165 lines
16 KiB
HTML
165 lines
16 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
||
<html><head><meta http-equiv="Content-Type" content="text/html;charset=iso-8859-1">
|
||
<title>phpcompta: /home/dany/developpement/phpcompta-dev/phpcompta/include/check_priv.php Source File</title>
|
||
<link href="doxygen.css" rel="stylesheet" type="text/css">
|
||
</head><body>
|
||
<!-- Generated by Doxygen 1.4.4 -->
|
||
<div class="qindex"><a class="qindex" href="index.html">Main Page</a> | <a class="qindex" href="namespaces.html">Namespace List</a> | <a class="qindex" href="hierarchy.html">Class Hierarchy</a> | <a class="qindex" href="annotated.html">Data Structures</a> | <a class="qindex" href="dirs.html">Directories</a> | <a class="qindex" href="files.html">File List</a> | <a class="qindex" href="functions.html">Data Fields</a> | <a class="qindex" href="globals.html">Globals</a> | <a class="qindex" href="pages.html">Related Pages</a></div>
|
||
<div class="nav">
|
||
<a class="el" href="dir_000000.html">developpement</a> » <a class="el" href="dir_000001.html">phpcompta-dev</a> » <a class="el" href="dir_000002.html">phpcompta</a> » <a class="el" href="dir_000006.html">include</a></div>
|
||
<h1>check_priv.php</h1><a href="check__priv_8php.html">Go to the documentation of this file.</a><div class="fragment"><pre class="fragment"><a name="l00001"></a>00001 <?
|
||
<a name="l00002"></a>00002
|
||
<a name="l00003"></a>00003 <span class="comment">/*</span>
|
||
<a name="l00004"></a>00004 <span class="comment"> * This file is part of PhpCompta.</span>
|
||
<a name="l00005"></a>00005 <span class="comment"> *</span>
|
||
<a name="l00006"></a>00006 <span class="comment"> * PhpCompta is free software; you can redistribute it and/or modify</span>
|
||
<a name="l00007"></a>00007 <span class="comment"> * it under the terms of the GNU General Public License as published by</span>
|
||
<a name="l00008"></a>00008 <span class="comment"> * the Free Software Foundation; either version 2 of the License, or</span>
|
||
<a name="l00009"></a>00009 <span class="comment"> * (at your option) any later version.</span>
|
||
<a name="l00010"></a>00010 <span class="comment"> *</span>
|
||
<a name="l00011"></a>00011 <span class="comment"> * PhpCompta is distributed in the hope that it will be useful,</span>
|
||
<a name="l00012"></a>00012 <span class="comment"> * but WITHOUT ANY WARRANTY; without even the implied warranty of</span>
|
||
<a name="l00013"></a>00013 <span class="comment"> * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the</span>
|
||
<a name="l00014"></a>00014 <span class="comment"> * GNU General Public License for more details.</span>
|
||
<a name="l00015"></a>00015 <span class="comment"> *</span>
|
||
<a name="l00016"></a>00016 <span class="comment"> * You should have received a copy of the GNU General Public License</span>
|
||
<a name="l00017"></a>00017 <span class="comment"> * along with PhpCompta; if not, write to the Free Software</span>
|
||
<a name="l00018"></a>00018 <span class="comment"> * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA</span>
|
||
<a name="l00019"></a>00019 <span class="comment">*/</span>
|
||
<a name="l00020"></a>00020
|
||
<a name="l00021"></a>00021 <span class="comment">// Copyright Author Dany De Bontridder ddebontridder@yahoo.fr</span>
|
||
<a name="l00022"></a>00022 <span class="comment">/* $Revision$ */</span>
