root/modules/branches/2.3/core/page.ampusers.php

<?php /* $Id$ */
// routing.php Copyright (C) 2004 Greg MacLellan (greg@mtechsolutions.ca)
// Asterisk Management Portal Copyright (C) 2004 Coalescent Systems Inc. (info@coalescentsystems.ca)
//
//This program is free software; you can redistribute it and/or
//modify it under the terms of the GNU General Public License
//as published by the Free Software Foundation; either version 2
//of the License, or (at your option) any later version.
//
//This program is distributed in the hope that it will be useful,
//but WITHOUT ANY WARRANTY; without even the implied warranty of
//MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
//GNU General Public License for more details.


$userdisplay = isset($_REQUEST['userdisplay'])?$_REQUEST['userdisplay']:'';
$action = isset($_REQUEST['action'])?$_REQUEST['action']:'';
$tech = isset($_REQUEST['tech'])?$_REQUEST['tech']:'';

// populate some global variables from the request string
$set_globals = array("username","password","extension_high","extension_low","deptname");
foreach ($set_globals as $var) {
  if (isset($_REQUEST[$var])) {
    $$var = stripslashes( $_REQUEST[$var] );
  }
}

//Search ALL active modules while generating admin access list
$active_modules = module_getinfo(false, MODULE_STATUS_ENABLED);

if(is_array($active_modules)){
  foreach($active_modules as $key => $module) {
    //create an array of module sections to display
    if (isset($module['items']) && is_array($module['items'])) {
      foreach($module['items'] as $itemKey => $item) {
        $listKey = (!empty($item['display']) ? $item['display'] : $itemKey);
        $module_list[ $listKey ] = $item;
      }
    }
  }
}

// extensions vs device/users ... module_list setting
if (isset($amp_conf["AMPEXTENSIONS"]) && ($amp_conf["AMPEXTENSIONS"] == "deviceanduser")) {
       unset($module_list["extensions"]);
} else {
       unset($module_list["devices"]);
       unset($module_list["users"]);
}

// no more adding the APPLY Changes bar to module list because array_multisort messes up integer array keys
// $module_list['99'] = array('category' => NULL, 'name' => _("Apply Changes Bar"));

// changed from $module_name to $admin_module_name because the former is used by framework
foreach ($module_list as $key => $row) {
  $module_category[$key] = $row['category'];
  $admin_module_name[$key] = $row['name'];
}
array_multisort($module_category, SORT_ASC, $admin_module_name, SORT_ASC, $module_list);

$sections = array();
if (isset($_REQUEST["sections"])) {
  if (is_array($_REQUEST["sections"])) {
    $sections = $_REQUEST["sections"];
  } else {
    //TODO do we even need this??
    $sections = explode(";",$_REQUEST["sections"]);
  }
}

//if submitting form, update database
switch ($action) {
  case "addampuser":
    core_ampusers_add($username, $password, $extension_low, $extension_high, $deptname, $sections);
    //indicate 'need reload' link in footer.php 
    needreload();
    redirect_standard();
  break;
  case "editampuser":
    core_ampusers_del($userdisplay);
    core_ampusers_add($username, $password, $extension_low, $extension_high, $deptname, $sections);
    //indicate 'need reload' link in footer.php 
    needreload();
    redirect_standard('userdisplay');
  break;
  case "delampuser":
    core_ampusers_del($userdisplay);
    //indicate 'need reload' link in footer.php 
    needreload();
    $userdisplay = ""; // go "add" screen
    redirect_standard();
  break;
}

?>
</div>

<div class="rnav">
<ul>
  <li><a <?php  echo ($userdisplay=='' ? 'class="current"':'') ?> href="config.php?display=<?php echo urlencode($display)?>"><?php echo _("Add User")?></a></li>
<?php 
//get existing trunk info
$tresults = core_ampusers_list();

foreach ($tresults as $tresult) {
    echo "\t<li><a ".($userdisplay==$tresult[0] ? 'class="current"':'')." href=\"config.php?display=".urlencode($display)."&amp;userdisplay=".urlencode($tresult[0])."\">".$tresult[0]."</a></li>\n";
}
?>
</ul>
</div>

<div class="content">

<?php 

  if ($userdisplay) {
    echo "<h2>"._("Edit Administrator")."</h2>";
    
    $user = getAmpUser($userdisplay);
    
    $username = $user["username"];
    $password = $user["password"];
    $extension_high = $user["extension_high"];
    $extension_low = $user["extension_low"];
    $deptname = $user["deptname"];
    $sections = $user["sections"];
    
?>
    <p><a href="config.php?display=<?php echo urlencode($display) ?>&amp;userdisplay=<?php echo urlencode($userdisplay) ?>&amp;action=delampuser"><?php echo _("Delete User")?> <?php  echo $userdisplay; ?></a></p>
<?php 

  } else {
    // set defaults
    $username = "";
    $password = "";
    $deptname = "";
    
    $extension_low = "";
    $extension_high = "";
    
