forked from Wavyzz/dolibarr
516 lines
16 KiB
PHP
516 lines
16 KiB
PHP
<?php
|
||
/* Copyright (C) 2002-2004 Rodolphe Quiedeville <rodolphe@quiedeville.org>
|
||
* Copyright (C) 2002-2003 Jean-Louis Bergamo <jlb@j1b.org>
|
||
* Copyright (C) 2004-2005 Laurent Destailleur <eldy@users.sourceforge.net>
|
||
* Copyright (C) 2004 Eric Seigne <eric.seigne@ryxeo.com>
|
||
*
|
||
* This program is free software; you can redistribute it and/or modify
|
||
* it under the terms of the GNU General Public License as published by
|
||
* the Free Software Foundation; either version 2 of the License, or
|
||
* (at your option) any later version.
|
||
*
|
||
* This program is distributed in the hope that it will be useful,
|
||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
* GNU General Public License for more details.
|
||
*
|
||
* You should have received a copy of the GNU General Public License
|
||
* along with this program; if not, write to the Free Software
|
||
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
||
*
|
||
* $Id$
|
||
* $Source$
|
||
*/
|
||
|
||
/** \file htdocs/user/fiche.php
|
||
\brief Onglet user et permissions de la fiche utilisateur
|
||
\version $Revision$
|
||
*/
|
||
|
||
|
||
require("./pre.inc.php");
|
||
|
||
$langs->load("users");
|
||
|
||
|
||
$form = new Form($db);
|
||
|
||
$action=isset($_GET["action"])?$_GET["action"]:$_POST["action"];
|
||
|
||
|
||
/**
|
||
* Actions
|
||
*/
|
||
if ($_GET["subaction"] == 'addrights' && $user->admin)
|
||
{
|
||
$edituser = new User($db,$_GET["id"]);
|
||
$edituser->addrights($_GET["rights"]);
|
||
}
|
||
|
||
if ($_GET["subaction"] == 'delrights' && $user->admin)
|
||
{
|
||
$edituser = new User($db,$_GET["id"]);
|
||
$edituser->delrights($_GET["rights"]);
|
||
}
|
||
|
||
if ($_POST["action"] == 'confirm_delete' && $_POST["confirm"] == "yes")
|
||
{
|
||
if ($_GET["id"] <> $user->id)
|
||
{
|
||
$edituser = new User($db, $_GET["id"]);
|
||
$edituser->fetch($_GET["id"]);
|
||
$edituser->delete();
|
||
Header("Location: index.php");
|
||
}
|
||
}
|
||
|
||
/**
|
||
* Action ajout user
|
||
*/
|
||
if ($_POST["action"] == 'add' && $user->admin)
|
||
{
|
||
$message="";
|
||
if (! $_POST["nom"]) {
|
||
$message='<div class="error">'.$langs->trans("NameNotDefined").'</div>';
|
||
$action="create"; // Go back to create page
|
||
}
|
||
if (! $_POST["login"]) {
|
||
$message='<div class="error">'.$langs->trans("LoginNotDefined").'</div>';
|
||
$action="create"; // Go back to create page
|
||
}
|
||
if (! $message) {
|
||
$edituser = new User($db,0);
|
||
|
||
$edituser->nom = trim($_POST["nom"]);
|
||
$edituser->note = trim($_POST["note"]);
|
||
$edituser->prenom = trim($_POST["prenom"]);
|
||
$edituser->login = trim($_POST["login"]);
|
||
$edituser->email = trim($_POST["email"]);
|
||
$edituser->admin = trim($_POST["admin"]);
|
||
$edituser->webcal_login = trim($_POST["webcal_login"]);
|
||
|
||
$id = $edituser->create();
|
||
|
||
if ($id) {
|
||
if (isset($_POST['password']) && trim($_POST['password']))
|
||
{
|
||
$edituser->password(trim($_POST['password']),$conf->password_encrypted);
|
||
}
|
||
|
||
Header("Location: fiche.php?id=$id");
|
||
}
|
||
else {
|
||
$message='<div class="error">'.$langs->trans("ErrorLoginAlreadyExists",$edituser->login).'</div>';
|
||
$action="create"; // Go back to create page
|
||
}
|
||
}
|
||
}
|
||
