Utilisateur déconnecté'); echo_debug('class_user.php',__LINE__," g_user = ".$_SESSION['g_user']); $this->id=$_SESSION['g_user']; $this->pass=$_SESSION['g_pass']; $this->valid=(isset ($_SESSION['isValid']))?1:0; $this->db=$p_cn; if ( isset($_SESSION['g_theme']) ) $this->theme=$_SESSION['g_theme']; $this->admin=( isset($_SESSION['use_admin']) )?$_SESSION['use_admin']:0; if ( isset($_SESSION['use_name']) ) $this->name=$_SESSION['use_name']; if ( isset($_SESSION['use_first_name']) ) $this->first_name=$_SESSION['use_first_name']; } else // if p_id is set get data of another user { echo_debug('class_user',__LINE__,"Info for use_id = $p_id"); $this->id=$p_id; $this->db=$p_cn; $Sql="select use_first_name, use_name, use_login, use_active, use_admin from ac_users where use_id=$p_id"; echo_debug('class_user',__LINE__,'SQL = '.$Sql); $cn=DbConnect(); $Res=pg_exec($cn,$Sql); if (($Max=pg_NumRows($Res)) == 0 ) return -1; $row=pg_fetch_array($Res,0); $this->first_name=$row['use_first_name']; $this->name=$row['use_name']; $this->active=$row['use_active']; $this->login=$row['use_login']; $this->admin=$row['use_admin']; } } /*! * \brief Check if user is active and exists in therepository * Automatically redirect * ++*/ function Check() { $res=0; $pass5=md5($this->pass); $cn=DbConnect(); if ( $cn != false ) { $sql="select ac_users.use_login,ac_users.use_active, ac_users.use_pass, use_admin,use_first_name,use_name from ac_users where ac_users.use_login='$this->id' and ac_users.use_active=1 and ac_users.use_pass='$pass5'"; echo_debug('class_user.php',__LINE__,"Sql = $sql"); $ret=pg_exec($cn,$sql); $res=pg_NumRows($ret); echo_debug('class_user.php',__LINE__,"Number of found rows : $res"); if ( $res >0 ) { $r=pg_fetch_array($ret,0); $_SESSION['use_admin']=$r['use_admin']; $_SESSION['use_name']=$r['use_name']; $_SESSION['use_first_name']=$r['use_first_name']; $_SESSION['isValid']=1; $this->admin=$_SESSION['use_admin']; $this->name=$_SESSION['use_name']; $this->first_name=$_SESSION['use_first_name']; $this->load_global_pref(); } } if ( $res == 0 ) { echo ''; echo "

"; echo "