|
||
<a name="l00028"></a>00028 include_once(<span class="stringliteral">"postgres.php"</span>);
|
||
<a name="l00046"></a><a class="code" href="check__priv_8php.html#a0">00046</a> function <a class="code" href="check__priv_8php.html#a0">CheckJrn</a>($p_dossier,$p_user,$p_jrn,$p_detail=False)
|
||
<a name="l00047"></a>00047 {
|
||
<a name="l00048"></a>00048 <span class="keywordflow">if</span> ( <a class="code" href="check__priv_8php.html#a2">CheckIsAdmin</a>( $p_user) == 1 ) <span class="keywordflow">return</span> 2;
|
||
<a name="l00049"></a>00049 <a class="code" href="impress__fiche_8php.html#a0">$cn</a>=<a class="code" href="postgres_8php.html#a1">DbConnect</a>($p_dossier);
|
||
<a name="l00050"></a>00050 <span class="comment">// Special</span>
|
||
<a name="l00051"></a>00051 <span class="comment">// p_jrn = 0 ==> grand livre access if there is no uj_prix=X</span>
|
||
<a name="l00052"></a>00052 <span class="comment">// or detail</span>
|
||
<a name="l00053"></a>00053 <span class="keywordflow">if</span> ( $p_jrn == 0 ) {
|
||
<a name="l00054"></a>00054 <span class="keywordflow">if</span> ( $p_detail == <span class="keyword">false</span>) {
|
||
<a name="l00055"></a>00055 <span class="comment">// $n_jrn=CountSql($cn,"select jrn_def_id from jrn_def");</span>
|
||
<a name="l00056"></a>00056 $n_for=<a class="code" href="postgres_8php.html#a10">CountSql</a>($cn,<span class="stringliteral">"select jrn_def_id,uj_priv </span>
|
||
<a name="l00057"></a>00057 <span class="stringliteral"> from jrn_def left join user_sec_jrn on uj_jrn_id=jrn_def_id</span>
|
||
<a name="l00058"></a>00058 <span class="stringliteral"> where uj_login='$p_user' and uj_priv='X'"</span>);
|
||
<a name="l00059"></a>00059 <span class="keywordflow">if</span> ( $n_for == 0 )
|
||
<a name="l00060"></a>00060 <span class="keywordflow">return</span> 2;
|
||
<a name="l00061"></a>00061 <span class="keywordflow">else</span>
|
||
<a name="l00062"></a>00062 <span class="keywordflow">return</span> 0;
|
||
<a name="l00063"></a>00063 } <span class="keywordflow">else</span> {
|
||
<a name="l00064"></a>00064 <span class="comment">// For a detail, at least one jrn must be accessible</span>
|
||
<a name="l00065"></a>00065 $n_for=<a class="code" href="postgres_8php.html#a10">CountSql</a>($cn, <span class="stringliteral">" select jrn_def_id,uj_priv </span>
|
||
<a name="l00066"></a>00066 <span class="stringliteral"> from jrn_def left join user_sec_jrn on uj_jrn_id=jrn_def_id</span>
|
||
<a name="l00067"></a>00067 <span class="stringliteral"> where uj_login='$p_user' and uj_priv !='X'"</span>);
|
||
<a name="l00068"></a>00068 <span class="keywordflow">if</span> ( $n_for == 0 )
|
||
<a name="l00069"></a>00069 <span class="keywordflow">return</span> 0;
|
||
<a name="l00070"></a>00070 <span class="keywordflow">else</span>
|
||
<a name="l00071"></a>00071 <span class="keywordflow">return</span> 2;
|
||
<a name="l00072"></a>00072 }
|
||
<a name="l00073"></a>00073
|
||
<a name="l00074"></a>00074
|
||
<a name="l00075"></a>00075 }
|
||
<a name="l00076"></a>00076
|
||
<a name="l00077"></a>00077 <span class="comment">// droit sp<73>cifique</span>
|
||
<a name="l00078"></a>00078 <a class="code" href="setup_8php.html#a12">$Res2</a>=<a class="code" href="postgres_8php.html#a2">ExecSql</a>($cn,<span class="stringliteral">"select jrn_def_id,uj_priv </span>