|
||
if ($_POST["action"] == 'update' && $user->admin)
|
||
{
|
||
$edituser = new User($db, $_GET["id"]);
|
||
$edituser->fetch();
|
||
|
||
$edituser->nom = $_POST["nom"];
|
||
$edituser->note = $_POST["note"];
|
||
$edituser->prenom = $_POST["prenom"];
|
||
$edituser->login = $_POST["login"];
|
||
$edituser->email = $_POST["email"];
|
||
$edituser->admin = $_POST["admin"];
|
||
$edituser->webcal_login = $_POST["webcal_login"];
|
||
|
||
if (! $edituser->update())
|
||
{
|
||
print $edituser->error();
|
||
}
|
||
if (isset($password) && $password !='' )
|
||
{
|
||
$edituser->password($password,$conf->password_encrypted);
|
||
}
|
||
}
|
||
|
||
if ($_GET["action"] == 'password' && $user->admin)
|
||
{
|
||
$edituser = new User($db, $_GET["id"]);
|
||
$edituser->fetch();
|
||
|
||
if ($edituser->password('',$conf->password_encrypted))
|
||
{
|
||
$message = $langs->trans("PasswordChangedAndSentTo",$edituser->email);
|
||
}
|
||
}
|
||
|
||
|
||
llxHeader();
|
||
|
||
|
||
/* ************************************************************************** */
|
||
/* */
|
||
/* Affichage fiche en mode cr<63>ation */
|
||
/* */
|
||
/* ************************************************************************** */
|
||
|
||
if ($action == 'create')
|
||
{
|
||
|
||
print_titre($langs->trans("NewUser"));
|
||
|
||
print "<br>";
|
||
if ($message) { print $message."<br>"; }
|
||
|
||
print '<form action="fiche.php" method="post">';
|
||
print '<input type="hidden" name="action" value="add">';
|
||
|
||
print '<table class="border" width="100%">';
|
||
|
||
print "<tr>".'<td valign="top">'.$langs->trans("Lastname").'</td>';
|
||
print '<td class="valeur"><input size="30" type="text" name="nom" value=""></td></tr>';
|
||
|
||
print '<tr><td valign="top" width="20%">'.$langs->trans("Firstname").'</td>';
|
||
print '<td class="valeur"><input size="30" type="text" name="prenom" value=""></td></tr>';
|
||
|
||
print "<tr>".'<td valign="top">'.$langs->trans("Login").'</td>';
|
||
print '<td class="valeur"><input size="20" type="text" name="login" value=""></td></tr>';
|
||
|
||
print "<tr>".'<td valign="top">'.$langs->trans("Password").'</td>';
|
||
print '<td class="valeur"><input size="30" type="text" name="password" value=""></td></tr>';
|
||
|
||
print "<tr>".'<td valign="top">'.$langs->trans("EMail").'</td>';
|
||
print '<td class="valeur"><input size="40" type="text" name="email" value=""></td></tr>';
|
||
|
||
print "<tr>".'<td valign="top">'.$langs->trans("Administrator").'</td>';
|
||
print '<td class="valeur">';
|
||
$form->selectyesnonum('admin',0);
|
||
print "</td></tr>\n";
|
||
|
||
print "<tr>".'<td valign="top">'.$langs->trans("Note").'</td><td>';
|
||
print "<textarea name=\"note\" rows=\"12\" cols=\"40\">";
|
||
print "</textarea></td></tr>\n";
|
||
|
||
// Autres caract<63>ristiques issus des autres modules
|
||
if ($conf->webcal->enabled)
|
||
{
|
||
print "<tr>".'<td valign="top">'.$langs->trans("LoginWebcal").'</td>';
|
||
print '<td class="valeur"><input size="30" type="text" name="webcal_login" value=""></td></tr>';
|
||
}
|
||
|
||
print "<tr>".'<td align="center" colspan="2"><input value="'.$langs->trans("CreateUser").'" type="submit"></td></tr>';
|
||
print "</form>";
|
||
print "</table>\n";
|
||
}
|
||
|
||
|
||
/* ************************************************************************** */
