Commit b9362d384906d8b7d2ad2c5ef8e0476ea90fe09d

Authored by Michael Joseph
1 parent 395d15d2

added code to restrict unit admin to adminstering his unit only


git-svn-id: https://kt-dms.svn.sourceforge.net/svnroot/kt-dms/trunk@1504 c91229c3-7414-0410-bfa2-8a42b809f60b
presentation/lookAndFeel/knowledgeTree/administration/usermanagement/removeUserFromGroupUI.inc
@@ -9,256 +9,240 @@ @@ -9,256 +9,240 @@
9 */ 9 */
10 10
11 // get page for removal 11 // get page for removal
12 -function getPage($iUserID) {  
13 - global $default;  
14 - $oUser = null;  
15 - $oGroup = null;  
16 -  
17 - // change headings if User selected  
18 - if (isset($iUserID)) {  
19 - $oUser = User::get($iUserID);  
20 - }else{  
21 - $heading = "<tr>Please select a User: </tr>\n";  
22 - }  
23 -  
24 - $sToRender .= "<br></br>\n";  
25 - $sToRender .= "<b>Select a User to Remove from a Group:</b>\n";  
26 - $sToRender .= "<table>\n";  
27 - $sToRender .= "<br></br>\n";  
28 - $sToRender .= $heading;  
29 - $sToRender .= "<br>\n";  
30 - $sToRender .= "<tr>\n";  
31 - $sToRender .= "</tr>\n";  
32 - $sToRender .= "<td>User Name: " . getUserDisplay($oUser) . "</td>\n";  
33 - $sToRender .= "<tr>\n";  
34 - $sToRender .= "</tr>\n";  
35 - $sToRender .= "<tr>\n";  
36 - $sToRender .= "</tr>\n";  
37 - $sToRender .= "<tr>\n";  
38 - $sToRender .= "</tr>\n";  
39 - //$sToRender .= "<td></td><td>" . getDeleteButton($oUser);  
40 - //$sToRender .= "<td></td><td>" . getCancelButton($oUser);  
41 - $sToRender .= "</td></table>\n";  
42 -  
43 -  
44 - return $sToRender; 12 +function getPage($iUserID) {
  13 + global $default;
  14 + $oUser = null;
  15 + $oGroup = null;
  16 +
  17 + // change headings if User selected
  18 + if (isset($iUserID)) {
  19 + $oUser = User::get($iUserID);
  20 + } else {
  21 + $heading = "<tr>Please select a User: </tr>\n";
  22 + }
  23 +
  24 + $sToRender .= "<br></br>\n";
  25 + $sToRender .= "<b>Select a User to Remove from a Group:</b>\n";
  26 + $sToRender .= "<table>\n";
  27 + $sToRender .= "<br></br>\n";
  28 + $sToRender .= $heading;
  29 + $sToRender .= "<br>\n";
  30 + $sToRender .= "<tr>\n";
  31 + $sToRender .= "</tr>\n";
  32 + $sToRender .= "<td>User Name: " . getUserDisplay($oUser) . "</td>\n";
  33 + $sToRender .= "<tr>\n";
  34 + $sToRender .= "</tr>\n";
  35 + $sToRender .= "<tr>\n";
  36 + $sToRender .= "</tr>\n";
  37 + $sToRender .= "<tr>\n";
  38 + $sToRender .= "</tr>\n";
  39 + //$sToRender .= "<td></td><td>" . getDeleteButton($oUser);
  40 + //$sToRender .= "<td></td><td>" . getCancelButton($oUser);
  41 + $sToRender .= "</td></table>\n";
  42 +
  43 +
  44 + return $sToRender;
45 } 45 }
46 46
47 47
48 48
49 // get page for removal 49 // get page for removal
50 -function getGroupPage($iUserID, $aGroup) {  
51 - global $default;  
52 - $oUser = null;  
53 - $oGroup = null;  
54 -  
55 - // change headings if User selected  
56 - if (isset($iUserID)) {  
57 - $oUser = User::get($iUserID);  
58 - }  
59 -  
60 - // change headings if User selected  
61 - if (isset($fGroupID)) {  
62 - $oGroup = Group::get($fGroupID);  
63 - echo "what: " . $oGroup->getName();  
64 - }  
65 -  
66 - // when Groupid is gotten show the name  
67 - if (!isset($oGroup)) {  
68 -  
69 - $Groupdisplay = "<td>Group Name: " . getGroupDisplay($aGroup) . "</td>\n";  
70 - }  
71 - else{  
72 - $Groupdisplay = "<td>Group Name: " . $oGroup->getName() . "</td>\n";  
