app=$app;
if($intern)return;
$this->app->ActionHandlerInit($this);
$this->app->ActionHandler("create","UservorlageCreate");
$this->app->ActionHandler("delete","UservorlageDelete");
$this->app->ActionHandler("edit","UservorlageEdit");
$this->app->ActionHandler("list","UservorlageList");
$this->app->ActionHandler("chrights","UservorlageChangeRights");
$this->app->ActionHandler("download","UservorlageDownload");
$this->app->DefaultActionHandler("list");
//$this->Templates = $this->GetTemplates();
$this->app->ActionHandlerListen($app);
}
public function Install()
{
}
function UservorlageDownload()
{
$id = $this->app->Secure->GetGET("id");
if($id > 0)
{
$result = $this->app->DB->SelectArr("SELECT module,action FROM uservorlagerights WHERE `vorlage`='$id'");
$tmp['bezeichnung']=$this->app->DB->Select("SELECT bezeichnung FROM `uservorlage` WHERE id='$id' LIMIT 1");
$tmp['beschreibung']=$this->app->DB->Select("SELECT beschreibung FROM `uservorlage` WHERE id='$id' LIMIT 1");
$tmp['rechte']=$result;
header('Content-Type: application/json');
header('Content-disposition: attachment; filename="'.$tmp['bezeichnung'].'.json"');
echo json_encode($tmp);
exit;
}
}
function UservorlageList()
{
$this->app->erp->MenuEintrag("index.php?module=uservorlage&action=list","Übersicht");
$this->app->erp->MenuEintrag("index.php?module=uservorlage&action=history","Historie");
$this->app->erp->MenuEintrag("index.php?module=uservorlage&action=create","Neue Benutzervorlage anlegen");
$this->app->erp->MenuEintrag("index.php?module=einstellungen&action=list","Zurück zur Übersicht");
$this->app->YUI->TableSearch('USER_TABLE',"usertemplatelist");
$this->app->Tpl->Parse('PAGE', "uservorlage_list.tpl");
}
public function UservorlageDelete(): void
{
$id = (int)$this->app->Secure->GetGET('id');
$benutzervorlage = $this->app->DB->Select("SELECT bezeichnung FROM `uservorlage` WHERE id='$id' LIMIT 1");
$users = $this->app->DB->Select("SELECT `username` FROM `user` WHERE `vorlage` = '$benutzervorlage'");
$prefix = "\"";
if (!empty($users)) {
$usernames = "";
if (is_array($users)) {
foreach ($users as $user) {
$usernames = $usernames.$prefix.$user[0]."\"";
$prefix = ", \"";
}
} else {
$usernames = $users;
}
$this->app->Tpl->Set('MESSAGE', "{|Benutzervorlage \"$benutzervorlage\" ist in Benutzung durch ".$usernames.".|}
");
} else {
$this->app->DB->Delete("DELETE FROM `uservorlage` WHERE `id` = '{$id}'");
$this->app->DB->Delete("DELETE FROM `uservorlagerights` WHERE `vorlage` = '{$id}'");
$this->app->Tpl->Set('MESSAGE', "Die Benutzervorlage \"$benutzervorlage\" wurde gelöscht.
");
}
$this->UservorlageList();
}
function UservorlageCreate()
{
$this->app->erp->MenuEintrag("index.php?module=uservorlage&action=list","Zurück zur Übersicht");
$input = $this->GetInput();
$submit = $this->app->Secure->GetPOST('submituservorlage');
$error = '';
$maxlightuser = 0;
if($submit!='') {
if($input['bezeichnung']=='') {
$error .= 'Geben Sie bitte einen Vorlagennamen ein.$error
");
else {
$id = $this->app->erp->CreateBenutzerVorlage($input);
$msg = $this->app->erp->base64_url_encode("Die Benutzervorlage wurde erfolgreich angelegt.
