Check(); include_once ("top_menu_compta.php"); ShowMenuCompta($g_dossier,$g_UserProperty); if ( $g_UserProperty['use_admin']== 0 ) { $r=CheckAction($g_dossier,$g_user,SECU); if ($r == 0 ){ /* Cannot Access */ NoAccess(); exit -1; } } $cn=DbConnect(); $User=ExecSql($cn,"select use_id,use_first_name,use_name,use_login from ac_users where use_login != 'phpcompta'"); $MaxUser=pg_NumRows($User); echo '
'; echo '

Sécurité

'; echo ''; for ($i = 0;$i < $MaxUser;$i++) { $l_line=pg_fetch_array($User,$i); // echo ''; if ( $i % 3 == 0 && $i != 0) echo ""; printf ('', $l_line['use_id'], $l_line['use_first_name'], $l_line['use_name'], $l_line['use_login'] ); } echo ""; echo '
%s %s ( %s )
'; $action=""; if ( isset ($_GET["action"] )) { $action=$_GET["action"]; } if ( $action == "change_jrn" ) { // Check if the user can access that folder if ( CheckDossier($login,$g_dossier) == 0 ) { echo "

he cannot access this folder

"; $action=""; return; } $l_Db=sprintf("dossier%d",$g_dossier); echo_debug(__FILE__,__LINE__,"select * from user_sec_jrn where uj_login='$login' and uj_jrn_id=$jrn"); $cn_dossier=DbConnect($g_dossier); $l2_Res=ExecSql($cn_dossier, "select * from user_sec_jrn where uj_login='$login' and uj_jrn_id=$jrn"); $l2_count=pg_NumRows($l2_Res); if ( $l2_count == 1 ) { $Res=ExecSql($cn_dossier,"update user_sec_jrn set uj_priv='$access' where uj_login='$login' and uj_jrn_id=$jrn"); } else { $Res=ExecSql($cn_dossier,"insert into user_sec_jrn(uj_login,uj_jrn_id,uj_priv) values( '$login' ,$jrn,'$access')"); } $action="view"; } if ( $action == "change_act" ) { // Check if the user can access that folder if ( CheckDossier($login,$g_dossier) == 0 ) { echo "

he cannot access this folder

"; $action=""; return; } $l_Db=sprintf("dossier%d",$g_dossier); $cn_dossier=DbConnect($g_dossier); if ( $access==0) { echo_debug(__FILE__,__LINE__,"delete right"); $Res=ExecSql($cn_dossier, "delete from user_sec_act where ua_login='$login' and ua_act_id=$act"); } else { echo_debug(__FILE__,__LINE__,"insert right"); $Res=ExecSql($cn_dossier, "insert into user_sec_act(ua_login,ua_act_id) values( '$login' ,$act)"); } $action="view"; } if ( $action == "view" ) { $l_Db=sprintf("dossier%d",$g_dossier); $cn_dossier=DbConnect($g_dossier); $cn=DbConnect(); $User=ExecSql($cn, "select use_id,use_first_name,use_name,use_login from ac_users where use_id=$user_id"); $MaxUser=pg_NumRows($User); if ( $MaxUser == 0 ) return; $l2_line=pg_fetch_array($User,0); printf ('

Détail utilisateur %s %s (%s)

', $l2_line['use_first_name'], $l2_line['use_name'], $l2_line['use_login']); // Check if the user can access that folder if ( CheckDossier($l2_line['use_login'],$g_dossier) == 0 ) { echo "

he cannot access this folder

"; $action=""; return; } // $l_dossier=CountSql($cn,"select use_id,dos_id from ac_users natural join jnt_use_dos where use_id=$user_id and dos_id=$g_dossier // and use_active=1"); // if ( $l_dossier == 0 ) { // echo "

L'utilisateur n'a pas accès à ce dossier ou est désactivé

"; // return; // } $Res=ExecSql($cn_dossier,"select jrn_def_id,jrn_def_name from jrn_def "); $admin=CheckIsAdmin($l2_line['use_login']); echo ''; $MaxJrn=pg_NumRows($Res); for ( $i =0 ; $i < $MaxJrn; $i++ ) { $l_line=pg_fetch_array($Res,$i); echo ' '; if ( $i == 0 ) echo '';else echo ""; echo ""; $l_change="action=change_jrn&jrn=$l_line[jrn_def_id]&login=$l2_line[use_login]&user_id=$l2_line[use_id]"; if ( $admin == 0) { $right= CheckJrn($g_dossier,$l2_line['use_login'],$l_line['jrn_def_id'] ); echo_debug(__FILE__,__LINE__,"Privilege is $right"); } else $right = 3; if ( $right == 0 ) { echo ""; echo ''; echo ''; } if ( $right == 1 ) { echo ''; echo ""; echo ''; } if ( $right == 2 ) { echo ''; echo ''; echo ""; } if ( $right == 3 ) { echo ''; echo ''; echo ""; } echo ''; } $Res=ExecSql($cn_dossier, "select ac_id, ac_description from action order by ac_description "); $MaxJrn=pg_NumRows($Res); for ( $i =0 ; $i < $MaxJrn; $i++ ) { $l_line=pg_fetch_array($Res,$i); echo ' '; if ( $i == 0 ) echo '';else echo ""; echo ""; $l_change="action=change_act&act=".$l_line['ac_id']."&login=".$l2_line['use_login']."&user_id=".$l2_line['use_id']; if ( $admin ==0 ) { $right=CheckAction($g_dossier,$l2_line['use_login'],$l_line['ac_id']); } else { $right = 2; } if ( $right == 0 ) { echo ""; $l_change=$l_change."&access=1"; echo ''; } if ( $right == 1) { $l_change=$l_change."&access=0"; echo ''; echo ""; } if ( $right == 2) { echo ''; echo ""; } echo ''; } echo '
Journal $l_line[jrn_def_name] "; echo "Pas d'accès"; echo " Lecture Ecriture Pas d\'accès"; echo "Lecture "; echo " Ecriture Pas d\'accès Lecture"; echo "Ecriture "; echo " Pas d\'accès Lecture "; echo "Ecriture "; echo "
Action ". $l_line['ac_description']." "; echo "Pas d'accès"; echo " Accès Pas d\'accès "; echo "Accès "; echo " Change "; echo "Accès "; echo "
'; } echo "
"; html_page_stop(); ?>