<?php
/* Copyright (C) 2006-2016 Laurent Destailleur  <eldy@users.sourceforge.net>
 * Copyright (C) 2024		MDW							<mdeweerd@users.noreply.github.com>
 * Copyright (C) 2024       Frédéric France             <frederic.france@free.fr>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program. If not, see <https://www.gnu.org/licenses/>.
 */

/**
 *       \file       htdocs/webservices/server_user.php
 *       \brief      File that is entry point to call Dolibarr WebServices
 */

if (!defined('NOCSRFCHECK')) {
	define('NOCSRFCHECK', '1'); // Do not check anti CSRF attack test
}
if (!defined('NOTOKENRENEWAL')) {
	define('NOTOKENRENEWAL', '1'); // Do not check anti POST attack test
}
if (!defined('NOREQUIREMENU')) {
	define('NOREQUIREMENU', '1'); // If there is no need to load and show top and left menu
}
if (!defined('NOREQUIREHTML')) {
	define('NOREQUIREHTML', '1'); // If we don't need to load the html.form.class.php
}
if (!defined('NOREQUIREAJAX')) {
	define('NOREQUIREAJAX', '1'); // Do not load ajax.lib.php library
}
if (!defined("NOLOGIN")) {
	define("NOLOGIN", '1'); // If this page is public (can be called outside logged session)
}
if (!defined("NOSESSION")) {
	define("NOSESSION", '1');
}

require '../main.inc.php';
require_once NUSOAP_PATH.'/nusoap.php'; // Include SOAP
require_once DOL_DOCUMENT_ROOT.'/core/lib/ws.lib.php';
require_once DOL_DOCUMENT_ROOT.'/user/class/user.class.php';
require_once DOL_DOCUMENT_ROOT.'/contact/class/contact.class.php';
require_once DOL_DOCUMENT_ROOT.'/core/lib/security2.lib.php';
require_once DOL_DOCUMENT_ROOT.'/core/class/extrafields.class.php';


dol_syslog("Call User webservices interfaces");

$langs->load("main");

// Enable and test if module web services is enabled
if (!getDolGlobalString('MAIN_MODULE_WEBSERVICES')) {
	$langs->load("admin");
	dol_syslog("Call Dolibarr webservices interfaces with module webservices disabled");
	print $langs->trans("WarningModuleNotActive", 'WebServices').'.<br><br>';
	print $langs->trans("ToActivateModule");
	exit;
}

// Create the soap Object
$server = new nusoap_server();
$server->soap_defencoding = 'UTF-8';
$server->decode_utf8 = false;
$ns = 'http://www.dolibarr.org/ns/';
$server->configureWSDL('WebServicesDolibarrUser', $ns);
$server->wsdl->schemaTargetNamespace = $ns;


// Define WSDL Authentication object
$server->wsdl->addComplexType(
	'authentication',
	'complexType',
	'struct',
	'all',
	'',
	array(
		'dolibarrkey' => array('name' => 'dolibarrkey', 'type' => 'xsd:string'),
		'sourceapplication' => array('name' => 'sourceapplication', 'type' => 'xsd:string'),
		'login' => array('name' => 'login', 'type' => 'xsd:string'),
		'password' => array('name' => 'password', 'type' => 'xsd:string'),
		'entity' => array('name' => 'entity', 'type' => 'xsd:string'),
	)
);

// Define WSDL Return object
$server->wsdl->addComplexType(
	'result',
	'complexType',
	'struct',
	'all',
	'',
	array(
		'result_code' => array('name' => 'result_code', 'type' => 'xsd:string'),
		'result_label' => array('name' => 'result_label', 'type' => 'xsd:string'),
	)
);

