/store/admin/controller/user/user_permission.php

https://github.com/elleeott/WPOC-boilerplate · PHP · 426 lines · 316 code · 110 blank · 0 comment · 65 complexity · c27daa57189dcf5a82f8b3e733cf072a MD5 · raw file 

    

  1. <?php

    2. 

  2. class ControllerUserUserPermission extends Controller {

    3. 

  3. 	private $error = array();

    4. 

  4.  

    5. 

  5. 	public function index() {

    6. 

  6. 		$this->load->language('user/user_group');

    7. 

  7.  

    8. 

  8. 		$this->document->setTitle($this->language->get('heading_title'));

    9. 

  9.  		

    10. 

  10. 		$this->load->model('user/user_group');

    11. 

  11. 		

    12. 

  12. 		$this->getList();

    13. 

  13. 	}

    14. 

  14. 

    15. 

  15. 	public function insert() {

    16. 

  16. 		$this->load->language('user/user_group');

    17. 

  17. 

    18. 

  18. 		$this->document->setTitle($this->language->get('heading_title'));

    19. 

  19. 		

    20. 

  20. 		$this->load->model('user/user_group');

    21. 

  21. 		

    22. 

  22. 		if (($this->request->server['REQUEST_METHOD'] == 'POST') && $this->validateForm()) {

    23. 

  23. 			$this->model_user_user_group->addUserGroup($this->request->post);

    24. 

  24. 			

    25. 

  25. 			$this->session->data['success'] = $this->language->get('text_success');

    26. 

  26. 

    27. 

  27. 			$url = '';

    28. 

  28. 

    29. 

  29. 			if (isset($this->request->get['sort'])) {

    30. 

  30. 				$url .= '&sort=' . $this->request->get['sort'];

    31. 

  31. 			}

    32. 

  32. 

    33. 

  33. 			if (isset($this->request->get['order'])) {

    34. 

  34. 				$url .= '&order=' . $this->request->get['order'];

    35. 

  35. 			}

    36. 

  36. 			

    37. 

  37. 			if (isset($this->request->get['page'])) {

    38. 

  38. 				$url .= '&page=' . $this->request->get['page'];

    39. 

  39. 			}

    40. 

  40. 						

    41. 

  41. 			$this->redirect($this->url->link('user/user_permission', 'token=' . $this->session->data['token'] . $url, 'SSL'));

    42. 

  42. 		}

    43. 

  43. 

    44. 

  44. 		$this->getForm();

    45. 

  45. 	}

    46. 

  46. 

    47. 

  47. 	public function update() {

    48. 

  48. 		$this->load->language('user/user_group');

    49. 

  49. 

    50. 

  50. 		$this->document->setTitle($this->language->get('heading_title'));

    51. 

  51. 		

    52. 

  52. 		$this->load->model('user/user_group');

    53. 

  53. 		

    54. 

  54. 		if (($this->request->server['REQUEST_METHOD'] == 'POST') && $this->validateForm()) {

    55. 

  55. 			$this->model_user_user_group->editUserGroup($this->request->get['user_group_id'], $this->request->post);

    56. 

  56. 			

    57. 

  57. 			$this->session->data['success'] = $this->language->get('text_success');

    58. 

  58. 			

    59. 

  59. 			$url = '';

    60. 

  60. 

    61. 

  61. 			if (isset($this->request->get['sort'])) {

    62. 

  62. 				$url .= '&sort=' . $this->request->get['sort'];

    63. 

  63. 			}

    64. 

  64. 

    65. 

  65. 			if (isset($this->request->get['order'])) {

    66. 

  66. 				$url .= '&order=' . $this->request->get['order'];

    67. 

  67. 			}

    68. 

  68. 

    69. 

  69. 			if (isset($this->request->get['page'])) {

    70. 

  70. 				$url .= '&page=' . $this->request->get['page'];

    71. 

  71. 			}

    72. 

  72. 						

    73. 

  73. 			$this->redirect($this->url->link('user/user_permission', 'token=' . $this->session->data['token'] . $url, 'SSL'));

    74. 

  74. 		}

    75. 

  75. 

    76. 

  76. 		$this->getForm();

    77. 

  77. 	}

    78. 

  78. 

    79. 

  79. 	public function delete() { 

    80. 

  80. 		$this->load->language('user/user_group');

    81. 

  81. 

    82. 

  82. 		$this->document->setTitle($this->language->get('heading_title'));

    83. 

  83. 		

    84. 

  84. 		$this->load->model('user/user_group');

    85. 

  85. 		

    86. 

  86. 		if (isset($this->request->post['selected']) && $this->validateDelete()) {

    87. 

