'; echo ''; for ($i = 0;$i < $MaxUser;$i++) { $l_line=pg_fetch_array($User,$i); // echo ''; if ( $i % 3 == 0 && $i != 0) echo ""; printf ('', $l_line['use_id'], $l_line['use_first_name'], $l_line['use_name'], $l_line['use_login'] ); } echo ""; echo '

'; $action=""; if ( isset ($_GET["action"] )) { $action=$_GET["action"]; } // session_register set to off, so variable are undefined foreach ($_GET as $name=>$value) ${"$name"}=$value; if ( $action == "change_jrn" ) { // Check if the user can access that folder if ( CheckDossier($_GET['login'],$gDossier) == 0 ) { echo "

Cet utilisateur ne peut pas accéder ce dossier

"; $action=""; return; } $login=$_GET['login']; $jrn=$_GET['jrn']; $access=$_GET['access']; $l_Db=sprintf("dossier%d",$gDossier); echo_debug('user_sec.php',__LINE__,"select * from user_sec_jrn where uj_login='$login' and uj_jrn_id=$jrn"); $cn_dossier=DbConnect($gDossier); $l2_Res=ExecSql($cn_dossier, "select * from user_sec_jrn where uj_login='$login' and uj_jrn_id=$jrn"); $l2_count=pg_NumRows($l2_Res); if ( $l2_count == 1 ) { $Res=ExecSql($cn_dossier,"update user_sec_jrn set uj_priv='$access' where uj_login='$login' and uj_jrn_id=$jrn"); } else { $Res=ExecSql($cn_dossier,"insert into user_sec_jrn(uj_login,uj_jrn_id,uj_priv) values( '$login' ,$jrn,'$access')"); } $action="view"; } if ( $action == "change_act" ) { // Check if the user can access that folder if ( CheckDossier($_GET['login'],$gDossier) == 0 ) { echo "

he cannot access this folder

"; $action=""; return; } $l_Db=sprintf("dossier%d",$gDossier); $cn_dossier=DbConnect($gDossier); if ( $_GET['access']==0) { echo_debug('user_sec.php',__LINE__,"delete right"); $Res=ExecSql($cn_dossier, "delete from user_sec_act where ua_login='".$_GET['login']."' and ua_act_id=$act"); } else { echo_debug('user_sec.php',__LINE__,"insert right"); if ( CountSql($cn_dossier,"select * from user_sec_act where ua_login='$login' and ua_act_id=$act") < 1 ) { $Res=ExecSql($cn_dossier, "insert into user_sec_act(ua_login,ua_act_id) values( '$login' ,$act)"); } } $action="view"; } // Action == View detail for users if ( $action == "view" ) { $l_Db=sprintf("dossier%d",$gDossier); $cn_dossier=DbConnect($gDossier); $cn=DbConnect(); $User=ExecSql($cn, "select use_id,use_first_name,use_name,use_login from ac_users where use_id=".$_GET['user_id']); $MaxUser=pg_NumRows($User); if ( $MaxUser == 0 ) return; $l2_line=pg_fetch_array($User,0); printf ('

Détail utilisateur %s %s (%s)

', $l2_line['use_first_name'], $l2_line['use_name'], $l2_line['use_login']); // Check if the user can access that folder if ( CheckDossier($l2_line['use_login'],$gDossier) == 0 ) { echo "

he cannot access this folder

"; $action=""; return; } // Print button $sHref=sprintf ('sec_pdf.php?p_action=sec&user_id=%s&'.$str_dossier , $l2_line['use_id'] ); echo widget::button_href('Imprime',$sHref); // Show access for journal $Res=ExecSql($cn_dossier,"select jrn_def_id,jrn_def_name from jrn_def "); $admin=CheckIsAdmin($l2_line['use_login']); echo ''; $MaxJrn=pg_NumRows($Res); for ( $i =0 ; $i < $MaxJrn; $i++ ) { $l_line=pg_fetch_array($Res,$i); echo ' '; if ( $i == 0 ) echo '';else echo ""; echo ""; $l_change="action=change_jrn&jrn=$l_line[jrn_def_id]&login=$l2_line[use_login]&user_id=$l2_line[use_id]"; if ( $admin == 0) { $right= CheckJrn($gDossier,$l2_line['use_login'],$l_line['jrn_def_id'] ); echo_debug('user_sec.php',__LINE__,"Privilege is $right"); } else $right = 3; if ( $right == 0 ) { echo ""; echo ''; echo ''; } if ( $right == 1 ) { echo ''; echo ""; echo ''; } if ( $right == 2 ) { echo ''; echo ''; echo ""; } if ( $right == 3 ) { echo ''; echo ''; echo ""; } echo ''; } // Priv. for actions $Res=ExecSql($cn_dossier, "select ac_id, ac_description from action order by ac_id "); $MaxJrn=pg_NumRows($Res); for ( $i =0 ; $i < $MaxJrn; $i++ ) { $l_line=pg_fetch_array($Res,$i); echo ' '; if ( $i == 0 ) echo ''; if ($i != 0 && $l_line['ac_id'] != 50 && $l_line['ac_id']!=60) echo ""; if ( $l_line['ac_id'] == 50 ) echo ''; if ( $l_line['ac_id'] == 60 ) echo ''; echo ""; $l_change="action=change_act&act=".$l_line['ac_id']."&login=".$l2_line['use_login']."&user_id=".$l2_line['use_id']; if ( $admin ==0 ) { $right=check_action($gDossier,$l2_line['use_login'],$l_line['ac_id']); } else { $right = 2; } if ( $right == 0 ) { echo ""; $l_change=$l_change."&access=1"; echo ''; } if ( $right == 1) { $l_change=$l_change."&access=0"; echo ''; echo ""; } if ( $right == 2) { echo ''; echo ""; } echo ''; } echo '

Journal

$l_line[jrn_def_name]

"; echo "Pas d'accès"; echo "

Lecture

Ecriture

Pas d\'accès

"; echo "Lecture "; echo "

Ecriture

Pas d\'accès

Lecture

"; echo "Ecriture "; echo "

Pas d\'accès