// Define other specific objects
$server->wsdl->addComplexType(
	'user',
	'complexType',
	'struct',
	'all',
	'',
	array(
		'element' => array('name' => 'element', 'type' => 'xsd:string'),
		'id' => array('name' => 'id', 'type' => 'xsd:string'),
		'lastname' => array('name' => 'lastname', 'type' => 'xsd:string'),
		'firstname' => array('name' => 'firstname', 'type' => 'xsd:string'),
		'note' => array('name' => 'note', 'type' => 'xsd:string'),
		'email' => array('name' => 'email', 'type' => 'xsd:string'),
		'signature' => array('name' => 'signature', 'type' => 'xsd:string'),
		'office_phone' => array('name' => 'office_phone', 'type' => 'xsd:string'),
		'office_fax' => array('name' => 'office_fax', 'type' => 'xsd:string'),
		'user_mobile' => array('name' => 'user_mobile', 'type' => 'xsd:string'),
		'admin' => array('name' => 'admin', 'type' => 'xsd:string'),
		'login' => array('name' => 'login', 'type' => 'xsd:string'),
		'entity' => array('name' => 'entity', 'type' => 'xsd:string'),
		'pass_indatabase' => array('name' => 'pass_indatabase', 'type' => 'xsd:string'),
		'pass_indatabase_crypted' => array('name' => 'pass_indatabase_crypted', 'type' => 'xsd:string'),
		'datec' => array('name' => 'datec', 'type' => 'xsd:dateTime'),
		'datem' => array('name' => 'datem', 'type' => 'xsd:dateTime'),
		'fk_thirdparty' => array('name' => 'fk_thirdparty', 'type' => 'xsd:string'),
		'fk_contact' => array('name' => 'fk_contact', 'type' => 'xsd:string'),
		'fk_member' => array('name' => 'fk_member', 'type' => 'xsd:string'),
		'datelastlogin' => array('name' => 'datelastlogin', 'type' => 'xsd:dateTime'),
		'datepreviouslogin' => array('name' => 'datepreviouslogin', 'type' => 'xsd:dateTime'),
		'statut' => array('name' => 'statut', 'type' => 'xsd:string'),
		'photo' => array('name' => 'photo', 'type' => 'xsd:string'),
		'lang' => array('name' => 'lang', 'type' => 'xsd:string'),
		'entrepots' => array('name' => 'entrepots', 'type' => 'xsd:string'),
		//'rights' => array('name'=>'rights','type'=>'xsd:string'),
		'canvas' => array('name' => 'canvas', 'type' => 'xsd:string')
	)
);

// Define other specific objects
$server->wsdl->addComplexType(
	'group',
	'complexType',
	'struct',
	'all',
	'',
	array(
	'name' => array('name' => 'name', 'type' => 'xsd:string'),
	'id' => array('name' => 'id', 'type' => 'xsd:string'),
	'datec' => array('name' => 'datec', 'type' => 'xsd:string'),
	'nb' => array('name' => 'nb', 'type' => 'xsd:string')
	)
);

$server->wsdl->addComplexType(
	'GroupsArray',
	'complexType',
	'array',
	'',
	'SOAP-ENC:Array',
	array(),
	array(
	array('ref' => 'SOAP-ENC:arrayType', 'wsdl:arrayType' => 'tns:group[]')
	),
	'tns:group'
);