|
||
<a name="l00079"></a>00079 <span class="stringliteral"> from jrn_def left join user_sec_jrn on uj_jrn_id=jrn_def_id</span>
|
||
<a name="l00080"></a>00080 <span class="stringliteral"> where uj_login='$p_user' and jrn_def_id=$p_jrn"</span>);
|
||
<a name="l00081"></a>00081
|
||
<a name="l00082"></a>00082 $PrivJrn=pg_NumRows($Res2);
|
||
<a name="l00083"></a>00083 <a class="code" href="impress__fiche_8php.html#a0">$cn</a>=<a class="code" href="postgres_8php.html#a1">DbConnect</a>();
|
||
<a name="l00084"></a>00084 <span class="comment">// droit par d<>faut</span>
|
||
<a name="l00085"></a>00085 <a class="code" href="depense_8inc_8php.html#a3">$Res</a>=<a class="code" href="postgres_8php.html#a2">ExecSql</a>($cn,<span class="stringliteral">" select * </span>
|
||
<a name="l00086"></a>00086 <span class="stringliteral"> from ac_users left join jnt_use_dos using (use_id) </span>
|
||
<a name="l00087"></a>00087 <span class="stringliteral"> left join priv_user on (priv_jnt=jnt_id) </span>
|
||
<a name="l00088"></a>00088 <span class="stringliteral"> where use_login='$p_user' and</span>
|
||
<a name="l00089"></a>00089 <span class="stringliteral"> dos_id=$p_dossier"</span>);
|
||
<a name="l00090"></a>00090
|
||
<a name="l00091"></a>00091 $DefRight=pg_NumRows($Res);
|
||
<a name="l00092"></a>00092 <a class="code" href="debug_8php.html#a0">echo_debug</a> (<span class="stringliteral">"PrivJrn = $PrivJrn DefRight $DefRight"</span>);
|
||
<a name="l00093"></a>00093 <span class="comment">// Si les droits par d<>faut == 0, alors user n'a pas acc<63>s au dossier</span>
|
||
<a name="l00094"></a>00094 <span class="keywordflow">if</span> ( $DefRight == 0 ) <span class="keywordflow">return</span> 0;
|
||
<a name="l00095"></a>00095 $Def=pg_fetch_array($Res,0);
|
||
<a name="l00096"></a>00096
|
||
<a name="l00097"></a>00097 <span class="comment">// Si les droits par d<>faut == NO, alors user n'a pas acc<63>s au dossier</span>
|
||
<a name="l00098"></a>00098 <span class="keywordflow">if</span> ( $Def['priv_priv'] == <span class="stringliteral">"NO"</span> ) <span class="keywordflow">return</span> 0;
|
||
<a name="l00099"></a>00099
|
||
<a name="l00100"></a>00100 <span class="keywordflow">if</span> ( $Def['priv_priv'] == <span class="stringliteral">"W"</span>) {
|
||
<a name="l00101"></a>00101 <span class="comment">// Si droit pas d<>faut == <20>criture </span>
|
||
<a name="l00102"></a>00102 <span class="keywordflow">if</span> ( $PrivJrn == 0 ) {
|
||
<a name="l00103"></a>00103 <span class="comment">// Pas de droit sp<73>cifique sur jrn => droit par d<>faut = W</span>
|
||
<a name="l00104"></a>00104 <span class="keywordflow">return</span> 2;
|
||
<a name="l00105"></a>00105 }
|
||
<a name="l00106"></a>00106 $Priv=pg_fetch_array($Res2,0);
|
||
<a name="l00107"></a>00107
|
||
<a name="l00108"></a>00108 <span class="keywordflow">if</span> ( $Priv['uj_priv'] == <span class="stringliteral">"X"</span> ) <span class="keywordflow">return</span> 0;
|
||
<a name="l00109"></a>00109 <span class="keywordflow">if</span> ( $Priv['uj_priv'] == <span class="stringliteral">"R"</span> ) <span class="keywordflow">return</span> 1;
|
||
<a name="l00110"></a>00110 <span class="keywordflow">if</span> ( $Priv['uj_priv'] == <span class="stringliteral">"W"</span> ) <span class="keywordflow">return</span> 2;
|
||
