lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Nouveau fichier

Browse Source
This commit is contained in:
Rodolphe Quiedeville 2005-08-30 13:19:09 +00:00
parent 1ecd6db530
commit feafd44987
1 changed files with 271 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

271
htdocs/telephonie/tarifs/permissions.php Normal file
View File

@ -0,0 +1,271 @@
<?PHP
/* Copyright (C) 2005 Rodolphe Quiedeville <rodolphe@quiedeville.org>
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*
* $Id$
* $Source$
*
*/
require("./pre.inc.php");
if (!$user->rights->telephonie->tarif->permission)
accessforbidden();
if ($_POST["action"] == 'perms')
{
if ($_POST["perms"] == 0)
{
$sql = "DELETE FROM ".MAIN_DB_PREFIX."telephonie_tarif_grille_rights";
$sql .= " WHERE fk_user = '".$_POST["user"]."'";
$sql .= " AND fk_grille = '".$_POST["grille"]."';";
$db->query($sql);
}
if ($_POST["perms"] == 1)
{
$sql = "UPDATE ".MAIN_DB_PREFIX."telephonie_tarif_grille_rights";
$sql .= " SET pread= 1, pwrite = 0 WHERE fk_user = '".$_POST["user"]."'";
$sql .= " AND fk_grille = '".$_POST["grille"]."';";
if ( $db->query($sql) )
{
if ($db->affected_rows($resql) == 0)
{
$sql = "INSERT INTO ".MAIN_DB_PREFIX."telephonie_tarif_grille_rights";
$sql .= " (pread,pwrite, fk_user, fk_grille) VALUES ";
$sql .= " (1,0,'".$_POST["user"]."','".$_POST["grille"]."');";
if ( $db->query($sql) )
{
}
}
}
}
if ($_POST["perms"] == 2)
{
$sql = "UPDATE ".MAIN_DB_PREFIX."telephonie_tarif_grille_rights";
$sql .= " SET pread= 1, pwrite = 1 WHERE fk_user = '".$_POST["user"]."'";
$sql .= " AND fk_grille = '".$_POST["grille"]."';";
if ( $db->query($sql) )
{
if ($db->affected_rows($resql) == 0)
{
$sql = "INSERT INTO ".MAIN_DB_PREFIX."telephonie_tarif_grille_rights";
$sql .= " (pread,pwrite, fk_user, fk_grille) VALUES ";
$sql .= " (1,1,'".$_POST["user"]."','".$_POST["grille"]."');";
if ( $db->query($sql) )
{
}
else
{
print $sql;
}
}
}
}
}
llxHeader();
/*
* Sécurité accés client
*/
if ($user->societe_id > 0)
{
$action = '';
$socidp = $user->societe_id;
}
/*
*
*
*/
$grilles = array();
$sql = "SELECT d.rowid, d.libelle FROM ".MAIN_DB_PREFIX."telephonie_tarif_grille as d";
$resql = $db->query($sql);
if ($resql)
{
while ($row = $db->fetch_row($resql))
{
$grilles[$row[0]] = $row[1];
}
$db->free($resql);
}
$users = array();
$sql = "SELECT u.rowid, u.firstname, u.name FROM ".MAIN_DB_PREFIX."user as u";
$resql = $db->query($sql);
if ($resql)
{
while ($row = $db->fetch_row($resql))
{
$users[$row[0]] = $row[1] . ' '.$row[2];
}
$db->free($resql);
}
$form = new Form($db);
print '<form action="permissions.php" method="POST">';
print '<input type="hidden" name="action" value="perms">';
print '<table class="noborder" width="100%" cellspacing="0" cellpadding="4">';
print '<tr class="liste_titre"><td>Grille</td>';
print '<td>Utilisateur</td><td>Permissions</td><td>&nbsp;</td>';
print "</tr>\n";
print '<tr class="liste_titre">';
print '<td>';
print $form->select_array("grille",$grilles);
print '</td><td>';
print $form->select_array("user",$users);
print '</td><td><select name="perms">';
print '<option value="0">Aucun</option>';
print '<option value="1">Lecture</option>';
print '<option value="2">Lecture/Ecriture</option>';
print '<td><input type="submit"></td>';
print "</tr>\n";
print "</form>\n";
print "</table>\n";
/*
*
*
*
*
*/
$page = $_GET["page"];
$sortorder = $_GET["sortorder"];
$sortfield = $_GET["sortfield"];
if ($sortorder == "") $sortorder="ASC";
if ($sortfield == "") $sortfield="d.libelle ASC, d.rowid ";
$offset = $conf->liste_limit * $page ;
/*
* Mode Liste
*
*
*
*/
$sql = "SELECT d.rowid as grille, d.libelle as tarif_desc, d.type_tarif";
$sql .= " , u.code, u.name, u.firstname";
$sql .= " , r.pread, r.pwrite";
$sql .= " FROM ".MAIN_DB_PREFIX."telephonie_tarif_grille as d";
$sql .= "," . MAIN_DB_PREFIX."telephonie_tarif_grille_rights as r";
$sql .= "," . MAIN_DB_PREFIX."user as u";
$sqlc .= " WHERE d.rowid = r.fk_grille";
$sqlc .= " AND r.fk_user = u.rowid";
if ($_GET["search_user"])
{
$sqlc .=" AND t.libelle LIKE '%".$_GET["search_libelle"]."%'";
}
if ($_GET["search_grille"])
{
$sqlc .=" AND d.libelle LIKE '%".$_GET["search_grille"]."%'";
}
$sql = $sql . $sqlc . " ORDER BY $sortfield $sortorder " . $db->plimit($conf->liste_limit+1, $offset);
$result = $db->query($sql);
if ($result)
{
$num = $db->num_rows();
$i = 0;
print_barre_liste("Tarifs", $page, "index.php", "&type=".$_GET["type"], $sortfield, $sortorder, '', $num);
print '<form action="permissions.php" method="GET">';
print '<table class="noborder" width="100%" cellspacing="0" cellpadding="4">';
print '<tr class="liste_titre">';
print_liste_field_titre("Tarif","index.php","d.libelle");
print '<td>Utilisateur</td><td align="center">Lecture</td><td align="center">Ecriture</td>';
print "</tr>\n";
print '<tr class="liste_titre">';
print '<input type="hidden" name="type" value="'.$_GET["type"].'">';
print '<td><input type="text" name="search_grille" size="10" value="'.$_GET["search_grille"].'"></td>';
print '<td><input type="text" name="search_user" size="20" value="'.$_GET["search_user"].'"></td>';
print '<td>&nbsp;</td>';
print '<td><input type="submit"></td>';
print '</form>';
print '</tr>';
$var=True;
while ($i < min($num,$conf->liste_limit))
{
$obj = $db->fetch_object($i);
$var=!$var;
print "<tr $bc[$var]>";
print '<td><a href="grille.php?id='.$obj->grille.'">';
print $obj->tarif_desc."</td>\n";
print '<td>'.$obj->firstname." ".$obj->name."</td>\n";
if ($obj->pread == 1)
{
print '<td align="center">'.img_tick().'</td>';
}
else
{
print '<td align="center">&nbsp;</td>';
}
if ($obj->pwrite == 1)
{
print '<td align="center">'.img_tick().'</td>';
}
else
{
print '<td align="center">&nbsp;</td>';
}
print "</tr>\n";
$i++;
}
print "</table>";
$db->free();
}
else
{
print $db->error() . ' ' . $sql;
}
$db->close();
llxFooter("<em>Derni&egrave;re modification $Date$ r&eacute;vision $Revision$</em>");
?>