You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
400 lines
19 KiB
400 lines
19 KiB
<?php
|
|
/* For licensing terms, see /license.txt */
|
|
/**
|
|
Item-manager (add, edit & delete)
|
|
*/
|
|
require_once('rsys.php');
|
|
|
|
Rsys :: protect_script('m_item');
|
|
$tool_name = get_lang('ItemManagerHeader');
|
|
//$interbreadcrumb[] = array ("url" => "../admin/index.php", "name" => get_lang('PlatformAdmin'));
|
|
|
|
/**
|
|
* Filter to display the modify-buttons
|
|
*
|
|
* @param - int $id The item-id
|
|
*/
|
|
function modify_filter($id) {
|
|
$str='';
|
|
$outtt=false;
|
|
if(Rsys::item_allow($id,'edit')){
|
|
$str.='<a href="m_item.php?action=edit&id='.$id.'" title="'.get_lang("EditItem2").'"><img alt="" src="../img/edit.gif" /></a>';
|
|
}
|
|
if(Rsys::item_allow($id,'m_rights')) $str.=' <a href="m_item.php?action=m_rights&item_id='.$id.'" title="'.get_lang("MRights").'"><img alt="" src="../img/info_small.gif" /></a>';
|
|
if(Rsys::item_allow($id,'delete')) $str.=' <a href="m_item.php?action=delete&id='.$id.'" title="'.get_lang("DeleteItem").'" onclick="javascript:if(!confirm('."'".addslashes(api_htmlentities(get_lang("ConfirmDeleteItem")))."'".')) return false;"><img alt="" src="../img/delete.gif" /></a>';
|
|
if(Rsys::item_allow($id,'edit')){
|
|
$number = Rsys :: get_item($id);
|
|
$str.= ' <a href="m_item.php?action=blackout&id='.$id.'" title="'.get_lang("Blackout").'"><img alt="" src="../img/blackout'.$number[5].'.gif" /></a>';
|
|
}
|
|
return $str;
|
|
}
|
|
|
|
/**
|
|
* Filter to display the modify-buttons
|
|
*
|
|
* @param - int $id The item-rights-id's
|
|
*/
|
|
function modify_rights_filter($id) {
|
|
return ' <a href="m_item.php?action=m_rights&subaction=delete&item_id='.substr($id, 0, strpos($id, '-')).'&class_id='.substr($id, strrpos($id, '-') + 1).'" title="'.get_lang("RemoveClassRights").'" onclick="javascript:if(!confirm('."'".addslashes(api_htmlentities(get_lang("ConfirmDeleteItem"), ENT_QUOTES, api_get_system_encoding()))."'".')) return false;"><img alt="" src="../img/delete.gif" /></a>';
|
|
}
|
|
|
|
if (isset ($_POST['action'])) {
|
|
switch ($_POST['action']) {
|
|
case 'delete_items' :
|
|
$ids = $_POST['items'];
|
|
$warning = false;
|
|
if (count($ids) > 0) {
|
|
foreach ($ids as $id) {
|
|
$result = Rsys :: delete_item($id);
|
|
if ($result != 0 && $warning <> true) // TODO: A strange looking logical condition, to be cleaned.