$thirdpartywithuser_fields = array(
	// For thirdparty and contact
	'name' => array('name' => 'name', 'type' => 'xsd:string'),
	'firstname' => array('name' => 'firstname', 'type' => 'xsd:string'),
	'name_thirdparty' => array('name' => 'name_thirdparty', 'type' => 'xsd:string'),
	'ref_ext' => array('name' => 'ref_ext', 'type' => 'xsd:string'),
	'client' => array('name' => 'client', 'type' => 'xsd:string'),
	'fournisseur' => array('name' => 'fournisseur', 'type' => 'xsd:string'),
	'address' => array('name' => 'address', 'type' => 'xsd:string'),
	'zip' => array('name' => 'zip', 'type' => 'xsd:string'),
	'town' => array('name' => 'town', 'type' => 'xsd:string'),
	'country_id' => array('name' => 'country_id', 'type' => 'xsd:string'),
	'country_code' => array('name' => 'country_code', 'type' => 'xsd:string'),
	'phone' => array('name' => 'phone', 'type' => 'xsd:string'),
	'phone_mobile' => array('name' => 'phone_mobile', 'type' => 'xsd:string'),
	'fax' => array('name' => 'fax', 'type' => 'xsd:string'),
	'email' => array('name' => 'email', 'type' => 'xsd:string'),
	'url' => array('name' => 'url', 'type' => 'xsd:string'),
	'profid1' => array('name' => 'profid1', 'type' => 'xsd:string'),
	'profid2' => array('name' => 'profid2', 'type' => 'xsd:string'),
	'profid3' => array('name' => 'profid3', 'type' => 'xsd:string'),
	'profid4' => array('name' => 'profid4', 'type' => 'xsd:string'),
	'profid5' => array('name' => 'profid5', 'type' => 'xsd:string'),
	'profid6' => array('name' => 'profid6', 'type' => 'xsd:string'),
	'capital' => array('name' => 'capital', 'type' => 'xsd:string'),
	'tva_assuj' => array('name' => 'tva_assuj', 'type' => 'xsd:string'),
	'tva_intra' => array('name' => 'tva_intra', 'type' => 'xsd:string'),
	// 	For user
	'login' => array('name' => 'login', 'type' => 'xsd:string'),
	'password' => array('name' => 'password', 'type' => 'xsd:string'),
	'group_id' => array('name' => 'group_id', 'type' => 'xsd:string')
);

$elementtype = 'socpeople';

// Retrieve all extrafield for contact
// fetch optionals attributes and labels
$extrafields = new ExtraFields($db);
$extrafields->fetch_name_optionals_label($elementtype, true);
$extrafield_array = null;
if (is_array($extrafields->attributes) && $extrafields->attributes[$elementtype]['count'] > 0) {
	$extrafield_array = array();
}
if (isset($extrafields->attributes[$elementtype]['label']) && is_array($extrafields->attributes[$elementtype]['label']) && count($extrafields->attributes[$elementtype]['label'])) {
	foreach ($extrafields->attributes[$elementtype]['label'] as $key => $label) {
		$type = $extrafields->attributes[$elementtype]['type'][$key];
		if ($type == 'date' || $type == 'datetime') {
			$type = 'xsd:dateTime';
		} else {
			$type = 'xsd:string';
		}

		$extrafield_array['contact_options_'.$key] = array('name' => 'contact_options_'.$key, 'type' => $type);
	}
}

if (is_array($extrafield_array)) {
	$thirdpartywithuser_fields = array_merge($thirdpartywithuser_fields, $extrafield_array);
}


$server->wsdl->addComplexType(
	'thirdpartywithuser',
	'complexType',
	'struct',
	'all',
	'',
	$thirdpartywithuser_fields
);

// Define WSDL user short object
$server->wsdl->addComplexType(
	'shortuser',
	'complexType',
	'struct',
	'all',
	'',
	array(
	'login' => array('name' => 'login', 'type' => 'xsd:string'),
	'password' => array('name' => 'password', 'type' => 'xsd:string'),
	'entity' => array('name' => 'entity', 'type' => 'xsd:string'),
	)
);


// 5 styles: RPC/encoded, RPC/literal, Document/encoded (not WS-I compliant), Document/literal, Document/literal wrapped
// Style merely dictates how to translate a WSDL binding to a SOAP message. Nothing more. You can use either style with any programming model.
// http://www.ibm.com/developerworks/webservices/library/ws-whichwsdl/
$styledoc = 'rpc'; // rpc/document (document is an extend into SOAP 1.0 to support unstructured messages)
$styleuse = 'encoded'; // encoded/literal/literal wrapped
// Better choice is document/literal wrapped but literal wrapped not supported by nusoap.


