1<?php
2# MantisBT - A PHP based bugtracking system
3
4# MantisBT is free software: you can redistribute it and/or modify
5# it under the terms of the GNU General Public License as published by
6# the Free Software Foundation, either version 2 of the License, or
7# (at your option) any later version.
8#
9# MantisBT is distributed in the hope that it will be useful,
10# but WITHOUT ANY WARRANTY; without even the implied warranty of
11# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
12# GNU General Public License for more details.
13#
14# You should have received a copy of the GNU General Public License
15# along with MantisBT.  If not, see <http://www.gnu.org/licenses/>.
16
17/**
18 * CALLERS
19 * This page is called from:
20 * - account_prefs_inc.php
21 *
22 * EXPECTED BEHAVIOUR
23 * - Reset the user's preferences to default values
24 * - Redirect to account_prefs_page.php or another page, if given
25 *
26 * CALLS
27 * This page conditionally redirects upon completion
28 *
29 * RESTRICTIONS & PERMISSIONS
30 * - User must be authenticated
31 *	- User must not be protected
32 *
33 * @package MantisBT
34 * @copyright Copyright 2000 - 2002  Kenzaburo Ito - kenito@300baud.org
35 * @copyright Copyright 2002  MantisBT Team - mantisbt-dev@lists.sourceforge.net
36 * @link http://www.mantisbt.org
37 *
38 * @uses core.php
39 * @uses access_api.php
40 * @uses authentication_api.php
41 * @uses config_api.php
42 * @uses form_api.php
43 * @uses gpc_api.php
44 * @uses print_api.php
45 * @uses string_api.php
46 * @uses user_api.php
47 * @uses user_pref_api.php
48 */
49
50require_once( 'core.php' );
51require_api( 'access_api.php' );
52require_api( 'authentication_api.php' );
53require_api( 'config_api.php' );
54require_api( 'form_api.php' );
55require_api( 'gpc_api.php' );
56require_api( 'print_api.php' );
57require_api( 'string_api.php' );
58require_api( 'user_api.php' );
59require_api( 'user_pref_api.php' );
60
61#============ Parameters ============
62$f_user_id = gpc_get_int( 'user_id' );
63$f_redirect_url	= string_sanitize_url( gpc_get_string( 'redirect_url', 'account_prefs_page.php' ) );
64
65#============ Permissions ============
66form_security_validate( 'account_prefs_reset' );
67
68auth_ensure_user_authenticated();
69
70user_ensure_exists( $f_user_id );
71
72$t_user = user_get_row( $f_user_id );
73
74# This page is currently called from the manage_* namespace and thus we
75# have to allow authorised users to update the accounts of other users.
76# TODO: split this functionality into manage_user_prefs_reset.php
77if( auth_get_current_user_id() != $f_user_id ) {
78	access_ensure_global_level( config_get( 'manage_user_threshold' ) );
79	access_ensure_global_level( $t_user['access_level'] );
80} else {
81	# Protected users should not be able to update the preferences of their
82	# user account. The anonymous user is always considered a protected
83	# user and hence will also not be allowed to update preferences.
84	user_ensure_unprotected( $f_user_id );
85}
86
87user_pref_reset( $f_user_id, ALL_PROJECTS );
88
89form_security_purge( 'account_prefs_reset' );
90
91print_header_redirect( $f_redirect_url, true, true );
92