|
|
$warning = true;
|
|
}
|
|
ob_start();
|
|
if ($warning) {
|
|
Display :: display_normal_message(get_lang('ItemNotDeleted'), false);
|
|
|
|
} else {
|
|
|
|
Display :: display_normal_message(get_lang('ItemDeleted'),false);
|
|
}
|
|
$msg = ob_get_contents();
|
|
ob_end_clean();
|
|
}
|
|
break;
|
|
case 'delete_itemrights' :
|
|
$ids = $_POST['itemrights'];
|
|
if (count($ids) > 0) {
|
|
foreach ($ids as $id)
|
|
Rsys :: delete_item_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1));
|
|
ob_start();
|
|
Display :: display_normal_message(get_lang('ItemRightDeleted'),false);
|
|
$msg = ob_get_contents();
|
|
ob_end_clean();
|
|
$_GET['item_id'] = substr($id, 0, strpos($id, '-'));
|
|
} else {
|
|
header("Location: ".$_SERVER['HTTP_REFERER']);
|
|
exit ();
|
|
}
|
|
$_GET['action'] = 'm_rights';
|
|
break;
|
|
case 'set_r_rights' :
|
|
$ids = $_POST['itemrights'];
|
|
if (count($ids) > 0) {
|
|
foreach ($ids as $id)
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'view_right', 1);
|
|
$_GET['item_id'] = substr($id, 0, strpos($id, '-'));
|
|
} else {
|
|
header("Location: ".$_SERVER['HTTP_REFERER']);
|
|
exit ();
|
|
}
|
|
$_GET['action'] = 'm_rights';
|
|
break;
|
|
case 'unset_r_rights' :
|
|
$ids = $_POST['itemrights'];
|
|
if (count($ids) > 0) {
|
|
foreach ($ids as $id)
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'view_right', 0);
|
|
$_GET['item_id'] = substr($id, 0, strpos($id, '-'));
|
|
} else {
|
|
header("Location: ".$_SERVER['HTTP_REFERER']);
|
|
exit ();
|
|
}
|
|
$_GET['action'] = 'm_rights';
|
|
break;
|
|
case 'set_edit_rights' :
|
|
$ids = $_POST['itemrights'];
|
|
if (count($ids) > 0) {
|
|
foreach ($ids as $id)
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'edit_right', 1);
|
|
$_GET['item_id'] = substr($id, 0, strpos($id, '-'));
|
|
} else {
|
|
header("Location: ".$_SERVER['HTTP_REFERER']);
|
|
exit ();
|
|
}
|
|
$_GET['action'] = 'm_rights';
|
|
break;
|
|
case 'unset_edit_rights' :
|
|
$ids = $_POST['itemrights'];
|
|
if (count($ids) > 0) {
|
|
foreach ($ids as $id)
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'edit_right', 0);
|
|
$_GET['item_id'] = substr($id, 0, strpos($id, '-'));
|
|
} else {
|
|
header("Location: ".$_SERVER['HTTP_REFERER']);
|
|
exit ();
|
|
}
|
|
$_GET['action'] = 'm_rights';
|
|
break;
|
|
case 'set_delete_rights' :
|
|
$ids = $_POST['itemrights'];
|
|
if (count($ids) > 0) {
|
|
foreach ($ids as $id)
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'delete_right', 1);
|
|
$_GET['item_id'] = substr($id, 0, strpos($id, '-'));
|
|
} else {
|
|
header("Location: ".$_SERVER['HTTP_REFERER']);
|
|
exit ();
|
|
}
|
|
$_GET['action'] = 'm_rights';
|
|
break;
|
|
case 'unset_delete_rights' :
|
|
$ids = $_POST['itemrights'];
|
|
if (count($ids) > 0) {
|
|
foreach ($ids as $id)
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'delete_right', 0);
|
|
$_GET['item_id'] = substr($id, 0, strpos($id, '-'));
|
|
} else {
|
|
header("Location: ".$_SERVER['HTTP_REFERER']);
|
|
exit ();
|
|
}
|
|
$_GET['action'] = 'm_rights';
|
|
break;
|
|
case 'set_mres_rights' :
|
|
$ids = $_POST['itemrights'];
|
|
if (count($ids) > 0) {
|
|
foreach ($ids as $id)
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'm_reservation', 1);
|
|
$_GET['item_id'] = substr($id, 0, strpos($id, '-'));
|
|
} else {
|
|
header("Location: ".$_SERVER['HTTP_REFERER']);
|
|
exit ();
|
|
}
|
|
$_GET['action'] = 'm_rights';
|
|
break;
|
|
case 'unset_mres_rights' :
|
|
$ids = $_POST['itemrights'];
|
|
if (count($ids) > 0) {
|
|
foreach ($ids as $id)
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'm_reservation', 0);
|
|
$_GET['item_id'] = substr($id, 0, strpos($id, '-'));
|
|
} else {
|
|
header("Location: ".$_SERVER['HTTP_REFERER']);