// Register WSDL
$server->register(
	'getUser',
	// Entry values
	array('authentication' => 'tns:authentication', 'id' => 'xsd:string', 'ref' => 'xsd:string', 'ref_ext' => 'xsd:string'),
	// Exit values
	array('result' => 'tns:result', 'user' => 'tns:user'),
	$ns,
	$ns.'#getUser',
	$styledoc,
	$styleuse,
	'WS to get user'
);

$server->register(
	'getListOfGroups',
	// Entry values
	array('authentication' => 'tns:authentication'),
	// Exit values
	array('result' => 'tns:result', 'groups' => 'tns:GroupsArray'),
	$ns,
	$ns.'#getListOfGroups',
	$styledoc,
	$styleuse,
	'WS to get list of groups'
);

$server->register(
	'createUserFromThirdparty',
	// Entry values
	array('authentication' => 'tns:authentication', 'thirdpartywithuser' => 'tns:thirdpartywithuser'),
	// Exit values
	array('result' => 'tns:result', 'id' => 'xsd:string'),
	$ns,
	$ns.'#createUserFromThirdparty',
	$styledoc,
	$styleuse,
	'WS to create an external user with thirdparty and contact'
);

$server->register(
	'setUserPassword',
	// Entry values
	array('authentication' => 'tns:authentication', 'shortuser' => 'tns:shortuser'),
	// Exit values
	array('result' => 'tns:result', 'id' => 'xsd:string'),
	$ns,
	$ns.'#setUserPassword',
	$styledoc,
	$styleuse,
	'WS to change password of an user'
);


/**
 * Get produt or service
 *
 * @param	array		$authentication		Array of authentication information
 * @param	int			$id					Id of object
 * @param	string		$ref				Ref of object
 * @param	string		$ref_ext			Ref external of object
 * @return	mixed
 */
function getUser($authentication, $id, $ref = '', $ref_ext = '')
{
	global $db, $conf;

	dol_syslog("Function: getUser login=".$authentication['login']." id=".$id." ref=".$ref." ref_ext=".$ref_ext);

	if ($authentication['entity']) {
		$conf->entity = $authentication['entity'];
	}

	// Init and check authentication
	$objectresp = array();
	$errorcode = '';
	$errorlabel = '';
	$error = 0;
	$fuser = check_authentication($authentication, $error, $errorcode, $errorlabel);
	// Check parameters
	if (!$error && (($id && $ref) || ($id && $ref_ext) || ($ref && $ref_ext))) {
		$error++;
		$errorcode = 'BAD_PARAMETERS';
		$errorlabel = "Parameter id, ref and ref_ext can't be both provided. You must choose one or other but not both.";
	}

	if (!$error) {
		$fuser->loadRights();

		if ($fuser->hasRight('user', 'user', 'lire')
			|| ($fuser->hasRight('user', 'self', 'creer') && $id && $id == $fuser->id)
			|| ($fuser->hasRight('user', 'self', 'creer') && $ref && $ref == $fuser->login)
			|| ($fuser->hasRight('user', 'self', 'creer') && $ref_ext && $ref_ext == $fuser->ref_ext)) {
			$user = new User($db);
			$result = $user->fetch($id, $ref, $ref_ext);
			if ($result > 0) {
				// Create
				$objectresp = array(
					'result' => array('result_code' => 'OK', 'result_label' => ''),
					'user' => array(
						'id' => $user->id,
						'lastname' => $user->lastname,
						'firstname' => $user->firstname,
						'note' => $user->note,
						'email' => $user->email,
						'signature' => $user->signature,
						'office_phone' => $user->office_phone,
						'office_fax' => $user->office_fax,
						'user_mobile' => $user->user_mobile,
						'admin' => $user->admin,
						'login' => $user->login,
						'entity' => $user->entity,
						'pass_indatabase' => $user->pass_indatabase,
						'pass_indatabase_crypted' => $user->pass_indatabase_crypted,
						'datec' => dol_print_date($user->datec, 'dayhourrfc'),
						'datem' => dol_print_date($user->datem, 'dayhourrfc'),
						'fk_thirdparty' => $user->socid,
						'fk_contact' => $user->contact_id,
						'fk_member' => $user->fk_member,
						'datelastlogin' => dol_print_date($user->datelastlogin, 'dayhourrfc'),
						'datepreviouslogin' => dol_print_date($user->datepreviouslogin, 'dayhourrfc'),
						'statut' => $user->statut,
						'photo' => $user->photo,
						'lang' => $user->lang,
						//'rights' => $user->rights,
						'canvas' => $user->canvas
					)
				);
			} else {
				$error++;
				$errorcode = 'NOT_FOUND';
				$errorlabel = 'Object not found for id='.$id.' nor ref='.$ref.' nor ref_ext='.$ref_ext;
			}
		} else {
			$error++;
			$errorcode = 'PERMISSION_DENIED';
			$errorlabel = 'User does not have permission for this request';
		}
	}