|
||
/* */
|
||
/* Visu et edition */
|
||
/* */
|
||
/* ************************************************************************** */
|
||
else
|
||
{
|
||
if ($_GET["id"])
|
||
{
|
||
$fuser = new User($db, $_GET["id"]);
|
||
$fuser->fetch();
|
||
$fuser->getrights();
|
||
|
||
/*
|
||
* Affichage onglets
|
||
*/
|
||
|
||
$h = 0;
|
||
|
||
$head[$h][0] = DOL_URL_ROOT.'/user/fiche.php?id='.$fuser->id;
|
||
$head[$h][1] = $langs->trans("UserCard");
|
||
if ($_GET["action"] != 'perms') { $hselected=$h; }
|
||
$h++;
|
||
|
||
if ($user->admin)
|
||
{
|
||
$head[$h][0] = DOL_URL_ROOT.'/user/fiche.php?action=perms&id='.$fuser->id;
|
||
$head[$h][1] = $langs->trans("Permissions");
|
||
if ($_GET["action"] == 'perms') { $hselected=$h; }
|
||
$h++;
|
||
}
|
||
|
||
if ($conf->bookmark4u->enabled)
|
||
{
|
||
$head[$h][0] = DOL_URL_ROOT.'/user/addon.php?id='.$fuser->id;
|
||
$head[$h][1] = $langs->trans("Bookmark4u");
|
||
$h++;
|
||
}
|
||
|
||
dolibarr_fiche_head($head, $hselected, $langs->trans("User")." : ".$fuser->fullname);
|
||
|
||
|
||
/*
|
||
* Confirmation suppression
|
||
*/
|
||
if ($action == 'delete')
|
||
{
|
||
$html = new Form($db);
|
||
$html->form_confirm("fiche.php?id=$fuser->id",$langs->trans("DisableAUser"),$langs->trans("ConfirmDisableUser",$fuser->login),"confirm_delete");
|
||
}
|
||
|
||
|
||
|
||
if ($_GET["action"] == 'perms')
|
||
{
|
||
if ($message) { print "$message<br>"; }
|
||
|
||
/*
|
||
* Ecran ajout/suppression permission
|
||
*/
|
||
|
||
print '<table class="noborder" width="100%">';
|
||
|
||
|
||
// Droits existant
|
||
print "<tr>".'<td valign="top" colspan="2">';
|
||
print '<table width="100%" class="noborder">';
|
||
print '<tr class="liste_titre"><td>'.$langs->trans("AvailableRights").'</td><td>'.$langs->trans("Module").'</td><td> </td></tr>';
|
||
$sql = "SELECT r.id, r.libelle, r.module FROM ".MAIN_DB_PREFIX."rights_def as r ORDER BY r.module, r.id ASC";
|
||
|
||
if ($db->query($sql))
|
||
{
|
||
$num = $db->num_rows();
|
||
$i = 0;
|
||
$var = True;
|
||
while ($i < $num)
|
||
{
|
||
$obj = $db->fetch_object($i);
|
||
if ($oldmod <> $obj->module)
|
||
{
|
||
$oldmod = $obj->module;
|
||
$var = !$var;
|
||
}
|
||
print '<tr '. $bc[$var].'>';
|
||
print '<td>'.$obj->libelle . '</td><td>'.$obj->module . '</td>';
|
||
print '<td><a href="fiche.php?id='.$fuser->id.'&action=perms&subaction=addrights&rights='.$obj->id.'">'.img_edit_add().'</a></td>';
|
||
print '</tr>';
|
||
|
||
$i++;
|
||
}
|
||
}
|
||
print '</table>';
|
||
|
||
print '</td><td colspan="2" valign="top">';
|
||
|
||
// Droits poss<73>d<EFBFBD>s
|
||
print '<table class="noborder" width="100%">';
|
||
print '<tr class="liste_titre"><td> </td><td>'.$langs->trans("OwnedRights").'</td><td>'.$langs->trans("Module").'</td></tr>';
|
||
|
||
$sql = "SELECT r.id, r.libelle, r.module FROM ".MAIN_DB_PREFIX."rights_def as r, ".MAIN_DB_PREFIX."user_rights as ur";
|
||
$sql .= " WHERE ur.fk_id = r.id AND ur.fk_user = ".$fuser->id. " ORDER BY r.module, r.id ASC";
|
||
$var = True;
|
||
$result=$db->query($sql);
|
||
|
||
if ($result)
|
||
{
|
||
$num = $db->num_rows();
|
||
$i = 0;
|
||
while ($i < $num)
|
||
{
|
||
$obj = $db->fetch_object($i);
|
||
if ($oldmod <> $obj->module)
|
||
{
|
||
$oldmod = $obj->module;
|
||
$var = !$var;
|
||
}
|
||
|
||
print "<tr $bc[$var]>";
|
||