  87.       		foreach ($this->request->post['selected'] as $user_group_id) {

    88. 

  88. 				$this->model_user_user_group->deleteUserGroup($user_group_id);	

    89. 

  89. 			}

    90. 

  90. 						

    91. 

  91. 			$this->session->data['success'] = $this->language->get('text_success');

    92. 

  92. 			

    93. 

  93. 			$url = '';

    94. 

  94. 

    95. 

  95. 			if (isset($this->request->get['sort'])) {

    96. 

  96. 				$url .= '&sort=' . $this->request->get['sort'];

    97. 

  97. 			}

    98. 

  98. 

    99. 

  99. 			if (isset($this->request->get['order'])) {

    100. 

  100. 				$url .= '&order=' . $this->request->get['order'];

    101. 

  101. 			}

    102. 

  102. 

    103. 

  103. 			if (isset($this->request->get['page'])) {

    104. 

  104. 				$url .= '&page=' . $this->request->get['page'];

    105. 

  105. 			}

    106. 

  106. 						

    107. 

  107. 			$this->redirect($this->url->link('user/user_permission', 'token=' . $this->session->data['token'] . $url, 'SSL'));

    108. 

  108. 		}

    109. 

  109. 

    110. 

  110. 		$this->getList();

    111. 

  111. 	}

    112. 

  112. 

    113. 

  113. 	private function getList() {

    114. 

  114. 		if (isset($this->request->get['sort'])) {

    115. 

  115. 			$sort = $this->request->get['sort'];

    116. 

  116. 		} else {

    117. 

  117. 			$sort = 'name';

    118. 

  118. 		}

    119. 

  119. 		 

    120. 

  120. 		if (isset($this->request->get['order'])) {

    121. 

  121. 			$order = $this->request->get['order'];

    122. 

  122. 		} else {

    123. 

  123. 			$order = 'ASC';

    124. 

  124. 		}

    125. 

  125. 		

    126. 

  126. 		if (isset($this->request->get['page'])) {

    127. 

  127. 			$page = $this->request->get['page'];

    128. 

  128. 		} else {

    129. 

  129. 			$page = 1;

    130. 

  130. 		}

    131. 

  131. 		

    132. 

  132. 		$url = '';

    133. 

  133. 		

    134. 

  134. 		if (isset($this->request->get['sort'])) {

    135. 

  135. 			$url .= '&sort=' . $this->request->get['sort'];

    136. 

  136. 		}

    137. 

  137. 

    138. 

  138. 		if (isset($this->request->get['order'])) {

    139. 

  139. 			$url .= '&order=' . $this->request->get['order'];

    140. 

  140. 		}	

    141. 

  141. 	

    142. 

  142. 		if (isset($this->request->get['page'])) {

    143. 

  143. 			$url .= '&page=' . $this->request->get['page'];

    144. 

  144. 		}

    145. 

  145. 			

    146. 

  146.   		$this->data['breadcrumbs'] = array();

    147. 

  147. 

    148. 

  148.    		$this->data['breadcrumbs'][] = array(

    149. 

  149.        		'text'      => $this->language->get('text_home'),

    150. 

  150. 			'href'      => $this->url->link('common/home', 'token=' . $this->session->data['token'], 'SSL'),

    151. 

  151.       		'separator' => false

    152. 

  152.    		);

    153. 

  153. 

    154. 

  154.    		$this->data['breadcrumbs'][] = array(

    155. 

  155.        		'text'      => $this->language->get('heading_title'),

    156. 

  156. 			'href'      => $this->url->link('user/user_permission', 'token=' . $this->session->data['token'] . $url, 'SSL'),

    157. 

  157.       		'separator' => ' :: '

    158. 

  158.    		);

    159. 

  159. 							

    160. 

  160. 		$this->data['insert'] = $this->url->link('user/user_permission/insert', 'token=' . $this->session->data['token'] . $url, 'SSL');

    161. 

  161. 		$this->data['delete'] = $this->url->link('user/user_permission/delete', 'token=' . $this->session->data['token'] . $url, 'SSL');	

    162. 

  162. 	

    163. 

  163. 		$this->data['user_groups'] = array();

    164. 

  164. 

    165. 

  165. 		$data = array(

    166. 

  166. 			'sort'  => $sort,

    167. 

  167. 			'order' => $order,

    168. 

  168. 			'start' => ($page - 1) * $this->config->get('config_admin_limit'),

    169. 

  169. 			'limit' => $this->config->get('config_admin_limit')

    170. 

  170. 		);

    171. 

  171. 		

    172. 

  172. 		$user_group_total = $this->model_user_user_group->getTotalUserGroups();

    173. 