73 - }  
74 -  
75 - $sToRender .= "<br></br>\n";  
76 - $sToRender .= "<b>Select a Group to Remove User from:</b>\n";  
77 - $sToRender .= "<table>\n";  
78 - $sToRender .= "<br></br>\n";  
79 - $sToRender .= "<tr>\n";  
80 - $sToRender .= "</tr>\n";  
81 - $sToRender .= "<td>User Name: " . getUserDisplay($oUser) . "</td>\n";  
82 - $sToRender .= "<tr>\n";  
83 - $sToRender .= "</tr>\n";  
84 - $sToRender .= "<tr>\n";  
85 - $sToRender .= $Groupdisplay;  
86 - $sToRender .= "</tr>\n";  
87 - $sToRender .= "<tr>\n";  
88 - $sToRender .= "</tr>\n";  
89 - $sToRender .= "<tr>\n";  
90 - $sToRender .= "</tr>\n";  
91 - $sToRender .= "<td></td><td>" . getSelectButton($oUser);  
92 - $sToRender .= "<td></td><td>" . getCancelButton($oUser);  
93 - $sToRender .= "</td></table>\n";  
94 -  
95 -  
96 - return $sToRender; 50 +function getGroupPage($iUserID, $aGroup) {
  51 + global $default;
  52 + $oUser = null;
  53 + $oGroup = null;
  54 +
  55 + // change headings if User selected
  56 + if (isset($iUserID)) {
  57 + $oUser = User::get($iUserID);
  58 + }
  59 +
  60 + // change headings if User selected
  61 + if (isset($fGroupID)) {
  62 + $oGroup = Group::get($fGroupID);
  63 + echo "what: " . $oGroup->getName();
  64 + }
  65 +
  66 + // when Groupid is gotten show the name
  67 + if (!isset($oGroup)) {
  68 +
  69 + $Groupdisplay = "<td>Group Name: " . getGroupDisplay($aGroup) . "</td>\n";
  70 + } else {
  71 + $Groupdisplay = "<td>Group Name: " . $oGroup->getName() . "</td>\n";
  72 + }
  73 +
  74 + $sToRender .= "<br></br>\n";
  75 + $sToRender .= "<b>Select a Group to Remove User from:</b>\n";
  76 + $sToRender .= "<table>\n";
  77 + $sToRender .= "<br></br>\n";
  78 + $sToRender .= "<tr>\n";
  79 + $sToRender .= "</tr>\n";
  80 + $sToRender .= "<td>User Name: " . getUserDisplay($oUser) . "</td>\n";
  81 + $sToRender .= "<tr>\n";
  82 + $sToRender .= "</tr>\n";
  83 + $sToRender .= "<tr>\n";
  84 + $sToRender .= $Groupdisplay;
  85 + $sToRender .= "</tr>\n";
  86 + $sToRender .= "<tr>\n";
  87 + $sToRender .= "</tr>\n";
  88 + $sToRender .= "<tr>\n";
  89 + $sToRender .= "</tr>\n";
  90 + $sToRender .= "<td></td><td>" . getSelectButton($oUser);
  91 + $sToRender .= "<td></td><td>" . getCancelButton($oUser);
  92 + $sToRender .= "</td></table>\n";
  93 +
  94 +
  95 + return $sToRender;
97 } 96 }
98 97
99 // get page for removal 98 // get page for removal
100 -function getDeleteConfirmedPage($iUserID,$fGroupID) {  
101 - global $default;  
102 - $oUser = null;  
103 - $oGroup = null;  
104 -  
105 - // change headings if User selected  
106 - if (isset($iUserID)) {  
107 - $oUser = User::get($iUserID);  
108 - $heading = "<tr>Are you sure you wish to remove this user from the Group?</tr>";  
109 - }  
110 -  
111 - // change headings if User selected  
112 - if (isset($fGroupID)) {  
113 - $oGroup = Group::get($fGroupID);  
114 - $Groupdisplay = "<td>Group Name: " . $oGroup->getName() . "</td>\n";  
115 - }  
116 -  
117 - $sToRender .= "<br></br>\n";  
118 - $sToRender .= "<b>Select a Group to Remove User from:</b>\n";  
119 - $sToRender .= "<table>\n";  
120 - $sToRender .= "<br></br>\n";  
121 - $sToRender .= "<tr>\n";  
122 - $sToRender .= $heading;  
123 - $sToRender .= "</tr>\n";  
124 - $sToRender .= "<td>User Name: " . getUserDisplay($oUser) . "</td>\n";  
125 - $sToRender .= "<tr>\n";  
126 - $sToRender .= "</tr>\n";  