print " <td align= \"right\"><a href=\"fiche.php?id=".$fuser->id."&action=perms&subaction=delrights&rights=".$obj->id."\">".img_edit_remove()."</a></td>\n";
|
||
print " <td>".$obj->libelle . "</td><td>".$obj->module . "</td>\n";
|
||
print "</tr>";
|
||
$i++;
|
||
}
|
||
}
|
||
else {
|
||
dolibarr_print_error($db);
|
||
}
|
||
print '</table>';
|
||
print '</td></tr>';
|
||
}
|
||
|
||
|
||
if ($_GET["action"] != 'perms' && $_GET["action"] != 'edit')
|
||
{
|
||
/*
|
||
* Fiche en mode visu
|
||
*/
|
||
|
||
print '<table class="border" width="100%">';
|
||
|
||
print '<tr><td width="25%" valign="top">'.$langs->trans("Lastname").'</td>';
|
||
print '<td width="50%" class="valeur">'.$fuser->nom.'</td>';
|
||
print '<td align="center" valign="middle" width="25%" rowspan="8">';
|
||
if (file_exists($conf->users->dir_output."/".$fuser->id.".jpg"))
|
||
{
|
||
print '<img src="'.DOL_URL_ROOT.'/image.php?modulepart=userphoto&file='.$fuser->id.'.jpg">';
|
||
}
|
||
else {
|
||
print '<img src="'.DOL_URL_ROOT.'/theme/nophoto.jpg">';
|
||
}
|
||
print '</td></tr>';
|
||
|
||
print '<tr><td width="25%" valign="top">'.$langs->trans("Firstname").'</td>';
|
||
print '<td width="50%" class="valeur">'.$fuser->prenom.'</td>';
|
||
print "</tr>\n";
|
||
|
||
print '<tr><td width="25%" valign="top">'.$langs->trans("Login").'</td>';
|
||
print '<td width="50%" class="valeur">'.$fuser->login.'</td></tr>';
|
||
|
||
print '<tr><td width="25%" valign="top">'.$langs->trans("EMail").'</td>';
|
||
print '<td width="50%" class="valeur"><a href="mailto:'.$fuser->email.'">'.$fuser->email.'</a></td>';
|
||
print "</tr>\n";
|
||
|
||
print '<tr><td width="25%" valign="top">'.$langs->trans("Administrator").'</td>';
|
||
print '<td class="valeur">'.yn($fuser->admin).'</td>';
|
||
print "</tr>\n";
|
||
|
||
print '<tr><td width="25%" valign="top">'.$langs->trans("DateCreation").'</td>';
|
||
print '<td class="valeur">'.dolibarr_print_date($fuser->datec).'</td>';
|
||
print "</tr>\n";
|
||
|
||
print '<tr><td width="25%" valign="top">'.$langs->trans("DateModification").'</td>';
|
||
print '<td class="valeur">'.dolibarr_print_date($fuser->datem).'</td>';
|
||
print "</tr>\n";
|
||
|
||
print "<tr>".'<td width="25%" valign="top">'.$langs->trans("ContactCard").'</td>';
|
||
print '<td>';
|
||
if ($fuser->contact_id)
|
||
{
|
||
print '<a href="../contact/fiche.php?id='.$fuser->contact_id.'">'.$langs->trans("ContactCard").'</a>';
|
||
}
|
||
else
|
||
{
|
||
print $langs->trans("NoContactCard");
|
||
}
|
||
print '</td>';
|
||
print "</tr>\n";
|
||
|
||
if ($fuser->societe_id > 0)
|
||
{
|
||
$societe = new Societe($db);
|
||
$societe->fetch($fuser->societe_id);
|
||
print "<tr>".'<td width="25%" valign="top">'.$langs->trans("Company").'</td>';
|
||
print '<td colspan="2">'.$societe->nom.' </td>';
|
||
print "</tr>\n";
|
||
}
|
||
|
||
print "<tr>".'<td width="25%" valign="top">'.$langs->trans("Note").'</td>';
|
||
print '<td colspan="2" class="valeur">'.nl2br($fuser->note).' </td>';
|
||
print "</tr>\n";
|
||
|
||
// Autres caract<63>ristiques issus des autres modules
|
||
if ($conf->webcal->enabled)
|
||
{
|
||
$langs->load("other");
|
||
print '<tr><td width="25%" valign="top">'.$langs->trans("LoginWebcal").'</td>';
|
||
print '<td colspan="2">'.$fuser->webcal_login.' </td>';
|
||
print "</tr>\n";
|
||
}
|
||
|
||
print "</table>\n";
|
||
print "<br>\n";
|
||