");
header("Location: index.php?module=uservorlage&action=edit&id=$id&msg=$msg");
exit;
}
}
$this->SetInput($input);
$this->app->Tpl->Set('ACTIVCHECKED',"checked");
$this->app->Tpl->Set('VORRECHTE',"");
$extra = '
if($(\'#hwtoken\').val() == \'4\' || $(\'#hwtoken\').val() == \'5\')
{
message = \'\';
}
';
$this->app->YUI->PasswordCheck('password', 'repassword', 'username', 'submit', $extra);
$this->app->Tpl->Parse('PAGE', "uservorlage_edit.tpl");
}
function UservorlageEdit()
{
$id = $this->app->Secure->GetGET('id');
$this->app->Tpl->Set('ID', $id);
// JSON Upload
$jsonvorlage = $_FILES['jsonvorlage']['tmp_name'];
if($jsonvorlage!="")
{
$content = file_get_contents($jsonvorlage);
$tmp = json_decode($content);
$neuerechte=0;
$anzahl = count($tmp->{'rechte'});
for($i=0;$i<=$anzahl;$i++)
{
$tmpmodule = $this->app->DB->real_escape_string($tmp->{'rechte'}[$i]->{'module'});
$tmpaction = $this->app->DB->real_escape_string($tmp->{'rechte'}[$i]->{'action'});
if($tmpmodule!="" && $tmpaction!="")
{
$check = $this->app->DB->Select("SELECT id FROM uservorlagerights WHERE module='".$tmpmodule."' AND action='".$tmpaction."' AND vorlage='".$id."' LIMIT 1");
if($check > 0)
$this->app->DB->Update("UPDATE uservorlagerights SET permission=1 WHERE module='".$tmpmodule."' AND action='".$tmpaction."' AND vorlage='".$id."' LIMIT 1");
else {
$neuerechte++;
$this->app->DB->Insert("INSERT INTO uservorlagerights (id,module,action,vorlage,permission) VALUES ('','".$tmpmodule."','".$tmpaction."','$id','1')");
}
}
}
$msg = $this->app->erp->base64_url_encode("Es wurden $neuerechte neue Rechte der Vorlage hinzugefügt!
");
header("Location: index.php?module=uservorlage&action=edit&id=$id&msg=$msg");
exit;
}
// END JSON Upload
$this->app->erp->MenuEintrag("index.php?module=uservorlage&action=edit&id=$id","Details");
$this->app->erp->MenuEintrag("index.php?module=uservorlage&action=list","Zurück zur Übersicht");
$id = $this->app->Secure->GetGET('id');
$input = $this->GetInput();
$submit = $this->app->Secure->GetPOST('submituservorlage');
// Input GET
if(is_numeric($id) && $submit!='') {
$error = '';
if ($input['bezeichnung']=='') {
$error .= 'Geben Sie bitte eine Bezeichnung ein.Die Einstellungen wurden erfolgreich übernommen.
");
$this->app->erp->AbgleichBenutzerVorlagen($id);
}
} // END Input Get
$benutzervorlage = $this->app->DB->Select("SELECT bezeichnung FROM `uservorlage` WHERE id='$id' LIMIT 1");
$beschreibung = $this->app->DB->Select("SELECT beschreibung FROM `uservorlage` WHERE id='$id' LIMIT 1");
$this->app->Tpl->Add('KURZUEBERSCHRIFT2',$benutzervorlage);
$this->app->Tpl->Add('BEZEICHNUNG',$benutzervorlage);
$this->app->Tpl->Add('BESCHREIBUNG',$beschreibung);
$this->UserRights();
$this->app->Tpl->Parse('PAGE', "uservorlage_edit.tpl");
}
/**
* @return array
*/
public function GetInput(): array
{
$input = array();
$input['bezeichnung'] = $this->app->Secure->GetPOST('bezeichnung');
$input['beschreibung'] = $this->app->Secure->GetPOST('beschreibung');
return $input;
}
function SetInput($input)
{
$this->app->Tpl->Set('BEZEICHNUNG', $input['bezeichnung']);
$this->app->Tpl->Set('BESCHREIBUNG', $input['beschreibung']);
}
function UserRights()
{
$id = $this->app->Secure->GetGET('id');
$template = $this->app->Secure->GetPOST('bezeichnung');
$copytemplate = $this->app->Secure->GetPOST('copyusertemplate');
$modules = $this->ScanModules();
{
if($template!='') {
$mytemplate = $this->app->Conf->WFconf['permissions'][$template];
$permissions = $this->app->DB->SelectArr("SELECT module,action FROM uservorlagerights WHERE `vorlage`=$id");
$this->app->DB->Delete("DELETE FROM uservorlagerights WHERE `vorlage`='$id'");
$modulecount = (!empty($modules)?count($modules):0);
$curModule = 0;
foreach($modules as $module=>$actions) {
$lower_m = strtolower($module);
$curModule++;
$actioncount = (!empty($actions)?count($actions):0);
for($i=0;$i<$actioncount;$i++) {
$delimiter = (($curModule<$modulecount || $i+1<$actioncount) ? ', ' : ';');