  173. 		

    174. 

  174. 		$results = $this->model_user_user_group->getUserGroups($data);

    175. 

  175. 

    176. 

  176. 		foreach ($results as $result) {

    177. 

  177. 			$action = array();

    178. 

  178. 			

    179. 

  179. 			$action[] = array(

    180. 

  180. 				'text' => $this->language->get('text_edit'),

    181. 

  181. 				'href' => $this->url->link('user/user_permission/update', 'token=' . $this->session->data['token'] . '&user_group_id=' . $result['user_group_id'] . $url, 'SSL')

    182. 

  182. 			);		

    183. 

  183. 		

    184. 

  184. 			$this->data['user_groups'][] = array(

    185. 

  185. 				'user_group_id' => $result['user_group_id'],

    186. 

  186. 				'name'          => $result['name'],

    187. 

  187. 				'selected'      => isset($this->request->post['selected']) && in_array($result['user_group_id'], $this->request->post['selected']),

    188. 

  188. 				'action'        => $action

    189. 

  189. 			);

    190. 

  190. 		}	

    191. 

  191. 	

    192. 

  192. 		$this->data['heading_title'] = $this->language->get('heading_title');

    193. 

  193. 		

    194. 

  194. 		$this->data['text_no_results'] = $this->language->get('text_no_results');

    195. 

  195. 

    196. 

  196. 		$this->data['column_name'] = $this->language->get('column_name');

    197. 

  197. 		$this->data['column_action'] = $this->language->get('column_action');

    198. 

  198. 

    199. 

  199. 		$this->data['button_insert'] = $this->language->get('button_insert');

    200. 

  200. 		$this->data['button_delete'] = $this->language->get('button_delete');

    201. 

  201.  

    202. 

  202.  		if (isset($this->error['warning'])) {

    203. 

  203. 			$this->data['error_warning'] = $this->error['warning'];

    204. 

  204. 		} else {

    205. 

  205. 			$this->data['error_warning'] = '';

    206. 

  206. 		}

    207. 

  207. 		

    208. 

  208. 		if (isset($this->session->data['success'])) {

    209. 

  209. 			$this->data['success'] = $this->session->data['success'];

    210. 

  210. 		

    211. 

  211. 			unset($this->session->data['success']);

    212. 

  212. 		} else {

    213. 

  213. 			$this->data['success'] = '';

    214. 

  214. 		}

    215. 

  215. 		

    216. 

  216. 		$url = '';

    217. 

  217. 

    218. 

  218. 		if ($order == 'ASC') {

    219. 

  219. 			$url .= '&order=DESC';

    220. 

  220. 		} else {

    221. 

  221. 			$url .= '&order=ASC';

    222. 

  222. 		}

    223. 

  223. 

    224. 

  224. 		if (isset($this->request->get['page'])) {

    225. 

  225. 			$url .= '&page=' . $this->request->get['page'];

    226. 

  226. 		}

    227. 

  227. 

    228. 

  228. 		$this->data['sort_name'] = $this->url->link('user/user_permission', 'token=' . $this->session->data['token'] . '&sort=name' . $url, 'SSL');

    229. 

  229. 		

    230. 

  230. 		$url = '';

    231. 

  231. 

    232. 

  232. 		if (isset($this->request->get['sort'])) {

    233. 

  233. 			$url .= '&sort=' . $this->request->get['sort'];

    234. 

  234. 		}

    235. 

  235. 												

    236. 

  236. 		if (isset($this->request->get['order'])) {

    237. 

  237. 			$url .= '&order=' . $this->request->get['order'];

    238. 

  238. 		}

    239. 

  239. 				

    240. 

  240. 		$pagination = new Pagination();

    241. 

  241. 		$pagination->total = $user_group_total;

    242. 

  242. 		$pagination->page = $page;

    243. 

  243. 		$pagination->limit = $this->config->get('config_admin_limit');

    244. 

  244. 		$pagination->text = $this->language->get('text_pagination');

    245. 

  245. 		$pagination->url = $this->url->link('user/user_permission', 'token=' . $this->session->data['token'] . $url . '&page={page}', 'SSL');

    246. 

  246. 		

    247. 

  247. 		$this->data['pagination'] = $pagination->render();				

    248. 

  248. 

    249. 

  249. 		$this->data['sort'] = $sort; 

    250. 

  250. 		$this->data['order'] = $order;

    251. 

  251. 

    252. 

  252. 		$this->template = 'user/user_group_list.tpl';

    253. 

  253. 		$this->children = array(

    254. 

  254. 			'common/header',

    255. 

  255. 			'common/footer'

    256. 

  256. 		);

    257. 