utilisateur ou mot de passe incorrect

"; session_unset(); exit -1; } else { $this->valid=1; } return $ret; } /*! * \brief get all the available ledgers for the current user * \param $p_type = ALL or the type of the ledger (ACH,VEN,FIN,ODS) * \param $p_access =3 for READ or WRITE, 2 READ and write, 1 for readonly * * \return an array */ function get_ledger($p_type='ALL',$p_access=3) { if ( $this->admin != 1) { $sql_type=($p_type=='ALL')?'':"and jrn_def_type=upper('".FormatString($p_type)."')"; switch($p_access) { case 3: $sql_access=" and uj_priv!= 'X'"; break; case 2: $sql_access=" and uj_priv = 'W'"; break; case 1: $sql_access=" and uj_priv = 'R'"; break; } $sql="select jrn_def_id,jrn_def_type, jrn_def_name,jrn_def_class_deb,jrn_def_class_cred,jrn_type_id,jrn_desc,uj_priv, jrn_deb_max_line,jrn_cred_max_line from jrn_def join jrn_type on jrn_def_type=jrn_type_id join user_sec_jrn on uj_jrn_id=jrn_def_id where uj_login='".$this->id."'". $sql_type.$sql_access. " order by jrn_Def_id"; }else { $sql_type=($p_type=='ALL')?'':"where jrn_def_type=upper('".FormatString($p_type)."')"; $sql="select jrn_def_id,jrn_def_type,jrn_def_name,jrn_def_class_deb,jrn_def_class_cred,jrn_deb_max_line,jrn_cred_max_line, jrn_type_id,jrn_desc,'W' as uj_priv from jrn_def join jrn_type on jrn_def_type=jrn_type_id $sql_type order by jrn_Def_id"; } $res=ExecSql($this->db,$sql); if ( pg_NumRows($res) == 0 ) return null; $array=pg_fetch_all($res); return $array; } /*!\brief return an sql condition for filtering the permitted ledger * \param $p_type = ALL or the type of the ledger (ACH,VEN,FIN,ODS) * \param $p_access =3 for READ or WRITE, 2 READ and write, 1 for readonly * *\return string */ function get_ledger_sql($p_type='ALL',$p_access=3) { $aLedger=$this->get_ledger($p_type,$p_access); $sql=" jrn_def_id in ("; foreach ($aLedger as $row) { $sql.=$row['jrn_def_id'].','; } $sql.='-1)'; return $sql; } /*! ************************************************** * \brief Check if an user is an admin * * \return 1 for yes 0 for no */ function Admin() { $res=0; if ( $this->id != 'phpcompta') { $pass5=md5($this->pass); $sql="select use_id from ac_users where use_login='$this->id' and use_active=1 and use_admin=1 and use_pass='$pass5'"; $cn=DbConnect(); $this->admin=CountSql($cn,$sql); } else $this->admin=1; return $this->admin; } function AccessJrn($p_cn,$p_jrn_id) { $this->Admin(); if ( $this->admin==1) return true; $sql=CountSql($p_cn,"select uj_id from user_sec_jrn where uj_priv in ('R','W') and uj_jrn_id=".$p_jrn_id. " and uj_login = '".$this->id."'"); if ( $sql != 0 ) return true; return false; } /*! * \brief Set the selected periode in the user's preferences * * \param $p_periode periode * \param - $p_user * */ function set_periode($p_periode) { $sql="update user_local_pref set parameter_value='$p_periode' where user_id='$this->id' and parameter_type='PERIODE'"; $Res=ExecSql($this->db,$sql); } private function set_default_periode() { /* get the first periode */ $sql='select min(p_id) as pid from parm_periode where p_closed = false and p_start = (select min(p_start) from parm_periode)'; $Res=ExecSql($this->db,$sql); $pid=pg_fetch_result($Res,0,0); /* if all the periode are closed, then we use the last closed period */ if ( $pid == null ) { $sql='select min(p_id) as pid from parm_periode where p_start = (select max(p_start) from parm_periode)'; $Res2=ExecSql($this->db,$sql); $pid=pg_fetch_result($Res2,0,0); if ( $pid == null ) { echo "Aucune periode trouvable !!!"; exit(1); } $pid=pg_fetch_result($Res2,0,0); } $sql=sprintf("insert into user_local_pref (user_id,parameter_value,parameter_type) values ('%s','%d','PERIODE')", $this->id,$pid); $Res=ExecSql($this->db,$sql); } /*! * \brief Get the default periode from the user's preferences * * \return the default periode * * */ function get_periode() { $array=$this->get_preference(); if ( ! isset ($array['PERIODE'])) { $this->set_default_periode(); $array=$this->get_preference(); } return $array['PERIODE']; } /*!\brief return the mini rapport to display on the welcome page *\return 0 if nothing if found or the report to display (formdef.fr_id) */ function get_mini_report() { $array=$this->get_preference(); $fr_id=(isset($array['MINIREPORT']))?$array['MINIREPORT']:0; return $fr_id; } /*!\brief set the mini rapport to display on the welcome page */ function set_mini_report($p_id) { $count=getDbValue($this->db,"select count(*) from user_local_pref where user_id=$1 and parameter_type=$2", array($this->id,'MINIREPORT')); if ( $count == 1 ) { $sql="update user_local_pref set parameter_value=$1 where user_id=$2 and parameter_type='MINIREPORT'"; $Res=ExecSqlParam($this->db,$sql,array($p_id,$this->id)); } else { $sql="insert into user_local_pref (user_id,parameter_type,parameter_value)". "values($1,'MINIREPORT',$2)"; $Res=ExecSqlParam($this->db,$sql,array($this->id,$p_id)); } } /*! * \brief Get the default user's preferences * \return array of (parameter_type => parameter_value) */ function get_preference () { $sql="select parameter_type,parameter_value from user_local_pref where user_id='".$this->id."'"; $Res=ExecSql($this->db,$sql); $l_array=array(); for ( $i =0;$i < pg_NumRows($Res);$i++) { $row= pg_fetch_array($Res,$i); $type=$row['parameter_type']; $l_array[$type]=$row['parameter_value']; } return $l_array; } /*! * \brief Check if an user is allowed to do an action * * \param p_cn Database connx * \param p_action_id * \return * - 0 no priv * - 1 priv granted * */ function check_action ( $p_cn,$p_action_id) { if ( $this->admin==1 ) return 1; $Res=ExecSql($p_cn,"select * from user_sec_act where ua_login='".$this->id."' and ua_act_id=$p_action_id"); $Count=pg_NumRows($Res); if ( $Count == 0 ) return 0; if ( $Count == 1 ) return 1; echo "