127 - $sToRender .= "<tr>\n";  
128 - $sToRender .= $Groupdisplay;  
129 - $sToRender .= "</tr>\n";  
130 - $sToRender .= "<tr>\n";  
131 - $sToRender .= "</tr>\n";  
132 - $sToRender .= "<tr>\n";  
133 - $sToRender .= "</tr>\n";  
134 - $sToRender .= "<td></td><td>" . getDeleteButton($oUser);  
135 - $sToRender .= "<td></td><td>" . getCancelButton($oUser);  
136 - $sToRender .= "</td></table>\n";  
137 -  
138 -  
139 - return $sToRender; 99 +function getDeleteConfirmedPage($iUserID,$fGroupID) {
  100 + global $default;
  101 + $oUser = null;
  102 + $oGroup = null;
  103 +
  104 + // change headings if User selected
  105 + if (isset($iUserID)) {
  106 + $oUser = User::get($iUserID);
  107 + $heading = "<tr>Are you sure you wish to remove this user from the Group?</tr>";
  108 + }
  109 +
  110 + // change headings if User selected
  111 + if (isset($fGroupID)) {
  112 + $oGroup = Group::get($fGroupID);
  113 + $Groupdisplay = "<td>Group Name: " . $oGroup->getName() . "</td>\n";
  114 + }
  115 +
  116 + $sToRender .= "<br></br>\n";
  117 + $sToRender .= "<b>Select a Group to Remove User from:</b>\n";
  118 + $sToRender .= "<table>\n";
  119 + $sToRender .= "<br></br>\n";
  120 + $sToRender .= "<tr>\n";
  121 + $sToRender .= $heading;
  122 + $sToRender .= "</tr>\n";
  123 + $sToRender .= "<td>User Name: " . getUserDisplay($oUser) . "</td>\n";
  124 + $sToRender .= "<tr>\n";
  125 + $sToRender .= "</tr>\n";
  126 + $sToRender .= "<tr>\n";
  127 + $sToRender .= $Groupdisplay;
  128 + $sToRender .= "</tr>\n";
  129 + $sToRender .= "<tr>\n";
  130 + $sToRender .= "</tr>\n";
  131 + $sToRender .= "<tr>\n";
  132 + $sToRender .= "</tr>\n";
  133 + $sToRender .= "<td></td><td>" . getDeleteButton($oUser);
  134 + $sToRender .= "<td></td><td>" . getCancelButton($oUser);
  135 + $sToRender .= "</td></table>\n";
  136 +
  137 +
  138 + return $sToRender;
140 } 139 }
141 140
142 // show paig if deletion fails 141 // show paig if deletion fails
143 -function getPageFail() {  
144 - global $default;  
145 -  
146 - $sToRender .= "<br></br>\n";  
147 - $sToRender .= "<b>Sorry, Removal Failed</b>\n";  
148 - $sToRender .= "<table>\n";  
149 - $sToRender .= "<br></br>\n";  
150 - $sToRender .= "<tr></tr>\n";  
151 - $sToRender .= "</tr>\n";  
152 - $sToRender .= "<tr>\n";  
153 - $sToRender .= "</tr>\n";  
154 - $sToRender .= "<tr>\n";  
155 - $sToRender .= "<td></td><td align = right><a href=\"$default->rootUrl/control.php?action=removeUserFromGroup\"><img src =\"$default->graphicsUrl/widgets/back.gif\" border = \"0\" /></a></td>\n";  
156 - $sToRender .= "</tr>\n";  
157 -  
158 - $sToRender .= "</table>\n";  
159 -  
160 -  
161 - return $sToRender; 142 +function getPageFail() {
  143 + global $default;
  144 +
  145 + $sToRender .= "<br></br>\n";
  146 + $sToRender .= "<b>Sorry, Removal Failed</b>\n";
  147 + $sToRender .= "<table>\n";
  148 + $sToRender .= "<br></br>\n";
  149 + $sToRender .= "<tr></tr>\n";
  150 + $sToRender .= "</tr>\n";
  151 + $sToRender .= "<tr>\n";
  152 + $sToRender .= "</tr>\n";
  153 + $sToRender .= "<tr>\n";
  154 + $sToRender .= "<td></td><td align = right><a href=\"$default->rootUrl/control.php?action=removeUserFromGroup\"><img src =\"$default->graphicsUrl/widgets/back.gif\" border = \"0\" /></a></td>\n";
  155 + $sToRender .= "</tr>\n";
  156 +
  157 + $sToRender .= "</table>\n";
  158 +
  159 +
  160 + return $sToRender;
162 } 161 }
163 162
