432: Modularité: impact sur la sécurité des impressions et export CSV

Add new_line for menu & module 
Improve javascript support (module + menu)
This commit is contained in:
Dany De Bontridder 2011-11-07 21:16:45 +00:00
parent 8f0461092e
commit 4379add3f7
25 changed files with 301 additions and 243 deletions

View file

@ -32,144 +32,127 @@ require_once('class_user.php');
$gDossier=dossier::id();
$cn=new Database($gDossier);
/**
*@todo check the security here
*/
$user=new User($cn);
$user->Check();
$act=$user->check_dossier($gDossier);
if ( $act=='X' || ! isset($_GET['act']) )
if ( $act=='X' || ! isset($_GET['act']) || $user->check_print($_GET['act'])==0 )
{
echo alert('Accès interdit');
redirect("do.php?".dossier::get());
exit();
}
switch( $_GET['act'])
switch( $_GET['act'])
{
case 'CSV/histo':
$user->can_request(IMPJRN,0);
case 'CSV:histo':
require_once('export_histo_csv.php');
exit();
break;
case 'CSV/ledger':
$user->can_request(IMPJRN,0);
case 'CSV:ledger':
require_once('export_ledger_csv.php');
exit();
break;
case 'PDF/ledger':
$user->can_request(IMPJRN,0);
case 'PDF:ledger':
require_once('export_ledger_pdf.php');
exit();
break;
case 'CSV/postedetail':
$user->can_request(IMPPOSTE,0);
case 'CSV:postedetail':
require_once('export_poste_detail_csv.php');
exit();
break;
case 'PDF/postedetail':
$user->can_request(IMPPOSTE,0);
case 'PDF:postedetail':
require_once('export_poste_detail_pdf.php');
exit();
break;
case 'CSV/fichedetail':
$user->can_request(IMPPOSTE,0);
case 'CSV:fichedetail':
require_once('export_fiche_detail_csv.php');
exit();
break;
case 'PDF/fichedetail':
$user->can_request(IMPPOSTE,0);
case 'PDF:fichedetail':
require_once('export_fiche_detail_pdf.php');
exit();
break;
case 'CSV/fiche_balance':
$user->can_request(IMPFIC,0);
case 'CSV:fiche_balance':
require_once('export_fiche_balance_csv.php');
exit();
break;
case 'PDF/fiche_balance':
$user->can_request(IMPFIC,0);
case 'PDF:fiche_balance':
require_once('export_fiche_balance_pdf.php');
exit();
break;
case 'CSV/report':
case 'CSV:report':
require_once('export_form_csv.php');
exit();
break;
case 'PDF/report':
case 'PDF:report':
require_once('export_form_pdf.php');
exit();
break;
case 'CSV/fiche':
$user->can_request(IMPFIC,0);
case 'CSV:fiche':
require_once('export_fiche_csv.php');
exit();
break;
case 'PDF/fiche':
$user->can_request(IMPFIC,0);
case 'PDF:fiche':
require_once('export_fiche_pdf.php');
exit();
break;
case 'CSV/glcompte':
$user->can_request(IMPBIL,0);
case 'CSV:glcompte':
require_once('export_gl_csv.php');
exit();
break;
case 'PDF/glcompte':
$user->can_request(IMPBIL,0);
case 'PDF:glcompte':
require_once('export_gl_pdf.php');
exit();
break;
case 'PDF/sec':
$user->can_request(PARSEC,1);
case 'PDF:sec':
require_once('export_security_pdf.php');
exit();
break;
case 'CSV/AncList':
case 'CSV:AncList':
require_once('export_anc_list_csv.php');
exit();
break;
case 'CSV/AncBalSimple':
case 'CSV:AncBalSimple':
require_once('export_anc_balance_simple_csv.php');
exit();
break;
case 'PDF/AncBalSimple':
case 'PDF:AncBalSimple':
require_once('export_anc_balance_simple_pdf.php');
exit();
break;
case 'CSV/AncBalDouble':
case 'CSV:AncBalDouble':
require_once('export_anc_balance_double_csv.php');
exit();
break;
case 'PDF/AncBalDouble':
case 'PDF:AncBalDouble':
require_once('export_anc_balance_double_pdf.php');
exit();
break;
case 'CSV/balance':
case 'CSV:balance':
require_once('export_balance_csv.php');
exit();
break;
case 'PDF/balance':
case 'PDF:balance':
require_once('export_balance_pdf.php');
exit();
break;
case 'CSV/AncTable':
case 'CSV:AncTable':
require_once('export_anc_table_csv.php');
exit();
break;
case 'CSV/AncAccList':
case 'CSV:AncAccList':
require_once('export_anc_acc_list_csv.php');
exit();
break;
case 'CSV/AncBalGroup':
case 'CSV:AncBalGroup':
require_once('export_anc_balance_group_csv.php');
exit();
break;
case 'OTH/Bilan':
$user->can_request(IMPBIL);
case 'OTH:Bilan':
require_once 'export_bilan_oth.php';
exit();
break;