<a name="l00111"></a>00111 echo '<H2 <span class="keyword">class</span>=<span class="stringliteral">"error"</span>> Undefined right</H2>';
|
||
<a name="l00112"></a>00112 <a class="code" href="debug_8php.html#a0">echo_debug</a> (<span class="stringliteral">"Droit Journal $Priv[uj_priv]"</span>);
|
||
<a name="l00113"></a>00113 <span class="keywordflow">return</span> 0;
|
||
<a name="l00114"></a>00114 }
|
||
<a name="l00115"></a>00115 <span class="keywordflow">if</span> ( $Def['priv_priv'] == <span class="stringliteral">"R"</span>) {
|
||
<a name="l00116"></a>00116 <span class="comment">// Si droit pas d<>faut == Lire</span>
|
||
<a name="l00117"></a>00117 <span class="keywordflow">if</span> ( $PrivJrn == 0 ) {
|
||
<a name="l00118"></a>00118 <span class="comment">// Pas de droit sp<73>cifique sur jrn => droit par d<>faut = Lire</span>
|
||
<a name="l00119"></a>00119 <span class="keywordflow">return</span> 1;
|
||
<a name="l00120"></a>00120 }
|
||
<a name="l00121"></a>00121 $Priv=pg_fetch_array($Res2,0);
|
||
<a name="l00122"></a>00122
|
||
<a name="l00123"></a>00123 <span class="keywordflow">if</span> ( $Priv['uj_priv'] == <span class="stringliteral">"X"</span> ) <span class="keywordflow">return</span> 0;
|
||
<a name="l00124"></a>00124 <span class="keywordflow">if</span> ( $Priv['uj_priv'] == <span class="stringliteral">"R"</span> ) <span class="keywordflow">return</span> 1;
|
||
<a name="l00125"></a>00125 <span class="keywordflow">if</span> ( $Priv['uj_priv'] == <span class="stringliteral">"W"</span> ) <span class="keywordflow">return</span> 2;
|
||
<a name="l00126"></a>00126 <a class="code" href="debug_8php.html#a0">echo_debug</a> (<span class="stringliteral">"Droit Journal $Priv[uj_priv]"</span>);
|
||
<a name="l00127"></a>00127 echo '<H2 <span class="keyword">class</span>=<span class="stringliteral">"error"</span>> Undefined right</H2>';
|
||
<a name="l00128"></a>00128 <span class="keywordflow">return</span> 0;
|
||
<a name="l00129"></a>00129 }
|
||
<a name="l00130"></a>00130 echo '<H2 <span class="keyword">class</span>=<span class="stringliteral">"error"</span>> Undefined <span class="keywordflow">default</span> right</H2>';
|
||
<a name="l00131"></a>00131 <span class="keywordflow">return</span> 0;
|
||
<a name="l00132"></a>00132
|
||
<a name="l00133"></a>00133 }
|
||
<a name="l00146"></a><a class="code" href="check__priv_8php.html#a1">00146</a> function <a class="code" href="check__priv_8php.html#a1">CheckAction</a> ( $p_dossier,$p_login,$p_action_id)
|
||
<a name="l00147"></a>00147 {
|
||
<a name="l00148"></a>00148 <span class="keywordflow">if</span> ( <a class="code" href="check__priv_8php.html#a2">CheckIsAdmin</a> ($p_login) ) <span class="keywordflow">return</span> 1;
|
||
<a name="l00149"></a>00149 <a class="code" href="impress__fiche_8php.html#a0">$cn</a>=<a class="code" href="postgres_8php.html#a1">DbConnect</a>($p_dossier);
|
||
<a name="l00150"></a>00150 <a class="code" href="depense_8inc_8php.html#a3">$Res</a>=<a class="code" href="postgres_8php.html#a2">ExecSql</a>($cn,<span class="stringliteral">"select * from user_sec_act where ua_login='$p_login' and ua_act_id=$p_action_id"</span>);
|
||
<a name="l00151"></a>00151 $Count=pg_NumRows($Res);
|
||
<a name="l00152"></a>00152 <span class="keywordflow">if</span> ( $Count == 0 ) <span class="keywordflow">return</span> 0;
|
||