$active = ((isset($mytemplate[$lower_m]) && in_array($actions[$i], $mytemplate[$lower_m])) ? '1' : '0');
if($active==1){
$this->app->DB->Insert("INSERT INTO uservorlagerights (`vorlage`, module, action, permission) VALUES ('$id', '$lower_m', '{$actions[$i]}', '$active')");
}
}
}
}
if($copytemplate!='') {
$ok = true;
if($ok)
{
$permissions = $this->app->DB->SelectArr("SELECT module,action FROM uservorlagerights WHERE `vorlage`=$id");
$this->app->DB->Delete("DELETE FROM uservorlagerights WHERE `vorlage`='$id'");
$permissions = $this->app->DB->SelectArr("SELECT module,action FROM userrights WHERE vorlage=$copytemplate");
$this->app->DB->Update("INSERT INTO uservorlagerights (`vorlage`, module,action,permission) (SELECT '$id',module, action,permission FROM uservorlagerights WHERE vorlage='".$copytemplate."')");
}
}
}
$dbrights = $this->app->DB->SelectArr("SELECT module, action, permission FROM uservorlagerights WHERE `vorlage`='$id' ORDER BY module");
$rights = $this->app->Conf->WFconf['permissions'][$group];
if ((!empty($dbrights)?count($dbrights):0)>0) {
$rights = $this->AdaptRights($dbrights, $rights, $group);
}
$modules = $this->ScanModules();
$table = $this->CreateTable($id, $modules, $rights);
$this->app->Tpl->Set('MODULES', $table);
}
/*
Ajax handler
*/
function UservorlageChangeRights()
{
$vorlage = $this->app->Secure->GetGET('b_vorlage');
$module = $this->app->Secure->GetGET('b_module');
$action = $this->app->Secure->GetGET('b_action');
$value = $this->app->Secure->GetGET('b_value');
if(is_numeric($vorlage) && $module!='' && $action!='' && $value!='') {
$id = $this->app->DB->Select("SELECT id FROM uservorlagerights WHERE vorlage='$vorlage' AND module='$module' AND action='$action' LIMIT 1");
if(is_numeric($id) && $id>0)
{
if($value=="1")
{
$this->app->DB->Update("UPDATE uservorlagerights SET permission=1 WHERE id='$id' LIMIT 1");
}
else {
$this->app->DB->Delete("DELETE FROM uservorlagerights WHERE vorlage='$vorlage' AND module='$module' AND action='$action'");
}
}
else
$this->app->DB->Insert("INSERT INTO uservorlagerights (vorlage, module, action, permission) VALUES ('$vorlage', '$module', '$action', '$value')");
}
echo $this->app->DB->Select("SELECT permission FROM uservorlagerights WHERE vorlage='$vorlage' AND module='$module' AND action='$action' LIMIT 1");
exit;
}
function AdaptRights($dbarr, $rights)
{
$cnt = (!empty($dbarr)?count($dbarr):0);
for($i=0;$i<$cnt;$i++) {
$module = $dbarr[$i]['module'];
$action = $dbarr[$i]['action'];
$perm = $dbarr[$i]['permission'];
if(isset($rights[$module])) {
if($perm=='1' && !in_array($action, $rights[$module]))
$rights[$module][] = $action;
if($perm=='0' && in_array($action, $rights[$module])) {
$index = array_search($action, $rights[$module]);
unset($rights[$module][$index]);
$rights[$module] = array_values($rights[$module]);
}
}else if($perm=='1') $rights[$module][] = $action;
}
return $rights;
}
function CreateTable($user, $modules, $rights)
{
$maxcols = 6;
$width = 100 / $maxcols;
$out = '';
foreach($modules as $key=>$value) {
if(strtolower($key) == 'api' || strtolower($key) == 'ajax')continue;
$out .= "$key ";
$module = strtolower($key);
for($i=0;$i<$maxcols || $i<(!empty($value)?count($value):0);$i++) {
if($i%$maxcols==0) $out .= "";
if (gettype($rights[$module]) == 'array') {
if(isset($value[$i]) && in_array($value[$i], $rights[$module])) {
$class = 'class="blue"';
$active = '1';
}else{
$class = 'class="grey"';
$active = 0;
}
} else {
$class = 'class="grey"';
$active = 0;
}
$class = ((isset($value[$i])) ? $class : '');
$action = ((isset($value[$i])) ? strtolower($value[$i]) : '');
$onclick = ((isset($value[$i])) ? "onclick=\"ChangeRights(this, '$user','$module','$action')\"" : '');
$out .= "{$action} ";
if($i%$maxcols==($maxcols-1)) $out .= " ";
}
$out .= "
-- Bitte auswählen -- ";
foreach($this->Templates as $key=>$value) {
if($key!="web")
$options .= "".ucfirst($key)." ";
}
return $options;
}
function GetTemplates()
{
return $this->app->Conf->WFconf['permissions'];
}
}