    $sections = array("*");
    
  
    echo "<h2>"._("Add Administrator")."</h2>";
  } 
?>
  
    <form autocomplete="off" name="ampuserEdit" action="config.php" method="get">
      <input type="hidden" name="display" value="<?php echo $display?>"/>
      <input type="hidden" name="userdisplay" value="<?php echo $userdisplay ?>"/>
      <input type="hidden" name="action" value=""/>
      <input type="hidden" name="tech" value="<?php echo $tech?>"/>
      <table>
      <tr>
        <td colspan="2">
          <h4><?php echo _("General Settings")?></h4>
        </td>
      </tr>
<?php if ($amp_conf["AUTHTYPE"] != "database") { ?>     
      <tr>
        <td colspan="2">
  <?php echo '<b>'._("NOTE:").'</b>'._("AUTHTYPE is not set to 'database' in /etc/amportal.conf - note that this module is not currently providing access control, and changing passwords here or adding users will have no effect unless AUTHTYPE is set to 'database'.") ?><br /><br />
        </td>
      </tr>
<?php } ?>
      <tr>
        <td>
          <a href=# class="info"><?php echo _("Username<span>Create a unique username for this new user</span>")?></a>: 
        </td><td>
          <input type="text" size="20" name="username" value="<?php echo $username;?>"/>
        </td>
      </tr>
      <tr>
        <td>
          <a href=# class="info"><?php echo _("Password<span>Create a password for this new user</span>")?></a>: 
        </td><td>
          <input type="password" size="20" name="password" value="<?php echo $password;?>"/>
        </td>
      </tr>
      <tr>
        <td colspan="2">
          <br>
          <h4><?php echo _("Access Restrictions")?></h4>
        </td>
      </tr>
      <tr>
        <td>
          <a href=# class="info"><?php echo _("Department Name<span>Restrict this user's view of Digital Receptionist menus and System Recordings to only those for this department.</span>")?></a>: 
        </td><td>
          <input type="text" size="20" name="deptname" value="<?php echo htmlspecialchars($deptname);?>"/>
        </td>
      </tr>
      <tr>
        <td>
          <a href=# class="info"><?php echo _("Extension Range<span>Restrict this user's view to only Extensions, Ring Groups, and Queues within this range.</span>")?></a>: 
        </td><td>
          <input type="text" size="5" name="extension_low" value="<?php echo htmlspecialchars($extension_low);?>"/>
          &nbsp;to
          <input type="text" size="5" name="extension_high" value="<?php echo htmlspecialchars($extension_high);?>"/>
        </td>
      </tr>
      <tr>
        <td valign="top">
          <a href=# class="info"><?php echo _("Admin Access<span>Select the Admin Sections this user should have access to.</span>")?></a>: 
        </td><td>&nbsp;
          <select multiple name="sections[]">
          <option />
<?php 
        $prev_category = NULL;
        foreach ($module_list as $key => $row) {
          if ($row['category'] != $prev_category) {
            if ($prev_category)
              echo "</optgroup>\n";
            echo "<optgroup label=\""._($row['category'])."\">\n";
            $prev_category = $row['category'];
          }

          echo "<option value=\"".$key."\"";
          if (in_array($key, $sections)) echo " SELECTED";
          echo ">"._($row['name'])."</option>\n";
        }
        echo "</optgroup>\n";

        // Apply Changes Bar
        echo "<option value=\"99\"";
        if (in_array("99", $sections)) echo " SELECTED";
        echo ">"._("Apply Changes Bar")."</option>\n";

        // All Sections
        echo "<option value=\"*\"";
        if (in_array("*", $sections)) echo " SELECTED";
        echo ">"._("ALL SECTIONS")."</option>\n";
?>          
          </select>
        </td>
      </tr>
      
      <tr>
        <td colspan="2">
          <h6><input name="Submit" type="button" value="<?php echo _("Submit Changes")?>" onclick="checkAmpUser(ampuserEdit, '<?php echo ($userdisplay ? "editampuser" : "addampuser") ?>')"></h6>
        </td>
      </tr>
      </table>
    </form>

<script language="javascript">
<!--

function checkAmpUser(theForm, action) {
  $username = theForm.username.value;
  $deptname = theForm.deptname.value;
  
  if ($username == "") {
    <?php echo "alert('"._("Username must not be blank")."')"?>;
  } else if (!$username.match('^[a-zA-Z][a-zA-Z0-9]+$')) {
    <?php echo "alert('"._("Username cannot start with a number, and can only contain letters and numbers")."')"?>;
  } else if ($deptname == "default") {
    <?php echo "alert('"._("For security reasons, you cannot use the department name default")."')"?>;
  } else if ($deptname != "" && !$deptname.match('^[a-zA-Z0-9]+$')) {
    <?php echo "alert('"._("Department name cannot have a space")."')"?>;
  } else {
    theForm.action.value = action;
    theForm.submit();
  }
}

//-->
</script>