|
|
exit ();
|
|
}
|
|
$_GET['action'] = 'm_rights';
|
|
break;
|
|
case 'set_all_rights' :
|
|
$ids = $_POST['itemrights'];
|
|
if (count($ids) > 0) {
|
|
foreach ($ids as $id){
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'm_reservation', 1);
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'edit_right', 1);
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'delete_right', 1);
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'view_right', 1);
|
|
}
|
|
$_GET['item_id'] = substr($id, 0, strpos($id, '-'));
|
|
} else {
|
|
header("Location: ".$_SERVER['HTTP_REFERER']);
|
|
exit ();
|
|
}
|
|
$_GET['action'] = 'm_rights';
|
|
break;
|
|
case 'unset_all_rights' :
|
|
$ids = $_POST['itemrights'];
|
|
if (count($ids) > 0) {
|
|
foreach ($ids as $id){
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'm_reservation', 0);
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'edit_right', 0);
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'delete_right', 0);
|
|
Rsys :: set_new_right(substr($id, 0, strpos($id, '-')), substr($id, strrpos($id, '-') + 1), 'view_right', 0);
|
|
}
|
|
$_GET['item_id'] = substr($id, 0, strpos($id, '-'));
|
|
} else {
|
|
header("Location: ".$_SERVER['HTTP_REFERER']);
|
|
exit ();
|
|
}
|
|
$_GET['action'] = 'm_rights';
|
|
break;
|
|
}
|
|
}
|
|
switch ($_GET['action']) {
|
|
case 'm_rights' :
|
|
if(!Rsys::item_allow($_GET['item_id'],'m_rights')) die('No Access!');
|
|
switch ($_GET['subaction']) {
|
|
case 'edit' :
|
|
$item = Rsys :: get_item($_GET['item_id']);
|
|
$classDB = Rsys :: get_class_group($_GET['class_id']);
|
|
$item_rights = Rsys :: get_item_rights($_GET['item_id'], $_GET['class_id']);
|
|
|
|
$interbreadcrumb[] = array ("url" => "m_item.php", "name" => $tool_name);
|
|
$interbreadcrumb[] = array ("url" => "m_item.php?&action=m_rights&id=".$item['id'], "name" => str_replace('#ITEM#', $item['name'], get_lang('MItemRights')));
|
|
Display :: display_header(get_lang('EditRight'));
|
|
api_display_tool_title(get_lang('EditRight'));
|
|
$form = new FormValidator('itemright', 'post', "m_item.php?id=".$item['id']."&action=m_rights&subaction=edit");
|
|
|
|
$form->add_textfield('classn', get_lang('LangClass'), true, array ('readonly' => 'readonly'));
|
|
|
|
$form->addElement('checkbox', 'edit_right', get_lang('EditRight'));
|
|
$form->addElement('checkbox', 'delete_right', get_lang('DeleteRight'));
|
|
$form->addElement('checkbox', 'm_reservation', get_lang('MReservationRight'));
|
|
|
|
$form->addElement('hidden', 'item_id', $item['id']);
|
|
$form->addElement('hidden', 'class_id', $_GET['class_id']);
|
|
|
|
$item_right['classn'] = $classDB[0]['name'];
|
|
$item_right['edit_right'] = $item_rights[0]['edit_right'];
|
|
$item_right['delete_right'] = $item_rights[0]['delete_right'];
|
|
$item_right['m_reservation'] = $item_rights[0]['m_reservation'];
|
|
$form->setDefaults($item_right);
|
|
|
|
$form->addElement('submit', 'submit', get_lang('Ok'));
|
|
if ($form->validate()) {
|
|
$values = $form->exportValues();
|
|
Rsys :: edit_item_right($values['item_id'], $values['class_id'], $values['edit_right'], $values['delete_right'], $values['m_reservation']);
|
|
Display :: display_normal_message(Rsys :: get_return_msg(get_lang('ItemRightEdited'), "m_item.php?id=".$_GET['id']."&action=m_rights", str_replace('#ITEM#', $item['name'], get_lang('MItemRights'))),false);
|
|
} else
|
|
$form->display();
|
|
break;
|
|
case 'delete' :
|
|
Rsys :: delete_item_right($_GET['item_id'], $_GET['class_id']);
|
|
ob_start();
|
|
Display :: display_normal_message(get_lang('ItemRightDeleted'),false);
|
|
$msg = ob_get_contents();
|
|
ob_end_clean();
|
|
case 'switch' :
|
|
switch ($_GET['switch']) {
|
|
case 'edit' :
|
|