|
||
print "</div>\n";
|
||
|
||
|
||
/*
|
||
* Barre d'actions
|
||
*
|
||
*/
|
||
print '<div class="tabsAction">';
|
||
|
||
if ($user->admin)
|
||
{
|
||
print '<a class="tabAction" href="fiche.php?id='.$fuser->id.'&action=edit">'.$langs->trans("Edit").'</a>';
|
||
}
|
||
|
||
if ($user->id == $_GET["id"] or $user->admin)
|
||
{
|
||
print '<a class="tabAction" href="fiche.php?id='.$fuser->id.'&action=password">'.$langs->trans("SendNewPassword").'</a>';
|
||
}
|
||
|
||
if ($user->id <> $_GET["id"] && $user->admin)
|
||
{
|
||
print '<a class="butDelete" href="fiche.php?action=delete&id='.$fuser->id.'">'.$langs->trans("DisableUser").'</a>';
|
||
}
|
||
|
||
print "</div>\n";
|
||
print "<br>\n";
|
||
|
||
}
|
||
|
||
/*
|
||
* Fiche en mode edition
|
||
*/
|
||
if ($_GET["action"] == 'edit' && $user->admin)
|
||
{
|
||
|
||
print '<form action="fiche.php?id='.$fuser->id.'" method="post">';
|
||
print '<input type="hidden" name="action" value="update">';
|
||
print '<table width="100%" class="border">';
|
||
|
||
print '<tr><td width="25%" valign="top">'.$langs->trans("Lastname").'</td>';
|
||
print '<td width="50%" class="valeur"><input size="30" type="text" name="nom" value="'.$fuser->nom.'"></td>';
|
||
print '<td align="center" valign="middle" width="25%" rowspan="6">';
|
||
if (file_exists($conf->users->dir_output."/".$fuser->id.".jpg"))
|
||
{
|
||
print '<img src="'.DOL_URL_ROOT.'/image.php?modulepart=userphoto&file='.$fuser->id.'.jpg">';
|
||
}
|
||
else {
|
||
print '<img src="'.DOL_URL_ROOT.'/theme/nophoto.jpg">';
|
||
}
|
||
print '</td></tr>';
|
||
|
||
print "<tr>".'<td valign="top">'.$langs->trans("Firstname").'</td>';
|
||
print '<td><input size="30" type="text" name="prenom" value="'.$fuser->prenom.'"></td></tr>';
|
||
|
||
print "<tr>".'<td valign="top">'.$langs->trans("Login").'</td>';
|
||
print '<td><input size="12" maxlength="8" type="text" name="login" value="'.$fuser->login.'"></td></tr>';
|
||
|
||
print "<tr>".'<td valign="top">'.$langs->trans("EMail").'</td>';
|
||
print '<td><input size="30" type="text" name="email" value="'.$fuser->email.'"></td></tr>';
|
||
|
||
print "<tr>".'<td valign="top">'.$langs->trans("Administrator").'</td>';
|
||
if ($fuser->societe_id > 0)
|
||
{
|
||
print '<td class="valeur">';
|
||
print '<input type="hidden" name="admin" value="0">'.$langs->trans("No");
|
||
print '</td></tr>';
|
||
}
|
||
else
|
||
{
|
||
print '<td class="valeur">';
|
||
$form->selectyesnonum('admin',$fuser->admin);
|
||
print '</td></tr>';
|
||
}
|
||
|
||
print "<tr>".'<td valign="top">'.$langs->trans("Note").'</td><td>';
|
||
print "<textarea name=\"note\" rows=\"10\" cols=\"40\">";
|
||
print $fuser->note;
|
||
print "</textarea></td></tr>";
|
||
|
||
// Autres caract<63>ristiques issus des autres modules
|
||
$langs->load("other");
|
||
print "<tr>".'<td valign="top">'.$langs->trans("LoginWebcal").'</td>';
|
||
print '<td class="valeur" colspan="2"><input size="30" type="text" name="webcal_login" value="'.$fuser->webcal_login.'"></td></tr>';
|
||
|
||
print '<tr><td align="center" colspan="3"><input value="'.$langs->trans("Save").'" type="submit"></td></tr>';
|
||
|
||
print '</table><br>';
|
||
print '</form>';
|
||
|
||
|
||
}
|
||
|
||
}
|
||
|
||
}
|
||
|
||
$db->close();
|
||
|
||
llxFooter("<em>Dernière modification $Date$ révision $Revision$</em>");
|
||
?>
|