164 // show success page if removed from Group successfully 163 // show success page if removed from Group successfully
165 -function getPageSuccess() {  
166 - global $default;  
167 -  
168 - $sToRender .= "<br></br>\n";  
169 - $sToRender .= "<b>Success!</b>\n";  
170 - $sToRender .= "<table>\n";  
171 - $sToRender .= "<br></br>\n";  
172 - $sToRender .= "<tr></tr>\n";  
173 - $sToRender .= "<tr><td>The User was successfully removed from the Group</td></tr>\n";  
174 - $sToRender .= "<tr></tr>\n";  
175 - $sToRender .= "<tr></tr>\n";  
176 - $sToRender .= "<tr>\n";  
177 - $sToRender .= "<td></td><td align = right><a href=\"$default->rootUrl/control.php?action=removeUserFromGroup\"><img src =\"$default->graphicsUrl/widgets/back.gif\" border = \"0\" /></a></td>\n";  
178 - $sToRender .= "</tr>\n";  
179 - $sToRender .= "</table>\n";  
180 -  
181 -  
182 - return $sToRender; 164 +function getPageSuccess() {
  165 + global $default;
  166 +
  167 + $sToRender .= "<br></br>\n";
  168 + $sToRender .= "<b>Success!</b>\n";
  169 + $sToRender .= "<table>\n";
  170 + $sToRender .= "<br></br>\n";
  171 + $sToRender .= "<tr></tr>\n";
  172 + $sToRender .= "<tr><td>The User was successfully removed from the Group</td></tr>\n";
  173 + $sToRender .= "<tr></tr>\n";
  174 + $sToRender .= "<tr></tr>\n";
  175 + $sToRender .= "<tr>\n";
  176 + $sToRender .= "<td></td><td align = right><a href=\"$default->rootUrl/control.php?action=removeUserFromGroup\"><img src =\"$default->graphicsUrl/widgets/back.gif\" border = \"0\" /></a></td>\n";
  177 + $sToRender .= "</tr>\n";
  178 + $sToRender .= "</table>\n";
  179 +
  180 +
  181 + return $sToRender;
183 } 182 }
184 // show listbox of Users belonging to Users_Groups_link table 183 // show listbox of Users belonging to Users_Groups_link table
185 function getUserDisplay($oUser) { 184 function getUserDisplay($oUser) {
186 - global $default;  
187 - // added clauses to get those Users belonging to the Users_Groups_link table  
188 - $from = "," . $default->owl_users_groups_table . " AS GU";  
189 - $where = "(ST.id = GU.user_id)";  
190 -  
191 -  
192 - if (!isset($oUser)) {  
193 - $oPatternListBox = & new PatternListBox($default->owl_users_table, "username", "id", "fUserID");  
194 - $oPatternListBox->setWhereClause($where);  
195 - $oPatternListBox->setFromClause($from);  
196 - //$oPatternListBox->setIncludeDefaultValue(true);  
197 - $oPatternListBox->setPostBackOnChange(true);  
198 - return $oPatternListBox->render();  
199 - } else {  
200 - return "<input type=\"hidden\" name=\"fUserID\" value=\"" . $oUser->iId . "\">\n" .  
201 - $oUser->getUserName();  
202 - }  
203 -  
204 -}  
205 -  
206 - 185 + global $default;
  186 + if (!isset($oUser)) {
  187 + $oPatternListBox = & new PatternListBox($default->owl_users_table, "username", "id", "fUserID");
  188 + if (Permission::userIsUnitAdministrator()) {
  189 + $oPatternListBox->setFromClause("INNER JOIN $default->owl_users_groups_table UGL on ST.id=UGL.user_id " .
  190 + "INNER JOIN $default->owl_groups_units_table GUL on UGL.group_id=GUL.group_id");
  191 + $oPatternListBox->setWhereClause("GUL.unit_id=" . User::getUnitID($_SESSION["userID"]));
  192 + }
  193 + $oPatternListBox->setPostBackOnChange(true);
  194 + return $oPatternListBox->render();
  195 + } else {
  196 + return "<input type=\"hidden\" name=\"fUserID\" value=\"" . $oUser->iId . "\">\n" .