Rsys :: set_new_right($_GET['item_id'], $_GET['class_id'], 'edit_right', $_GET['set']);
|
|
break;
|
|
case 'delete' :
|
|
Rsys :: set_new_right($_GET['item_id'], $_GET['class_id'], 'delete_right', $_GET['set']);
|
|
break;
|
|
case 'manage' :
|
|
Rsys :: set_new_right($_GET['item_id'], $_GET['class_id'], 'm_reservation', $_GET['set']);
|
|
break;
|
|
case 'view' :
|
|
Rsys :: set_new_right($_GET['item_id'], $_GET['class_id'], 'view_right', $_GET['set']);
|
|
break;
|
|
}
|
|
default :
|
|
$item = Rsys :: get_item($_GET['item_id']);
|
|
$NoSearchResults = get_lang('NoRights');
|
|
$interbreadcrumb[] = array ("url" => "m_item.php", "name" => $tool_name);
|
|
Display :: display_header(str_replace('#ITEM#', $item['name'], get_lang('MItemRights')));
|
|
api_display_tool_title(get_lang('MItemRights2'));
|
|
echo $msg;
|
|
$table = new SortableTable('itemrights', array ('Rsys', 'get_num_itemrights'), array ('Rsys', 'get_table_itemrights'), 1);
|
|
$table->set_header(0, '', false, array ('style' => 'width:10px'));
|
|
$table->set_additional_parameters(array('action'=>'m_rights','item_id'=>$_GET['item_id']));
|
|
$table->set_header(1, get_lang('LangClass'), false);
|
|
$table->set_header(2, get_lang('EditItemRight'), false);
|
|
$table->set_header(3, get_lang('DeleteItemRight'), false);
|
|
$table->set_header(4, get_lang('MReservationPeriodsRight'), false);
|
|
$table->set_header(5, get_lang('ViewItemRight'), false);
|
|
$table->set_header(6, '', false, array ('style' => 'width:50px;'));
|
|
$table->set_column_filter(6, 'modify_rights_filter');
|
|
$table->set_form_actions(array (
|
|
'delete_itemrights' => get_lang('DeleteSelectedItemRights'),
|
|
'set_edit_rights' => get_lang('SetEditRights'),
|
|
'unset_edit_rights' => get_lang('UnsetEditRights'),
|
|
'set_delete_rights' => get_lang('SetDeleteRights'),
|
|
'unset_delete_rights' => get_lang('UnsetDeleteRights'),
|
|
'set_mres_rights' => get_lang('SetMresRights'),
|
|
'unset_mres_rights' => get_lang('UnsetMresRights'),
|
|
'set_r_rights' => get_lang('SetViewRights'),
|
|
'unset_r_rights' => get_lang('UnsetViewRights'),
|
|
'set_all_rights' => get_lang('SetAllRights'),
|
|
'unset_all_rights' => get_lang('UnsetAllRights')
|
|
), 'itemrights');
|
|
$table->display();
|
|
}
|
|
break;
|
|
case 'add' :
|
|
$interbreadcrumb[] = array ("url" => "m_item.php", "name" => $tool_name);
|
|
Display :: display_header(get_lang('AddNewItem'));
|
|
api_display_tool_title(get_lang('AddNewItem'));
|
|
$form = new FormValidator('item', 'post', 'm_item.php?action=add');
|
|
$cats = Rsys :: get_category();
|
|
foreach ($cats as $cat)
|
|
$catOptions[$cat['id']] = $cat['name'];
|
|
$form->addElement('select', 'category', get_lang('Category'), $catOptions);
|
|
$form->add_textfield('name', get_lang('ItemName'), true, array ('maxlength' => '128'));
|
|
$form->addElement('textarea', 'description', get_lang('ItemDescription'), array ('rows' => '3', 'cols' => '40'));
|
|
$form->addRule('category', get_lang('ThisFieldIsRequired'), 'required');
|
|
|
|
// TODO: get list of courses (to link it to the item)
|
|
//$form->addElement('select', 'course_code', get_lang('ItemCourse'),array(''=>'','value'=>'tag'));
|
|
//$form->addRule('course', get_lang('ThisFieldIsRequired'), 'required');
|
|
|
|
$form->addElement('submit', 'submit', get_lang('Ok'));
|
|
if ($form->validate()) {
|
|
$values = $form->exportValues();
|
|
if (Rsys :: add_item($values['name'], $values['description'], $values['category'], $values['course_code']))
|
|
Display :: display_normal_message(Rsys :: get_return_msg(get_lang('ItemAdded'), "m_item.php", $tool_name),false);
|
|
else
|
|
Display :: display_normal_message(Rsys :: get_return_msg(get_lang('ItemExist'), "m_item.php?action=add", get_lang('AddNewItem')),false);
