440e736f31
svn+ssh://danydb@svn/svn/phpcompta/branches/rel550 ........ r4060 | danydb | 2011-03-31 00:56:29 +0200 (Thu, 31 Mar 2011) | 2 lines fix problem with password reinit ........ r4061 | danydb | 2011-04-05 22:23:36 +0200 (Tue, 05 Apr 2011) | 2 lines fix problem with act2 ........ r4062 | danydb | 2011-04-05 22:34:13 +0200 (Tue, 05 Apr 2011) | 2 lines #248 Fix problem with payment with sales ........ r4063 | danydb | 2011-04-06 18:25:05 +0200 (Wed, 06 Apr 2011) | 2 lines #247 Bug in invoice generating ........
271 lines
7 KiB
PHP
271 lines
7 KiB
PHP
<?php
|
|
/*
|
|
* This file is part of PhpCompta.
|
|
*
|
|
* PhpCompta is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* PhpCompta is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with PhpCompta; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
*/
|
|
// Copyright Author Dany De Bontridder ddebontridder@yahoo.fr
|
|
/*! \file
|
|
* \brief Users Security
|
|
*/
|
|
include_once("ac_common.php");
|
|
require_once('class_database.php');
|
|
include_once("user_menu.php");
|
|
html_page_start($_SESSION['g_theme']);
|
|
|
|
$rep=new Database();
|
|
include_once ("class_user.php");
|
|
$User=new User($rep);
|
|
$User->Check();
|
|
/* only the global admin can modify something here
|
|
*/
|
|
if ($User->admin != 1)
|
|
{
|
|
html_page_stop();
|
|
return;
|
|
}
|
|
|
|
if (! isset ($_REQUEST['UID']) )
|
|
{
|
|
html_page_stop();
|
|
exit();
|
|
}
|
|
$uid=$_REQUEST['UID'];
|
|
$UserChange=new User($rep,$uid);
|
|
|
|
$r_UID=$UserChange->id;
|
|
if ( $r_UID == false )
|
|
{
|
|
// Message d'erreur
|
|
html_page_stop();
|
|
}
|
|
echo '<H2 class="info"> Administration Globale</H2>';
|
|
|
|
echo "<div>".MenuAdmin()."</div>";
|
|
|
|
echo '<DIV class="content" style="width:80%;margin-left:10%">';
|
|
|
|
echo '<h2>Gestion Utilisateurs</h2>';
|
|
|
|
// User is valid and you're an admin
|
|
|
|
|
|
?>
|
|
|
|
|
|
|
|
<?php
|
|
/* Parse the changes */
|
|
if ( isset ( $_GET['reset_passwd']) )
|
|
{
|
|
$cn=new Database();
|
|
$l_pass=md5('phpcompta');
|
|
/* prevent to change the password of superadmin */
|
|
if ( $uid != '1' )
|
|
{
|
|
$Res=$cn->exec_sql( "update ac_users set use_pass=$1 where use_id=$2",array($l_pass,$uid));
|
|
echo '<H2 class="info"> Password remis à phpcompta</H2>';
|
|
}
|
|
}
|
|
/* Save the changes */
|
|
if ( isset ($_POST['SAVE']) )
|
|
{
|
|
$uid = $_POST['UID'];
|
|
|
|
// Update User
|
|
$cn=new Database();
|
|
$last_name=$_POST['fname'];
|
|
$first_name=$_POST['lname'];
|
|
$UserChange=new User($cn,$uid);
|
|
if ( $UserChange->load()==-1)
|
|
{
|
|
alert("Cet utilisateur n'existe pas");
|
|
}
|
|
else
|
|
{
|
|
$UserChange->first_name=$first_name;
|
|
$UserChange->last_name=$last_name;
|
|
$UserChange->active=$_POST['Actif'];
|
|
$UserChange->admin=$_POST['Admin'];
|
|
$UserChange->save();
|
|
|
|
// Update Priv on Folder
|
|
foreach ($_POST as $name=>$elem)
|
|
{
|
|
if ( substr_count($name,'PRIV')!=0 )
|
|
{
|
|
$db_id=substr($name,4);
|
|
$cn=new Database();
|
|
$UserChange->set_folder_access($db_id,$elem);
|
|
|
|
}
|
|
|
|
}
|
|
}
|
|
}
|
|
else
|
|
{
|
|
if ( isset ($_POST["DELETE"]) )
|
|
{
|
|
$cn=new Database();
|
|
$Res=$cn->exec_sql("delete from priv_user where priv_jnt in ( select jnt_id from jnt_use_dos where use_id=$1",array($uid));
|
|
$Res=$cn->exec_sql("delete from jnt_use_dos where use_id=$1",array($uid));
|
|
$Res=$cn->exec_sql("delete from ac_users where use_id=$1",array($uid));
|
|
|
|
echo "<center><H2 class=\"info\"> User ".h($_POST['fname'])." ".h($_POST['lname'])." (".