  197 + $oUser->getUserName();
  198 + }
207 199
  200 +}
208 201
209 // show Group details on confirm deletion page 202 // show Group details on confirm deletion page
210 function getGroupDisplay($aGroup) { 203 function getGroupDisplay($aGroup) {
211 - global $default;  
212 - /*"select UGL.group_id, GL.name from users_groups_link as UGL  
213 - inner join groups_lookup AS GL on UGL.group_id = GL.id  
214 - where UGL.user_id=1"  
215 - */  
216 -  
217 - $oGroup= null;  
218 - $sGroup = "<Select Name=\"fGroupID\">";  
219 -  
220 - for ($i=0;$i < count($aGroup);$i++){  
221 -  
222 - $oGroup= Group::get($aGroup[$i]);  
223 - $Options .= "<OPTION value= \"". $oGroup->iId . "\">". $oGroup->getName() ."</OPTION>\n";  
224 -  
225 - }  
226 -  
227 - $sGroup .= $Options . "</SELECT>";  
228 -  
229 - return $sGroup;  
230 - 204 + global $default;
  205 +
  206 + $oGroup= null;
  207 + $sGroup = "<select name=\"fGroupID\">";
  208 + for ($i=0;$i < count($aGroup);$i++) {
  209 + $oGroup= Group::get($aGroup[$i]);
  210 + $Options .= "<OPTION value= \"". $oGroup->iId . "\">". $oGroup->getName() ."</OPTION>\n";
  211 + }
  212 + $sGroup .= $Options . "</SELECT>";
  213 + return $sGroup;
231 } 214 }
232 215
233 216
234 // show delete button or select button 217 // show delete button or select button
235 function getDeleteButton($oUser) { 218 function getDeleteButton($oUser) {
236 - global $default;  
237 - if (!isset($oUser)) {  
238 - return "<td align = right><input type=\"image\" src =\"$default->graphicsUrl/widgets/select.gif\" value=\"submit\" /></td>\n";  
239 - } else {  
240 - return "<td align = right><input type=\"image\" src =\"$default->graphicsUrl/widgets/delete.gif\" value=\"submit\" /></td>\n";  
241 - } 219 + global $default;
  220 + if (!isset($oUser)) {
  221 + return "<td align = right><input type=\"image\" src =\"$default->graphicsUrl/widgets/select.gif\" value=\"submit\" /></td>\n";
  222 + } else {
  223 + return "<td align = right><input type=\"image\" src =\"$default->graphicsUrl/widgets/delete.gif\" value=\"submit\" /></td>\n";
  224 + }
242 } 225 }
243 226
244 227
245 // show delete button or select button 228 // show delete button or select button
246 function getSelectButton($oUser) { 229 function getSelectButton($oUser) {
247 - global $default;  
248 - if (!isset($oUser)) {  
249 - return "<td align = right><input type=\"image\" src =\"$default->graphicsUrl/widgets/select.gif\" value=\"submit\" /></td>\n";  
250 - } else {  
251 - return "<td align = right><input type=\"image\" src =\"$default->graphicsUrl/widgets/select.gif\" value=\"submit\" /></td>\n";  
252 - } 230 + global $default;
  231 + if (!isset($oUser)) {
  232 + return "<td align = right><input type=\"image\" src =\"$default->graphicsUrl/widgets/select.gif\" value=\"submit\" /></td>\n";
  233 + } else {
  234 + return "<td align = right><input type=\"image\" src =\"$default->graphicsUrl/widgets/select.gif\" value=\"submit\" /></td>\n";
  235 + }
253 } 236 }
254 // show cancel button 237 // show cancel button
255 function getCancelButton($oUser) { 238 function getCancelButton($oUser) {
256 - global $default;  
257 - if (!isset($oUser)) {  
258 - //return "<td align = right><a href=\"$default->rootUrl/control.php?action=UserManagement\"><img src =\"$default->graphicsUrl/widgets/cancel.gif\" value=\"cancel\" /></a></td>\n";  
259 - } else {  
260 - return "<td align = right><a href=\"$default->rootUrl/control.php?action=removeUserFromGroup\"><img src =\"$default->graphicsUrl/widgets/cancel.gif\" border = \"0\" /></a></td>\n";  
261 - } 239 + global $default;
  240 + if (!isset($oUser)) {
  241 + //return "<td align = right><a href=\"$default->rootUrl/control.php?action=UserManagement\"><img src =\"$default->graphicsUrl/widgets/cancel.gif\" value=\"cancel\" /></a></td>\n";
  242 + }
  243 + else {
  244 + return "<td align = right><a href=\"$default->rootUrl/control.php?action=removeUserFromGroup\"><img src =\"$default->graphicsUrl/widgets/cancel.gif\" border = \"0\" /></a></td>\n";
  245 + }
262 } 246 }
263 247
264 248