user_role_masters_controller.php

/admin/app/controllers/user_role_masters_controller.php

https://bitbucket.org/fxrialab/tickets
PHP | 317 lines | 267 code | 34 blank | 16 comment | 35 complexity | c6e4e292def410b0758e37fe96231865 MD5 | raw file
Possible License(s): LGPL-2.1, AGPL-1.0, GPL-2.0, MIT

<?php

class UserRoleMastersController extends AppController
{
	var $name='UserRoleMasters';
	var $components = array('Pagination');
	var $helpers = array('Pagination','Html','Javascript','Ajax');

	function index()
	{
		$this->layout= 'default_user_cat';
		$this->pageTitle = 'Role Name';
		if($this->checkSession())
		{
			//echo $menu = $_REQUEST['menu'];exit();
			$this->redirect('/user_role_masters/view_user_role?menu=37');
		}
		else
			$this->redirect('/user_role_masters/view_user_role?menu=37');
	}
	
	function view_user_role()
	{
		$this->checkSession();
			$this->pageTitle = 'Role Names';
			$this->layout = 'default_user_cat';
			if($_SESSION['Admin_role']==1)
			{
			$criteria="1";
			list($order,$limit,$page) = $this->Pagination->init($criteria); 
			$this->set('roles', $this->UserRoleMaster->findAll($criteria, NULL, $order, $limit, $page));
			}
			else
			$this->redirect('/user_role_masters/noaccess');
	
	}
	
	function noaccess()
	{
		$this->checkSession();
		$this->pageTitle = 'No Access';
		$this->layout = 'default_after_login';
	}
	
	function create_user_role()
	{
			$this->checkSession();
			$this->pageTitle = 'Create Roles';
			$this->layout = 'default_user_cat';
			
			//echo $this->data['UserRoleMaster']['user_group_master_id'] = $this->data['UserGroupMaster']['group_cat_name'];
			echo $name = $this->data['UserRoleMaster']['user_role_name'];
			$this->data['UserRoledetails']['user_group_master_id'] = $this->data['UserRoleMaster']['user_group_master_id'];
			if (!empty($this->data))
			{
				if($this->UserRoleMaster->findByUserRoleName($name))
				{
						$this->flash('Role Exist.','/user_role_masters');
						$this->redirect('/user_role_masters/create_user_role?id='.$_REQUEST['id'].'&menu=36&err=1');
				}
				else
				{
					if ($this->UserRoleMaster->save($this->data))
					{
						$roleid = mysql_insert_id();
						$qry = "select * from user_menus where user_menu_parent_id=1 and is_active='1' order by user_menu_order_id asc";
						$sel_parent=mysql_query($qry);
						while($fetch_row=mysql_fetch_array($sel_parent))
						{
							$count=0;
							$parent_id=$fetch_row['id'];
							$menu_name=$fetch_row['user_menu_name'];
							$sql=mysql_query("select * from user_menus where user_menu_parent_id=$parent_id order by user_menu_order_id asc");
							while($fetch_row=mysql_fetch_array($sql))
							{
							$count++;
							$idx=$fetch_row['user_menu_parent_id'];
							$sub_name=$fetch_row['user_menu_name'];
							$sub_url=$fetch_row['user_menu_url'];
							$sub_image=$fetch_row['user_menu_image'];
							$sub_id=$fetch_row['id'];
							$sub_order=$fetch_row['user_menu_order_id'];
							$name = $fetch_row['id'] ;
								
							if(isset($_REQUEST['chk_'.$name.'_p']))
								$sub_perm=$_REQUEST['chk_'.$name.'_p'];
							else
								$sub_perm=0;
								
							if(isset($_REQUEST['chk_'.$name.'_a']))
								$sub_add=$_REQUEST['chk_'.$name.'_a'];
							else
								$sub_add=0;
								
							if(isset($_REQUEST['chk_'.$name.'_v']))
								$sub_view=$_REQUEST['chk_'.$name.'_v'];
							else
								$sub_view=0;
								
							if(isset($_REQUEST['chk_'.$name.'_e']))
								$sub_update=$_REQUEST['chk_'.$name.'_e'];
							else
								$sub_update=0;
									