	if ($error) {
		$objectresp = array('result' => array('result_code' => $errorcode, 'result_label' => $errorlabel));
	}

	return $objectresp;
}

/**
 * getListOfGroups
 *
 * @param	array		$authentication		Array of authentication information
 * @return	array							Array result
 */
function getListOfGroups($authentication)
{
	global $db, $conf, $user;

	dol_syslog("Function: getListOfGroups login=".$authentication['login']);

	if ($authentication['entity']) {
		$conf->entity = $authentication['entity'];
	}

	// Init and check authentication
	$objectresp = array();
	$arraygroups = array();
	$errorcode = '';
	$errorlabel = '';
	$error = 0;
	$fuser = check_authentication($authentication, $error, $errorcode, $errorlabel);
	// Check parameters

	if (!$error) {
		$sql = "SELECT g.rowid, g.nom as name, g.entity, g.datec, COUNT(DISTINCT ugu.fk_user) as nb";
		$sql .= " FROM ".MAIN_DB_PREFIX."usergroup as g";
		$sql .= " LEFT JOIN ".MAIN_DB_PREFIX."usergroup_user as ugu ON ugu.fk_usergroup = g.rowid";
		if (isModEnabled('multicompany') && $conf->entity == 1 && (getDolGlobalString('MULTICOMPANY_TRANSVERSE_MODE') || ($user->admin && !$user->entity))) {
			$sql .= " WHERE g.entity IS NOT NULL";
		} else {
			$sql .= " WHERE g.entity IN (0,".$conf->entity.")";
		}
		$sql .= " GROUP BY g.rowid, g.nom, g.entity, g.datec";
		$resql = $db->query($sql);
		if ($resql) {
			$num = $db->num_rows($resql);

			$i = 0;
			while ($i < $num) {
				$obj = $db->fetch_object($resql);
				$arraygroups[] = array('id' => $obj->rowid, 'name' => $obj->name, 'datec' => $obj->datec, 'nb' => $obj->nb);
				$i++;
			}
		} else {
			$error++;
			$errorcode = $db->lasterrno();
			$errorlabel = $db->lasterror();
		}
	}

	if ($error) {
		$objectresp = array(
		'result' => array('result_code' => $errorcode, 'result_label' => $errorlabel),
		'groups' => $arraygroups
		);
	} else {
		$objectresp = array(
		'result' => array('result_code' => 'OK', 'result_label' => ''),
		'groups' => $arraygroups
		);
	}

	return $objectresp;
}


/**
 * Create an external user with thirdparty and contact
 *
 * @param	array		$authentication		Array of authentication information
 * @param	array		$thirdpartywithuser Datas
 * @return	mixed
 */
function createUserFromThirdparty($authentication, $thirdpartywithuser)
{
	global $db, $conf, $langs;

	dol_syslog("Function: createUserFromThirdparty login=".$authentication['login']);

	if ($authentication['entity']) {
		$conf->entity = $authentication['entity'];
	}

	$objectresp = array();
	$errorcode = '';
	$errorlabel = '';
	$error = 0;

	$fuser = check_authentication($authentication, $error, $errorcode, $errorlabel);

	if ($fuser->socid) {
		$socid = $fuser->socid;
	}

	if (!$error && !$thirdpartywithuser) {
		$error++;
		$errorcode = 'BAD_PARAMETERS';
		$errorlabel = "Parameter thirdparty must be provided.";
	}

	if (!$error) {
		$fuser->loadRights();

		if ($fuser->hasRight('societe', 'creer')) {
			$thirdparty = new Societe($db);

