/*
* This file is part of PhpCompta.
*
* PhpCompta is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* PhpCompta is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with PhpCompta; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
*/
// Copyright Author Dany De Bontridder ddebontridder@yahoo.fr
include_once("ac_common.php");
include_once("postgres.php");
include_once("debug.php");
include_once("user_menu.php");
html_page_start($_SESSION['g_theme']);
echo_debug(__FILE__,__LINE__,"entering priv_users");
$rep=DbConnect();
include_once ("class_user.php");
$User=new cl_user($rep);
$User->Check();
if ($User->admin != 1) {
html_page_stop();
return;
}
if (! isset ($_GET['UID']) && ! isset($_POST['UID']) ) {
//Message d'erreur si UID non positionné
echo_debug(__FILE__,__LINE__,"UID NOT DEFINED");
html_page_stop();
return;
}
$uid=( isset ($_GET['UID']))? $_GET['UID']: $_POST['UID'];
echo_debug(__FILE__,__LINE__,"UID IS DEFINED");
$r_UID=GetUid($uid);
if ( $r_UID == false ) {
echo_debug(__FILE__,__LINE__,"UID NOT VALID");
// Message d'erreur
html_page_stop();
return;
}
echo_debug(__FILE__,__LINE__,"UID IS VALID");
echo '
Administration Globale
';
echo "".MenuAdmin()."
";
echo '';
echo '
Gestion Utilisateurs
';
// User is valid and you're an admin
?>
/* Parse the changes */
if ( isset ( $_GET['reset_passwd']) ){
$cn=DbConnect();
$l_pass=md5('phpcompta');
$Res=ExecSql($cn, "update ac_users set use_pass='$l_pass' where use_id=$uid");
echo '
Password remis à phpcompta
';
}
if ( isset ($_POST['SAVE']) ){
$uid = $_POST['UID'];
echo_debug(__FILE__,__LINE__,"SAVE is set");
// Update User
$cn=DbConnect();
$Sql="update ac_users set use_first_name='".$_POST['fname']."', use_name='".$_POST['lname']."'
,use_login='".$_POST['login']."',use_active=".$_POST['Actif'].",use_admin=".$_POST['Admin']." where
use_id=".$uid;
$Res=ExecSql($cn,$Sql);
// Update Priv on Folder
foreach ($HTTP_POST_VARS as $name=>$elem)
{
echo_debug(__FILE__,__LINE__,"HTTP_POST_VARS $name $elem");
if ( substr_count($name,'PRIV')!=0 )
{
echo_debug(__FILE__,__LINE__,"Found a priv");
$db_id=substr($name,4);
$cn=DbConnect();
if ( ExisteJnt($db_id,$uid) != 1 )
{
$Res=ExecSql($cn,"insert into jnt_use_dos(dos_id,use_id) values(".$db_id.",".$uid.")");
}
$jnt=GetJnt($db_id,$uid);
if (ExistePriv($jnt) > 0)
{
$Res=ExecSql($cn,"update priv_user set priv_priv='".$elem."' where priv_jnt=".$jnt);
} else {
$Res=ExecSql($cn,"insert into priv_user(priv_jnt,priv_priv) values (".$jnt.",'".$elem."')");
}
}
}
} else {
if ( isset ($DELETE) ) {
$cn=DbConnect();
$Res=ExecSql($cn,"delete from priv_user where priv_jnt in ( select jnt_id from jnt_use_dos where use_id=".$uid.")");
$Res=ExecSql($cn,"delete from jnt_use_dos where use_id=".$uid);
$Res=ExecSql($cn,"delete from ac_users where use_id=".$uid);
echo "
User $fname $lname ($login) is deleted
";
html_page_stop();
return;
}
}
$r_UID=GetUid($uid);
?>
html_page_stop();
?>