							if(isset($_REQUEST['chk_'.$name.'_d']))
								$sub_delete=$_REQUEST['chk_'.$name.'_d'];
							else
								$sub_delete=0;
								}
								if(isset($_REQUEST['chk_'.$name.'_d']) || isset($_REQUEST['chk_'.$name.'_e']) || isset($_REQUEST['chk_'.$name.'_v']) || isset($_REQUEST['chk_'.$name.'_a']) || isset($_REQUEST['chk_'.$name.'_p']) )	{
								//$sql_role = "INSERT INTO `user_role_masters` ( `id` , `user_role_name`, `user_group_master_id` )VALUES ('', '".$this->data['UserRoleMaster']['user_role_name']."', '".$this->data['UserRoleMaster']['user_group_master_id']."')";
								//$res = mysql_query($sql_role);	
								$sql_admin_role = "INSERT INTO `user_roledetails` ( `id` , `user_role_master_id` , `menu_id` , `permission` , `add` , `view` , `edit` , `delete`, `user_group_master_id` )VALUES ('', $roleid, $sub_id, $sub_perm, $sub_add,$sub_view, $sub_update, $sub_delete, ".$this->data['UserRoledetails']['user_group_master_id'].")" ;
								$res_sql_admin_role = mysql_query($sql_admin_role);
								$id=mysql_insert_id($res_sql_admin_role);
								}
						}
						
						
						$this->flash('Your role has been sucessfully created.','/user_role_masters');
						$path = "/user_role_masters/view_user_role?.id=".$_REQUEST['id']."&menu=".$_REQUEST['menu_id'];
						$this->redirect('/user_role_masters/view_user_role?id='.$id.'&menu=36');
					}
				}	
			}
	}
	
	function delete($id)
	{
		$this->checkSession();
		//$id = $_REQUEST['id'];
		if(isset($_REQUEST['box']))
		{
		/////IF SEARCH IS COLLECTIVE OR CHOSEN BY ADMIN SELECTION//////
		
			$arr = $_REQUEST['box'];
			foreach($arr as $key => $value)
			{
				$sql = "delete from `user_role_masters` where `id` = '".$value."'";
				$res = mysql_query($sql);
				$sql_det = "delete from `user_roledetails` where `user_role_master_id` = '".$value."'";
				$res_det = mysql_query($sql_det);
			}
		}
		////IF DELETE IS FOR A SPECIFIC USER////
		else
		{
		//$qry = mysql_fetch_array(mysql_query("select * from user_roledetails where user_role_master_id ='".$id."'"));
		$id=$_REQUEST['id'];
		//$role_id = $qry['id'];
		$this->UserRoleMaster->del($id);
		//$this->UserRoledetail->del($role_id);
		}
		$id=$_REQUEST['id'];
		if(isset($_REQUEST['page']))
		{
			$page = $_REQUEST['page'];
		}
		//$this->UserRoleMaster->del($id);
		$this->flash('The role with id: '.$id.' has been deleted.', '/rolemasters');
		$this->redirect('/user_role_masters/view_user_role?id='.$id.'&menu=36');
	}
	
	function block()
	{
		$this->checkSession();
		//$id = $_REQUEST['id'];
		if(isset($_REQUEST['box']))
		{
		/////IF SEARCH IS COLLECTIVE OR CHOSEN BY ADMIN SELECTION//////
		
			$arr = $_REQUEST['box'];
			foreach($arr as $key => $value)
			{
				$sql = "update `user_role_masters` set `user_role_status` = '0' where `id` = '".$value."'";
				$res = mysql_query($sql);
			}
		}
		////IF DELETE IS FOR A SPECIFIC USER////
		else
		{
		 $qry="update `user_role_masters` set `user_role_status` = '0' where `id` = '".$_REQUEST['id']."'";
		$res=mysql_query($qry);
		}
		$this->data['User']['menu'] = $_REQUEST['menu'];
		if(isset($_REQUEST['page']))
		{
			$page = $_REQUEST['page'];
		}
		$this->flash('The role with id: '.$id.' has been deleted.', '/rolemasters');
		$this->redirect('/user_role_masters/view_user_role?id='.$id.'&menu=36');
	}
	
	function active()
	{
		///////////IF UNBLOCKING IS COLLECTIVE OR BY ADMIN SELECTION//////////
		$this->checkSession();
		if(isset($_REQUEST['box']))
		{
			$arr = $_REQUEST['box'];
			foreach($arr as $key => $value)
			{
					$sql = "update `user_role_masters` set `user_role_status` = '1' where `id` = '".$value."'";
					$res = mysql_query($sql);
			}
		}
		////IF UNBLOCKING IS FOR A SPECIFIC USER////
		else
		{
			$qry="update `user_role_masters` set `user_role_status` = '1' where `id` = '".$_REQUEST['id']."'";
			$res=mysql_query($qry);
		}
		$this->data['User']['menu'] = $_REQUEST['menu'];
		if(isset($_REQUEST['page']))
		{
			$page = $_REQUEST['page'];
		}
		$this->flash('The role with id: '.$id.' has been deleted.', '/rolemasters');
		$this->redirect('/user_role_masters/view_user_role?id='.$id.'&menu=36');
	}
	