			// If a contact / company already exists with the email, return the corresponding socid
			$sql = "SELECT s.rowid as socid FROM ".MAIN_DB_PREFIX."societe as s";
			$sql .= " LEFT JOIN ".MAIN_DB_PREFIX."socpeople as sp ON sp.fk_soc = s.rowid";
			$sql .= " WHERE s.entity=".$conf->entity;
			$sql .= " AND s.email='".$db->escape($thirdpartywithuser['email'])."'";
			$sql .= " OR sp.email='".$db->escape($thirdpartywithuser['email'])."'";
			$sql .= $db->plimit(1);

			$resql = $db->query($sql);
			if ($resql) {
				// If a company or contact is found with the same email we return an error
				$row = $db->fetch_object($resql);
				if ($row) {
					$error++;
					$errorcode = 'ALREADY_EXIST';
					$errorlabel = 'Object not create : company or contact exists '.$thirdpartywithuser['email'];
				} else {
					$db->begin();
					/*
					 * Company creation
					 */
					$thirdparty->name = $thirdpartywithuser['name_thirdparty'];
					$thirdparty->ref_ext = $thirdpartywithuser['ref_ext'];
					$thirdparty->address = $thirdpartywithuser['address'];
					$thirdparty->zip = $thirdpartywithuser['zip'];
					$thirdparty->town = $thirdpartywithuser['town'];
					$thirdparty->country_id = $thirdpartywithuser['country_id'];
					$thirdparty->country_code = $thirdpartywithuser['country_code'];

					// find the country id by code
					$langs->load("dict");

					$sql = "SELECT rowid";
					$sql .= " FROM ".MAIN_DB_PREFIX."c_country";
					$sql .= " WHERE active = 1";
					$sql .= " AND code='".$db->escape($thirdparty->country_code)."'";

					$resql = $db->query($sql);
					if ($resql) {
						$num = $db->num_rows($resql);
						if ($num) {
							$obj = $db->fetch_object($resql);
							$thirdparty->country_id = $obj->rowid;
						}
					}
					$thirdparty->phone = $thirdpartywithuser['phone'];
					$thirdparty->fax = $thirdpartywithuser['fax'];
					$thirdparty->email = $thirdpartywithuser['email'];
					$thirdparty->url = $thirdpartywithuser['url'];
					$thirdparty->ape = $thirdpartywithuser['ape'];
					$thirdparty->idprof1 = $thirdpartywithuser['prof1'];
					$thirdparty->idprof2 = $thirdpartywithuser['prof2'];
					$thirdparty->idprof3 = $thirdpartywithuser['prof3'];
					$thirdparty->idprof4 = $thirdpartywithuser['prof4'];
					$thirdparty->idprof5 = $thirdpartywithuser['prof5'];
					$thirdparty->idprof6 = $thirdpartywithuser['prof6'];

					$thirdparty->client = $thirdpartywithuser['client'];
					$thirdparty->fournisseur = $thirdpartywithuser['fournisseur'];

					$socid_return = $thirdparty->create($fuser);

					if ($socid_return > 0) {
						$thirdparty->fetch($socid_return);

						/*
						 * Contact creation
						*
						*/
						$contact = new Contact($db);
						$contact->socid = $thirdparty->id;
						$contact->lastname = $thirdpartywithuser['name'];
						$contact->firstname = $thirdpartywithuser['firstname'];
						$contact->civility_id = $thirdparty->civility_id;
						$contact->address = $thirdparty->address;
						$contact->zip = $thirdparty->zip;
						$contact->town = $thirdparty->town;
						$contact->email = $thirdparty->email;
						$contact->phone_pro = $thirdparty->phone;
						$contact->phone_mobile = $thirdpartywithuser['phone_mobile'];
						$contact->fax = $thirdparty->fax;
						$contact->statut = 1;
						$contact->country_id = $thirdparty->country_id;
						$contact->country_code = $thirdparty->country_code;

						$elementtype = 'socpeople';