|
|
} else
|
|
$form->display();
|
|
break;
|
|
case 'edit' :
|
|
$item = Rsys :: get_item($_GET['id']);
|
|
$cats = Rsys :: get_category();
|
|
foreach ($cats as $cat)
|
|
$catOptions[$cat['id']] = $cat['name'];
|
|
$interbreadcrumb[] = array ("url" => "m_item.php", "name" => $tool_name);
|
|
Display :: display_header(str_replace('#ITEM#', $item['name'], get_lang('EditItem')));
|
|
api_display_tool_title(get_lang('EditItem2'));
|
|
$form = new FormValidator('item', 'post', 'm_item.php?action=edit');
|
|
$form->addElement('select', 'category_id', get_lang('Category'), $catOptions);
|
|
$form->add_textfield('name', get_lang('ItemName'), array ('maxlength' => '128'));
|
|
$form->addElement('textarea', 'description', get_lang('ItemDescription'), array ('rows' => '3', 'cols' => '40'));
|
|
$form->addRule('category_id', get_lang('ThisFieldIsRequired'), 'required');
|
|
$form->addElement('hidden', 'id', $item['id']);
|
|
$form->addElement('submit', 'submit', get_lang('Ok'));
|
|
$form->setDefaults($item);
|
|
if ($form->validate()) {
|
|
$values = $form->exportValues();
|
|
if (Rsys :: edit_item($values['id'], $values['name'], $values['description'], $values['category_id'], $values['course_id']))
|
|
Display :: display_normal_message(Rsys :: get_return_msg(get_lang('ItemEdited'), "m_item.php", $tool_name),false);
|
|
else
|
|
Display :: display_normal_message(Rsys :: get_return_msg(get_lang('ItemExist'), "m_item.php?action=edit&id=".$values['id'], get_lang('EditItem2')),false);
|
|
} else
|
|
$form->display();
|
|
break;
|
|
case 'delete' :
|
|
$result = Rsys :: delete_item($_GET['id']);
|
|
ob_start();
|
|
if($result == '0'){
|
|
Display :: display_normal_message(get_lang('ItemDeleted'),false);}
|
|
else
|
|
Display :: display_normal_message(str_replace('#NUM#', $result, get_lang('ItemHasReservations')),false);
|
|
$msg = ob_get_contents();
|
|
ob_end_clean();
|
|
default :
|
|
$NoSearchResults = get_lang('NoItem');
|
|
Display :: display_header($tool_name);
|
|
api_display_tool_title($tool_name);
|
|
|
|
echo $msg;
|
|
|
|
if($_GET['action'] == 'blackout'){
|
|
$result = Rsys :: black_out_changer($_GET['id']);
|
|
Display :: display_normal_message(get_lang('BlackoutPage'.$result),false);
|
|
}
|
|
|
|
echo '<form id="cat_form" action="m_item.php" method="get"><div style="float: left;"><a href="m_item.php?action=add">'.get_lang('AddNewItem').'</a></div><div style="text-align: right;">'.get_lang('CategoryFilter').': <select name="cat" onchange="this.form.submit();"><option value="0">*** '.get_lang('All').' ***</option>';
|
|
$cats = Rsys :: get_category_with_items_manager();
|
|
foreach ($cats as $cat)
|
|
echo '<option value="'.$cat['id'].'"'. ($cat['id'] == $_GET['cat'] ? ' selected="selected"' : '').'>'.$cat['name'].'</option>';
|
|
echo '</select></div></form>';
|
|
echo "hier";
|
|
$table = new SortableTable('item', array ('Rsys', 'get_num_items'), array ('Rsys', 'get_table_items'), 1);
|
|
echo "hier2";
|
|
$table->set_additional_parameters(array('cat'=>$_GET['cat']));
|
|
$table->set_header(0, '', false, array ('style' => 'width:10px'));
|
|
$table->set_header(1, get_lang('ItemName'), true);
|
|
$table->set_header(2, get_lang('ItemDescription'), true);
|
|
$table->set_header(3, get_lang('Category'), true);
|
|
$table->set_header(4, get_lang('ItemCreator'), true);
|
|
$table->set_header(5, '', false, array ('style' => 'width:100px;'));
|
|
$table->set_column_filter(5, 'modify_filter');
|
|
$table->set_form_actions(array ('delete_items' => get_lang('DeleteSelectedItems')), 'items');
|
|
$table->display();
|
|
}
|
|
|
|
/**
|
|
---------------------------------------------------------------------
|
|
*/
|
|
|
|
Display :: display_footer();
|
|
?>
|
|
|