Invalid action !!! $Count select * from user_sec_act where ua_login='$p_login' and ua_act_id=$p_action_id

"; exit(); } /*! ************************************************** * \brief Get the global preferences from user_global_pref * in the account_repository db * * \note set $SESSION[g_variable] */ function load_global_pref() { echo_debug('class_user.php',__LINE__,"function load_global_pref"); $cn=Dbconnect(); // Load everything in an array $Res=ExecSql ($cn,"select parameter_type,parameter_value from user_global_pref where user_id='".$this->id."'"); $Max=pg_NumRows($Res); if ( $Max == 0 ) { $this->insert_default_global_pref(); $this->load_global_pref(); return; } // Load value into array $line=array(); for ($i=0;$i<$Max;$i++) { $row=pg_fetch_array($Res,$i); $type=$row['parameter_type']; $line[$type]=$row['parameter_value'];; } // save array into g_ variable $array_pref=array ('g_theme'=>'THEME','g_pagesize'=>'PAGESIZE','g_topmenu'=>'TOPMENU'); foreach ($array_pref as $name=>$parameter ) { if ( ! isset ($line[$parameter]) ) { echo_debug("Missing pref : ".$parameter); $this->insert_default_global_pref($parameter); $this->load_global_pref(); return; } $_SESSION[$name]=$line[$parameter]; } } /*! ************************************************** * \brief insert default pref * if no parameter are given insert all the existing * parameter otherwise only the requested * \param $p_type parameter's type or nothing * \param $p_value parameter value * */ function insert_default_global_pref($p_type="",$p_value="") { echo_debug('class_user.php',__LINE__,"function insert_default_global_pref"); echo_debug('class_user.php',__LINE__,"parameter p_type $p_type p_value $p_value"); $default_parameter= array("THEME"=>"Light", "PAGESIZE"=>"50",'TOPMENU'=>'TEXT'); $cn=Dbconnect(); $Sql="insert into user_global_pref(user_id,parameter_type,parameter_value) values ('%s','%s','%s')"; if ( $p_type == "" ) { foreach ( $default_parameter as $name=>$value) { $Insert=sprintf($Sql,$this->id,$name,$value); ExecSql($cn,$Insert); } } else { $value=($p_value=="")?$default_parameter[$p_type]:$p_value; $Insert=sprintf($Sql,$this->id,$p_type,$value); ExecSql($cn,$Insert); } } /*! ************************************************** * \brief update default pref * if value is not given then use the default value * * \param $p_type parameter's type * \param $p_value parameter's value value of the type */ function update_global_pref($p_type,$p_value="") { $default_parameter= array("THEME"=>"Light", "PAGESIZE"=>"50",'TOPMENU'=>'SELECT'); $cn=Dbconnect(); $Sql="update user_global_pref set parameter_value='%s' where parameter_type='%s' and user_id='%s'"; $value=($p_value=="")?$default_parameter[$p_type]:$p_value; $Update=sprintf($Sql,$value,$p_type,$this->id); ExecSql($cn,$Update); }//end function /*!\brief Return the year of current Periode * it is the parm_periode.p_exercice col * if an error occurs return 0 */ function get_exercice() { $sql="select p_exercice from parm_periode where p_id=".$this->get_periode(); $Ret=ExecSql($this->db,$sql); if (pg_NumRows($Ret) == 1) { $r=pg_fetch_array($Ret,0); return $r['p_exercice']; } else return 0; } /*!\brief Check if the user can access * otherwise warn and exit * \param $p_cn database connx * \param $p_action requested action * \param $p_js = 1 javascript, or 0 just a text * \return nothing the program exits automatically */ function can_request($p_cn,$p_action,$p_js=0) { if ( $this->check_action($p_cn,$p_action)==0 ) { if ( $p_js == 1 ) { echo ""; } else { echo '

'; echo '

Cette action ne vous est pas autorisée Contactez votre responsable

'; echo '

'; } exit(-1); } } } ?>