						//Retrieve all extrafield for thirdparties
						// fetch optionals attributes and labels
						$extrafields = new ExtraFields($db);
						$extrafields->fetch_name_optionals_label($elementtype, true);
						if (isset($extrafields->attributes[$elementtype]['label']) && is_array($extrafields->attributes[$elementtype]['label']) && count($extrafields->attributes[$elementtype]['label'])) {
							foreach ($extrafields->attributes[$elementtype]['label'] as $key => $label) {
								$key = 'contact_options_'.$key;
								$key = substr($key, 8); // Remove 'contact_' prefix
								$contact->array_options[$key] = $thirdpartywithuser[$key];
							}
						}

						$contact_id = $contact->create($fuser);

						if ($contact_id > 0) {
							/*
							 * User creation
							*
							*/
							$edituser = new User($db);

							$id = $edituser->create_from_contact($contact, $thirdpartywithuser["login"]);
							if ($id > 0) {
								$edituser->setPassword($fuser, trim($thirdpartywithuser['password']));

								if ($thirdpartywithuser['group_id'] > 0) {
									$edituser->SetInGroup($thirdpartywithuser['group_id'], $conf->entity);
								}
							} else {
								$error++;
								$errorcode = 'NOT_CREATE';
								$errorlabel = 'Object not create : '.$edituser->error;
							}
						} else {
							$error++;
							$errorcode = 'NOT_CREATE';
							$errorlabel = 'Object not create : '.$contact->error;
						}

						if (!$error) {
							$db->commit();
							$objectresp = array('result' => array('result_code' => 'OK', 'result_label' => 'SUCCESS'), 'id' => $socid_return);
						}
					} else {
						$error++;
						$errorcode = implode(', ', ($thirdparty->error ? array($thirdparty->error) : $thirdparty->errors));
					}
				}
			} else {
				// retour creation KO
				$error++;
				$errorcode = 'NOT_CREATE';
				$errorlabel = 'Object not create';
			}
		} else {
			$error++;
			$errorcode = 'PERMISSION_DENIED';
			$errorlabel = 'User does not have permission for this request';
		}
	}

	if ($error) {
		$db->rollback();
		$objectresp = array(
			'result' => array('result_code' => $errorcode, 'result_label' => $errorlabel)
		);
	}

	return $objectresp;
}


/**
 * Set password of an user
 *
 * @param	array		$authentication		Array of authentication information
 * @param	array		$shortuser			Array of login/password info
 * @return	mixed
 */
function setUserPassword($authentication, $shortuser)
{
	global $db, $conf;

	dol_syslog("Function: setUserPassword login=".$authentication['login']);

	if ($authentication['entity']) {
		$conf->entity = $authentication['entity'];
	}

	$objectresp = array();
	$errorcode = '';
	$errorlabel = '';
	$error = 0;

	$fuser = check_authentication($authentication, $error, $errorcode, $errorlabel);

	if ($fuser->socid) {
		$socid = $fuser->socid;
	}

	if (!$error && !$shortuser) {
		$error++;
		$errorcode = 'BAD_PARAMETERS';
		$errorlabel = "Parameter shortuser must be provided.";
	}

	if (!$error) {
		$fuser->loadRights();

		if ($fuser->hasRight('user', 'user', 'password') || $fuser->hasRight('user', 'self', 'password')) {
			$userstat = new User($db);
			$res = $userstat->fetch('', $shortuser['login']);
			if ($res) {
				$res = $userstat->setPassword($userstat, $shortuser['password']);
				if (is_int($res) && $res < 0) {
					$error++;
					$errorcode = 'NOT_MODIFIED';
					$errorlabel = 'Error when changing password';
				} else {
					$objectresp = array(
						'result' => array('result_code' => 'OK', 'result_label' => ''),
					);
				}
			} else {
				$error++;
				$errorcode = 'NOT_FOUND';
				$errorlabel = 'User not found';
			}
		} else {
			$error++;
			$errorcode = 'PERMISSION_DENIED';
			$errorlabel = 'User does not have permission for this request';
		}
	}


	if ($error) {
		$objectresp = array(
			'result' => array('result_code' => $errorcode, 'result_label' => $errorlabel)
		);
	}

	return $objectresp;
}

// Return the results.
$server->service(file_get_contents("php://input"));