  257. 				

    258. 

  258. 		$this->response->setOutput($this->render());

    259. 

  259.  	}

    260. 

  260. 

    261. 

  261. 	private function getForm() {

    262. 

  262. 		$this->data['heading_title'] = $this->language->get('heading_title');

    263. 

  263. 		

    264. 

  264. 		$this->data['text_select_all'] = $this->language->get('text_select_all');

    265. 

  265. 		$this->data['text_unselect_all'] = $this->language->get('text_unselect_all');

    266. 

  266. 				

    267. 

  267. 		$this->data['entry_name'] = $this->language->get('entry_name');

    268. 

  268. 		$this->data['entry_access'] = $this->language->get('entry_access');

    269. 

  269. 		$this->data['entry_modify'] = $this->language->get('entry_modify');

    270. 

  270. 		

    271. 

  271. 		$this->data['button_save'] = $this->language->get('button_save');

    272. 

  272. 		$this->data['button_cancel'] = $this->language->get('button_cancel');

    273. 

  273. 

    274. 

  274. 		$this->data['tab_general'] = $this->language->get('tab_general');

    275. 

  275. 

    276. 

  276.  		if (isset($this->error['warning'])) {

    277. 

  277. 			$this->data['error_warning'] = $this->error['warning'];

    278. 

  278. 		} else {

    279. 

  279. 			$this->data['error_warning'] = '';

    280. 

  280. 		}

    281. 

  281. 		

    282. 

  282.  		if (isset($this->error['name'])) {

    283. 

  283. 			$this->data['error_name'] = $this->error['name'];

    284. 

  284. 		} else {

    285. 

  285. 			$this->data['error_name'] = '';

    286. 

  286. 		}

    287. 

  287. 

    288. 

  288. 		$url = '';

    289. 

  289. 

    290. 

  290. 		if (isset($this->request->get['sort'])) {

    291. 

  291. 			$url .= '&sort=' . $this->request->get['sort'];

    292. 

  292. 		}

    293. 

  293. 

    294. 

  294. 		if (isset($this->request->get['order'])) {

    295. 

  295. 			$url .= '&order=' . $this->request->get['order'];

    296. 

  296. 		}

    297. 

  297. 			

    298. 

  298. 		if (isset($this->request->get['page'])) {

    299. 

  299. 			$url .= '&page=' . $this->request->get['page'];

    300. 

  300. 		}

    301. 

  301. 		

    302. 

  302.   		$this->data['breadcrumbs'] = array();

    303. 

  303. 

    304. 

  304.    		$this->data['breadcrumbs'][] = array(

    305. 

  305.        		'text'      => $this->language->get('text_home'),

    306. 

  306. 			'href'      => $this->url->link('common/home', 'token=' . $this->session->data['token'], 'SSL'),

    307. 

  307.       		'separator' => false

    308. 

  308.    		);

    309. 

  309. 

    310. 

  310.    		$this->data['breadcrumbs'][] = array(

    311. 

  311.        		'text'      => $this->language->get('heading_title'),

    312. 

  312. 			'href'      => $this->url->link('user/user_permission', 'token=' . $this->session->data['token'] . $url, 'SSL'),

    313. 

  313.       		'separator' => ' :: '

    314. 

  314.    		);

    315. 

  315. 			

    316. 

  316. 		if (!isset($this->request->get['user_group_id'])) {

    317. 

  317. 			$this->data['action'] = $this->url->link('user/user_permission/insert', 'token=' . $this->session->data['token'] . $url, 'SSL');

    318. 

  318. 		} else {

    319. 

  319. 			$this->data['action'] = $this->url->link('user/user_permission/update', 'token=' . $this->session->data['token'] . '&user_group_id=' . $this->request->get['user_group_id'] . $url, 'SSL');

    320. 

  320. 		}

    321. 

  321. 		  

    322. 

  322.     	$this->data['cancel'] = $this->url->link('user/user_permission', 'token=' . $this->session->data['token'] . $url, 'SSL');

    323. 

  323. 

    324. 

  324. 		if (isset($this->request->get['user_group_id']) && $this->request->server['REQUEST_METHOD'] != 'POST') {

    325. 

  325. 			$user_group_info = $this->model_user_user_group->getUserGroup($this->request->get['user_group_id']);

    326. 

  326. 		}

    327. 

  327. 

    328. 

  328. 		if (isset($this->request->post['name'])) {

    329. 

  329. 			$this->data['name'] = $this->request->post['name'];

    330. 

  330. 		} elseif (!empty($user_group_info)) {

    331. 

  331. 			$this->data['name'] = $user_group_info['name'];

    332. 

