zoneminder/web/includes/actions/group.php

<?php
//
// ZoneMinder web action file
// Copyright (C) 2019 ZoneMinder LLC
//
// This program is free software; you can redistribute it and/or
// modify it under the terms of the GNU General Public License
// as published by the Free Software Foundation; either version 2
// of the License, or (at your option) any later version.
//
// This program is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with this program; if not, write to the Free Software
// Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
//

// Group edit actions
# Should probably verify that each monitor id is a valid monitor, that we have access to.
# However at the moment, you have to have System permissions to do this
if ( !canEdit('Groups') ) {
  ZM\Warning('Need group edit permissions to edit groups');
  return;
}

if ( $action == 'save' ) {
  $group_id = null;
  if ( !empty($_REQUEST['gid']) )
    $group_id = $_REQUEST['gid'];
  $group = new ZM\Group($group_id);
  $group->save(
      array(
      'Name'=>  $_REQUEST['newGroup']['Name'],
      'ParentId'=>( $_REQUEST['newGroup']['ParentId'] == '' ? null : $_REQUEST['newGroup']['ParentId'] ),
      )
    );
  dbQuery('DELETE FROM `Groups_Monitors` WHERE `GroupId`=?', array($group_id));
  $group_id = $group->Id();
  if ( $group_id ) {
    foreach ( $_REQUEST['newGroup']['MonitorIds'] as $mid ) {
      dbQuery('INSERT INTO `Groups_Monitors` (`GroupId`,`MonitorId`) VALUES (?,?)', array($group_id, $mid));
    }
  }
  $redirect = '?view=groups';
}
?>