	function edit()
	{
		$this->checkSession();
		$this->pageTitle = 'Edit User Role Name';
		$this->layout = 'default_user_cat';
		if (empty($this->data))
		{
			$this->UserRoleMaster->id = $_REQUEST['id'];
			$this->data = $this->UserRoleMaster->read(null,$_REQUEST['id']);
		}
		else if(!empty($this->data['UserRoleMaster']['user_role_name']))
		{
				
				$this->data['UserRoleMaster']['hid']=$_POST['hid'];
				$this->data['UserRoleMaster']['date']=$_POST['date'];
				$qry="update `user_role_masters` set `user_role_name`='".$this->data['UserRoleMaster']['user_role_name']."' where `id`='".$this->data['UserRoleMaster']['hid']."'";
				
				$res=mysql_query($qry) or die("query error");
				
				$del_roledetails_sql = "delete from user_roledetails where user_role_master_id=".$_REQUEST['id']."";
				$del_roledetails = mysql_query($del_roledetails_sql);
				if($res)
				{
					$roleid = $_REQUEST['id'];
					$sel_parent = "select * from user_menus where user_menu_parent_id=1 and is_active='1' order by user_menu_order_id asc";
					$sel_parent_res = mysql_query($sel_parent);
					while($fetch_row=mysql_fetch_array($sel_parent_res))
					{
						$count=0;
						$parent_id=$fetch_row['id'];
						$menu_name=$fetch_row['user_menu_name'];
						$sql= "select * from user_menus where user_menu_parent_id=$parent_id order by user_menu_order_id asc";
						$res = mysql_query($sql);
						while($fetch_row=mysql_fetch_array($res))
						{
							$count++;
							$idx=$fetch_row['user_menu_parent_id'];
							$sub_name=$fetch_row['user_menu_name'];
							$sub_url=$fetch_row['user_menu_url'];
							$sub_image=$fetch_row['user_menu_image'];
							$sub_id=$fetch_row['id'];
							$sub_order=$fetch_row['user_menu_order_id'];
							$name = $fetch_row['id'] ;
								
							if(isset($_REQUEST['chk_'.$name.'_p']))
								$sub_perm=$_REQUEST['chk_'.$name.'_p'];
							else
								$sub_perm=0;
								
							if(isset($_REQUEST['chk_'.$name.'_a']))
								$sub_add=$_REQUEST['chk_'.$name.'_a'];
							else
								$sub_add=0;
								
							if(isset($_REQUEST['chk_'.$name.'_v']))
								$sub_view=$_REQUEST['chk_'.$name.'_v'];
							else
								$sub_view=0;
								
							if(isset($_REQUEST['chk_'.$name.'_e']))
								$sub_update=$_REQUEST['chk_'.$name.'_e'];
							else
								$sub_update=0;
									
							if(isset($_REQUEST['chk_'.$name.'_d']))
								$sub_delete=$_REQUEST['chk_'.$name.'_d'];
							else
								$sub_delete=0;
							
							if(isset($_REQUEST['chk_'.$name.'_d']) || isset($_REQUEST['chk_'.$name.'_e']) || isset($_REQUEST['chk_'.$name.'_v']) || isset($_REQUEST['chk_'.$name.'_a']) || isset($_REQUEST['chk_'.$name.'_p']) )	{
							$sql_admin_role = "INSERT INTO `user_roledetails` ( `id` , `user_role_master_id` , `menu_id` , `permission` , `add` , `view` , `edit` , `delete` )VALUES ('', $roleid, $sub_id, $sub_perm, $sub_add,$sub_view, $sub_update, $sub_delete)" ;
							$res_sql_admin_role = mysql_query($sql_admin_role);
							}
						}
						
					}	
					$this->flash('Your role name has been updated.','/rolemasters');
					$this->redirect('/user_role_masters/view_user_role?id='.$_REQUEST['id'].'&menu=29');
				}
			
		}
		
	}
	
	function viewrole()
    {
		$this->checkSession();
		$this->pageTitle = 'View User Role';
		$this->layout = 'default_user_cat';
		$id=$_REQUEST['id'];
        $this->UserRoleMaster->id = $id;
        $this->set('rolemasters', $this->UserRoleMaster->read());
    }
	
}
?>