup_right']);
$this->getInputs($templategroup_rigts, ['ms_templategroup_right', 'templategroup_right']);
if (!checkGroupsExist($hostgroup_rights, $db_hostgroups, 'ms_hostgroup_right')