|
|
h($_POST['login']).") est effacé</H2></CENTER>";
|
|
require_once("class_iselect.php");
|
|
require_once("user.inc.php");
|
|
return;
|
|
}
|
|
}
|
|
$UserChange->load();
|
|
?>
|
|
<FORM ACTION="priv_user.php" METHOD="POST">
|
|
|
|
<?php printf('<INPUT TYPE=HIDDEN NAME=UID VALUE="%s">',$uid);
|
|
?>
|
|
<TABLE BORDER=0>
|
|
<TR>
|
|
|
|
<?php printf('<td>login</td><td> %s</td>',$UserChange->login);
|
|
?>
|
|
</TD></tr>
|
|
<TR><TD>
|
|
<?php printf('Nom de famille </TD><td><INPUT class="input_text" type="text" NAME="fname" value="%s"> ',$UserChange->name);
|
|
?>
|
|
</TD></TR>
|
|
<?php printf('<td>prénom</td><td>
|
|
<INPUT class="input_text" type="text" NAME="lname" value="%s"> ',$UserChange->first_name);
|
|
?>
|
|
</TD>
|
|
</TR>
|
|
</table>
|
|
|
|
<TABLE>
|
|
<?php
|
|
if ( $UserChange->active == 1 )
|
|
{
|
|
$ACT="CHECKED";
|
|
$NACT="UNCHECKED";
|
|
}
|
|
else
|
|
{
|
|
$ACT="UNCHECKED";
|
|
$NACT="CHECKED";
|
|
}
|
|
echo "<TR><TD>";
|
|
printf('<INPUT type="RADIO" NAME="Actif" VALUE="1" %s> Actif',$ACT);
|
|
echo "</TD><TD>";
|
|
printf('<INPUT type="RADIO" NAME="Actif" VALUE="0" %s> Non Actif',$NACT);
|
|
echo "</TD></TR>";
|
|
?>
|
|
</TABLE>
|
|
</TD>
|
|
<TD>
|
|
<TABLE>
|
|
<?php
|
|
if ( $UserChange->admin == 1 )
|
|
{
|
|
$ACT="CHECKED";
|
|
$NACT="UNCHECKED";
|
|
}
|
|
else
|
|
{
|
|
$ACT="UNCHECKED";
|
|
$NACT="CHECKED";
|
|
}
|
|
echo "<TR><TD>";
|
|
printf('<INPUT type="RADIO" NAME="Admin" VALUE="1" %s> Administrateur global',$ACT);
|
|
echo "</TD><TD>";
|
|
printf('<INPUT type="RADIO" NAME="Admin" VALUE="0" %s> Pas administrateur global ',$NACT);
|
|
echo "</TD></TR>";
|
|
?>
|
|
</TABLE>
|
|
</TD>
|
|
</TR>
|
|
<TR>
|
|
<TD>
|
|
<!-- Show all database and rights -->
|
|
<H2 class="info"> Droit sur les dossiers pour les utilisateurs normaux </H2>
|
|
<p class="notice">
|
|
Les autres droits doivent être réglés dans les dossiers (paramètre->sécurité)
|
|
</p>
|
|
<TABLE>
|
|
<?php
|
|
$array=array(
|
|
array('value'=>'X','label'=>'Aucun Accès'),
|
|
array('value'=>'R','label'=>'Utilisateur normal'),
|
|
array('value'=>'P','label'=>'Utilisateur uniquement extension'),
|
|
array('value'=>'L','label'=>'Administrateur local(Tous les droits)')
|
|
);
|
|
$repo=new Dossier(0);
|
|
|
|
$Dossier=$repo->show_dossier('all',1,0);
|
|
if ( empty ( $Dossier ))
|
|
{
|
|
echo hb('* Aucun Dossier *');
|
|
echo '</div>';
|
|
exit();
|
|
}
|
|
|
|
$mod_user=new User(new Database(),$uid);
|
|
foreach ( $Dossier as $rDossier)
|
|
{
|
|
|
|
$priv=$mod_user->get_folder_access($rDossier['dos_id']);
|
|
printf("<TR><TD> Dossier : %s </TD>",h($rDossier['dos_name']));
|
|
|
|
$select=new ISelect();
|
|
$select->table=1;
|
|
$select->name=sprintf('PRIV%s',$rDossier['dos_id']);
|
|
$select->value=$array;
|
|
$select->selected=$priv;
|
|
echo $select->input();
|
|
echo "</TD></TR>";
|
|
}
|
|
|
|
?>
|
|
</TABLE>
|
|
|
|
<?php echo HtmlInput::button_anchor('Reinitialiser le mot de passe',
|
|
sprintf('priv_user.php?reset_passwd&UID=%s',$uid));
|
|
?>
|
|
|
|
|
|
|
|
<input type="Submit" class="button" NAME="SAVE" VALUE="Sauver les changements">
|
|
|
|
<input type="Submit" class="button" NAME="DELETE" VALUE="Effacer" onclick="return confirm('Confirmer effacement ?');" >
|
|
|
|
</FORM>
|
|
<? echo HtmlInput::button_anchor('Retour','admin_repo.php?action=user_mgt');
|
|
?>
|
|
</DIV>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
<?php
|
|
html_page_stop();
|
|
?>
|
|
|
|
|