  332. 		} else {

    333. 

  333. 			$this->data['name'] = '';

    334. 

  334. 		}

    335. 

  335. 		

    336. 

  336. 		$ignore = array(

    337. 

  337. 			'common/home',

    338. 

  338. 			'common/startup',

    339. 

  339. 			'common/login',

    340. 

  340. 			'common/logout',

    341. 

  341. 			'common/forgotten',

    342. 

  342. 			'common/reset',			

    343. 

  343. 			'error/not_found',

    344. 

  344. 			'error/permission',

    345. 

  345. 			'common/footer',

    346. 

  346. 			'common/header'

    347. 

  347. 		);

    348. 

  348. 				

    349. 

  349. 		$this->data['permissions'] = array();

    350. 

  350. 		

    351. 

  351. 		$files = glob(DIR_APPLICATION . 'controller/*/*.php');

    352. 

  352. 		

    353. 

  353. 		foreach ($files as $file) {

    354. 

  354. 			$data = explode('/', dirname($file));

    355. 

  355. 			

    356. 

  356. 			$permission = end($data) . '/' . basename($file, '.php');

    357. 

  357. 			

    358. 

  358. 			if (!in_array($permission, $ignore)) {

    359. 

  359. 				$this->data['permissions'][] = $permission;

    360. 

  360. 			}

    361. 

  361. 		}

    362. 

  362. 		

    363. 

  363. 		if (isset($this->request->post['permission'])) {

    364. 

  364. 			$this->data['access'] = $this->request->post['permission']['access'];

    365. 

  365. 		} elseif (isset($user_group_info['permission']['access'])) {

    366. 

  366. 			$this->data['access'] = $user_group_info['permission']['access'];

    367. 

  367. 		} else { 

    368. 

  368. 			$this->data['access'] = array();

    369. 

  369. 		}

    370. 

  370. 

    371. 

  371. 		if (isset($this->request->post['permission'])) {

    372. 

  372. 			$this->data['modify'] = $this->request->post['permission']['modify'];

    373. 

  373. 		} elseif (isset($user_group_info['permission']['modify'])) {

    374. 

  374. 			$this->data['modify'] = $user_group_info['permission']['modify'];

    375. 

  375. 		} else { 

    376. 

  376. 			$this->data['modify'] = array();

    377. 

  377. 		}

    378. 

  378. 	

    379. 

  379. 		$this->template = 'user/user_group_form.tpl';

    380. 

  380. 		$this->children = array(

    381. 

  381. 			'common/header',

    382. 

  382. 			'common/footer'

    383. 

  383. 		);

    384. 

  384. 				

    385. 

  385. 		$this->response->setOutput($this->render());

    386. 

  386. 	}

    387. 

  387. 

    388. 

  388. 	private function validateForm() {

    389. 

  389. 		if (!$this->user->hasPermission('modify', 'user/user_permission')) {

    390. 

  390. 			$this->error['warning'] = $this->language->get('error_permission');

    391. 

  391. 		}

    392. 

  392. 

    393. 

  393. 		if ((utf8_strlen($this->request->post['name']) < 3) || (utf8_strlen($this->request->post['name']) > 64)) {

    394. 

  394. 			$this->error['name'] = $this->language->get('error_name');

    395. 

  395. 		}

    396. 

  396. 

    397. 

  397. 		if (!$this->error) {

    398. 

  398. 			return true;

    399. 

  399. 		} else {

    400. 

  400. 			return false;

    401. 

  401. 		}

    402. 

  402. 	}

    403. 

  403. 

    404. 

  404. 	private function validateDelete() {

    405. 

  405. 		if (!$this->user->hasPermission('modify', 'user/user_permission')) {

    406. 

  406. 			$this->error['warning'] = $this->language->get('error_permission');

    407. 

  407. 		}

    408. 

  408. 		

    409. 

  409. 		$this->load->model('user/user');

    410. 

  410.       	

    411. 

  411. 		foreach ($this->request->post['selected'] as $user_group_id) {

    412. 

  412. 			$user_total = $this->model_user_user->getTotalUsersByGroupId($user_group_id);

    413. 

  413. 

    414. 

  414. 			if ($user_total) {

    415. 

  415. 				$this->error['warning'] = sprintf($this->language->get('error_user'), $user_total);

    416. 

  416. 			}

    417. 

  417. 		}

    418. 

  418. 		

    419. 

  419. 		if (!$this->error) {

    420. 

  420. 			return true;

    421. 

  421. 		} else {

    422. 

  422. 			return false;

    423. 

  423. 		}

    424. 

  424. 	}

    425. 

  425. }

    426. 

  426. ?>
    427.