<a name="l00153"></a>00153 <span class="keywordflow">if</span> ( $Count == 1 ) <span class="keywordflow">return</span> 1;
|
||
<a name="l00154"></a>00154 echo <span class="stringliteral">"<H2 class=\"error\"> Invalid action !!! $Count select * from user_sec_act where ua_login='$p_login' and ua_act_id=$p_action_id </H2>"</span>;
|
||
<a name="l00155"></a>00155 }
|
||
<a name="l00167"></a><a class="code" href="check__priv_8php.html#a2">00167</a> function <a class="code" href="check__priv_8php.html#a2">CheckIsAdmin</a>($p_user)
|
||
<a name="l00168"></a>00168 {
|
||
<a name="l00169"></a>00169 <span class="keywordflow">if</span> ( $p_user == 'phpcompta') <span class="keywordflow">return</span> 1;
|
||
<a name="l00170"></a>00170 <a class="code" href="bank_8inc_8php.html#a10">$sql</a>=<span class="stringliteral">"select use_id from ac_users where use_login='$p_user'</span>
|
||
<a name="l00171"></a>00171 <span class="stringliteral"> and use_active=1 and use_admin=1 "</span>;
|
||
<a name="l00172"></a>00172 <a class="code" href="impress__fiche_8php.html#a0">$cn</a>=<a class="code" href="postgres_8php.html#a1">DbConnect</a>();
|
||
<a name="l00173"></a>00173
|
||
<a name="l00174"></a>00174 $isAdmin=<a class="code" href="postgres_8php.html#a10">CountSql</a>($cn,$sql);
|
||
<a name="l00175"></a>00175
|
||
<a name="l00176"></a>00176
|
||
<a name="l00177"></a>00177 <span class="keywordflow">return</span> $isAdmin;
|
||
<a name="l00178"></a>00178
|
||
<a name="l00179"></a>00179 }
|
||
<a name="l00192"></a><a class="code" href="check__priv_8php.html#a3">00192</a> function <a class="code" href="check__priv_8php.html#a3">CheckDossier</a>($p_user,$p_dossier)
|
||
<a name="l00193"></a>00193 {
|
||
<a name="l00194"></a>00194 <span class="keywordflow">if</span> ( <a class="code" href="check__priv_8php.html#a2">CheckIsAdmin</a> ($p_user) ) <span class="keywordflow">return</span> 1;
|
||
<a name="l00195"></a>00195 <a class="code" href="impress__fiche_8php.html#a0">$cn</a>=<a class="code" href="postgres_8php.html#a1">DbConnect</a>();
|
||
<a name="l00196"></a>00196 <a class="code" href="bank_8inc_8php.html#a10">$sql</a>=<span class="stringliteral">"select dos_id from ac_users </span>
|
||
<a name="l00197"></a>00197 <span class="stringliteral"> natural join jnt_use_dos </span>
|
||
<a name="l00198"></a>00198 <span class="stringliteral"> natural join ac_dossier </span>
|
||
<a name="l00199"></a>00199 <span class="stringliteral"> join priv_user on ( priv_jnt=jnt_id)</span>
|
||
<a name="l00200"></a>00200 <span class="stringliteral"> where use_active=1 </span>
|
||
<a name="l00201"></a>00201 <span class="stringliteral"> and use_login='$p_user' </span>
|
||
<a name="l00202"></a>00202 <span class="stringliteral"> and dos_id='$p_dossier' </span>
|
||
<a name="l00203"></a>00203 <span class="stringliteral"> and priv_priv != 'NO'"</span>;
|
||
<a name="l00204"></a>00204 <span class="keywordflow">return</span> <a class="code" href="postgres_8php.html#a10">CountSql</a>($cn,$sql);
|
||
<a name="l00205"></a>00205
|
||
<a name="l00206"></a>00206 }
|
||
<a name="l00207"></a>00207
|
||
<a name="l00208"></a>00208 ?>
|
||
</pre></div><hr size="1"><address style="align: right;"><small>Generated on Mon Jun 26 20:13:15 2006 for phpcompta by
|
||
<a href="http://www.doxygen.org/index.html">
|
||
<img src="doxygen.png" alt="doxygen" align="middle" border="0"></a> 1.4.4 </small></address>
|
||
</body>
|
||
</html>
|