Zabbix

<?php declare(strict_types = 0);

/*

** Copyright (C) 2001-2025 Zabbix SIA

**

** This program is free software: you can redistribute it and/or modify it under the terms of

** the GNU Affero General Public License as published by the Free Software Foundation, version 3.

**

** This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;

** without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

** See the GNU Affero General Public License for more details.

**

** You should have received a copy of the GNU Affero General Public License along with this program.

** If not, see <https://www.gnu.org/licenses/>.

**/

​

​

class CControllerUsergroupUpdate extends CController {

​

    protected function checkInput() {

        $fields = [

            'usrgrpid' =>               'required|db usrgrp.usrgrpid',

            'name' =>                   'not_empty|db usrgrp.name',

            'userids' =>                'array_db users.userid',

            'gui_access' =>             'db usrgrp.gui_access|in '.implode(',', [GROUP_GUI_ACCESS_SYSTEM, GROUP_GUI_ACCESS_INTERNAL, GROUP_GUI_ACCESS_LDAP, GROUP_GUI_ACCESS_DISABLED]),

            'userdirectoryid' =>        'db usrgrp.userdirectoryid',

            'mfaid' =>                  'int32',

            'users_status' =>           'db usrgrp.users_status|in '.GROUP_STATUS_ENABLED.','.GROUP_STATUS_DISABLED,

            'debug_mode' =>             'db usrgrp.debug_mode|in '.GROUP_DEBUG_MODE_ENABLED.','.GROUP_DEBUG_MODE_DISABLED,

            'ms_hostgroup_right' =>     'array',

            'hostgroup_right' =>        'array',

            'ms_templategroup_right' => 'array',

            'templategroup_right' =>    'array',

            'tag_filters' =>            'array',

            'form_refresh' =>           'int32'

        ];

​

        $ret = $this->validateInput($fields);

​

        if (!$ret) {

            switch ($this->getValidationError()) {

                case self::VALIDATION_ERROR:

                    $response = new CControllerResponseRedirect(

                        (new CUrl('zabbix.php'))

                            ->setArgument('action', 'usergroup.edit')

                            ->setArgument('usrgrpid', $this->getInput('usrgrpid'))

                    );

                    $response->setFormData($this->getInputAll());

                    CMessageHelper::setErrorTitle(_('Cannot update user group'));

                    $this->setResponse($response);

                    break;

​

                case self::VALIDATION_FATAL_ERROR:

                    $this->setResponse(new CControllerResponseFatal());

                    break;

            }

        }

​

        return $ret;

    }

​

    protected function checkPermissions() {

        return $this->checkAccess(CRoleHelper::UI_ADMINISTRATION_USER_GROUPS);

    }

​

    protected function doAction() {

        $user_group = [

            'users' => zbx_toObject($this->getInput('userids', []), 'userid'),

            'hostgroup_rights' => [],

            'templategroup_rights' => [],

            'tag_filters' => []

        ];

​

        $this->getInputs($user_group, ['usrgrpid', 'users_status', 'gui_access', 'debug_mode',

            'userdirectoryid', 'mfaid'

        ]);

        $user_group['name'] = trim($this->getInput('name'));

​

        $db_hostgroups = API::HostGroup()->get([

            'output' => ['groupid', 'name']

        ]);

        $db_templategroups = API::TemplateGroup()->get([

            'output' => ['groupid', 'name']

        ]);

​

        $hostgroup_rights = [];

        $templategroup_rigts = [];

​

        $this->getInputs($hostgroup_rights, ['ms_hostgroup_right', 'hostgroup_right']);

        $this->getInputs($templategroup_rigts, ['ms_templategroup_right', 'templategroup_right']);

​

        if (!checkGroupsExist($hostgroup_rights, $db_hostgroups, 'ms_hostgroup_right')