'; echo ''; for ($i = 0;$i < $MaxUser;$i++) { $l_line=Database::fetch_array($user_sql,$i); // echo ''; if ( $i % 3 == 0 && $i != 0) echo ""; $str=($l_line['priv_priv'] == 'L')?'Local Admin':' '; $str=($l_line['priv_priv'] == 'P')?'Uniquement Extension':$str; $str=($l_line['priv_priv'] == 'R')?'Utilisateur Normal':$str; if ( $l_line['use_admin'] == 1 ) $str=' Super Admin'; printf ('', $l_line['use_id'], $l_line['use_first_name'], $l_line['use_name'], $l_line['use_login'], $str); } echo ""; echo '

%s %s ( %s )[%s]

'; } $action=""; if ( isset ($_GET["action"] )) { $action=$_GET["action"]; } //---------------------------------------------------------------------- // Action = save //---------------------------------------------------------------------- if ( isset($_POST['ok'])) { $sec_User=new User($cn_dossier,$_POST['user_id']); /* Save first the ledger */ $cn_dossier=new Database(dossier::id()); $a=$cn_dossier->get_array('select jrn_def_id from jrn_def'); foreach ($a as $key) { $id=$key['jrn_def_id']; $priv=sprintf("jrn_act%d",$id); $count=$cn_dossier->get_value('select count(*) from user_sec_jrn where uj_login=$1 '. ' and uj_jrn_id=$2',array($sec_User->login,$id)); if ( $count == 0 ) { $cn_dossier->exec_sql('insert into user_sec_jrn (uj_login,uj_jrn_id,uj_priv)'. ' values ($1,$2,$3)', array($sec_User->login,$id,$_POST[$priv])); } else { $cn_dossier->exec_sql('update user_sec_jrn set uj_priv=$1 where uj_login=$2 and uj_jrn_id=$3', array($_POST[$priv],$sec_User->login,$id)); } } /* now save all the actions */ $a=$cn_dossier->get_array('select ac_id from action'); foreach ($a as $key) { $id=$key['ac_id']; $priv=sprintf("action%d",$id); $count=$cn_dossier->get_value('select count(*) from user_sec_act where ua_login=$1 '. ' and ua_act_id=$2',array($sec_User->login,$id)); if ( $_POST[$priv] == 1 && $count == 0) { $cn_dossier->exec_sql('insert into user_sec_act (ua_login,ua_act_id)'. ' values ($1,$2)', array($sec_User->login,$id)); } if ($_POST[$priv] == 0 ) { $cn_dossier->exec_sql('delete from user_sec_act where ua_login=$1 and ua_act_id=$2', array($sec_User->login,$id)); } } } //-------------------------------------------------------------------------------- // Action == View detail for users //-------------------------------------------------------------------------------- if ( $action == "view" ) { $l_Db=sprintf("dossier%d",$gDossier); $cn=new Database(); $User=new User($cn,$_GET['user_id']); $admin=0; $access=$User->get_folder_access($gDossier); if ( $access == 'L') { $str='Local Admin'; $admin=1; } elseif ($access=='R') { $str=' Utilisateur normal'; } elseif ($access=='P') { $str=' Extension uniquement'; } if ( $User->admin==1 ) { $str=' Super Admin'; $admin=1; } echo '

'.h($User->first_name).' '.h($User->name).' '.hi($User->login)."($str)

"; if ( $admin != 0 ) { echo '

Cet utilisateur est administrateur, il a tous les droits

'; exit(); } // // Check if the user can access that folder if ( $access == 'X' ) { echo "

L'utilisateur n'a pas accès à ce dossier

"; $action=""; return; } //-------------------------------------------------------------------------------- // Show access for journal //-------------------------------------------------------------------------------- $Res=$cn_dossier->exec_sql("select jrn_def_id,jrn_def_name from jrn_def ". " order by jrn_def_name"); $sec_User=new User($cn_dossier,$_GET['user_id']); echo '

'; $sHref=sprintf ('sec_pdf.php?p_action=sec&user_id=%s&'.$str_dossier , $_GET ['user_id'] ); echo HtmlInput::button('Imprime','imprime',"onclick=\"window.open('".$sHref."');\""); echo HtmlInput::submit('ok','Sauve'); echo HtmlInput::reset('Annule'); echo HtmlInput::button_anchor('Retour à la liste','?p_action=sec&'.dossier::get(),'retour'); echo dossier::hidden(); echo HtmlInput::hidden('action','sec'); echo HtmlInput::hidden('user_id',$_GET['user_id']); echo '

Journaux

'; echo ''; $MaxJrn=Database::num_row($Res); $jrn_priv=new ISelect(); $array=array( array ('value'=>'R','label'=>'Uniquement lecture'), array ('value'=>'W','label'=>'Lecture et écriture'), // array ('value'=>'O','label'=>'Uniquement opérations prédéfinies'), array ('value'=>'X','label'=>'Aucun accès') ); for ( $i =0 ; $i < $MaxJrn; $i++ ) { /* set the widget */ $l_line=Database::fetch_array($Res,$i); echo ' '; if ( $i == 0 ) echo ''; else echo ""; echo ""; $jrn_priv->name='jrn_act'.$l_line['jrn_def_id']; $jrn_priv->value=$array; $jrn_priv->selected=$sec_User->get_ledger_access($l_line['jrn_def_id']); echo ''; echo ''; } echo '

Journal

$l_line[jrn_def_name]

'; echo $jrn_priv->input(); echo '

'; echo '

'; //********************************************************************** // Show Priv. for actions //********************************************************************** echo '

Actions

'; include('template/security_list_action.php'); echo '

'; echo HtmlInput::button('Imprime','imprime',"onclick=\"window.open('".$sHref."');\""); echo HtmlInput::submit('ok','Sauve'); echo HtmlInput::reset('Annule'); echo '

'; } // end of the form echo "