root/modules/branches/2.8/core/page.ampusers.php

<?php /* $Id$ */
//This file is part of FreePBX.
//
//    FreePBX is free software: you can redistribute it and/or modify
//    it under the terms of the GNU General Public License as published by
//    the Free Software Foundation, either version 2 of the License, or
//    (at your option) any later version.
//
//    FreePBX is distributed in the hope that it will be useful,
//    but WITHOUT ANY WARRANTY; without even the implied warranty of
//    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
//    GNU General Public License for more details.
//
//    You should have received a copy of the GNU General Public License
//    along with FreePBX.  If not, see <http://www.gnu.org/licenses/>.
//
// Copyright (C) 2004 Greg MacLellan (greg@mtechsolutions.ca)
// Copyright (C) 2004 Coalescent Systems Inc. (info@coalescentsystems.ca)
//

$userdisplay = isset($_REQUEST['userdisplay'])?$_REQUEST['userdisplay']:'';
$action = isset($_REQUEST['action'])?$_REQUEST['action']:'';
$tech = isset($_REQUEST['tech'])?$_REQUEST['tech']:'';

$tabindex = 0;
// populate some global variables from the request string
$set_globals = array("username","password","extension_high","extension_low","deptname");
foreach ($set_globals as $var) {
    if (isset($_REQUEST[$var])) {
        $$var = stripslashes( $_REQUEST[$var] );
    }
}
$form_password_sha1 = stripslashes(isset($_REQUEST['password_sha1'])?$_REQUEST['password_sha1']:'');

//Search ALL active modules while generating admin access list
$active_modules = module_getinfo(false, MODULE_STATUS_ENABLED);

if(is_array($active_modules)){
    foreach($active_modules as $key => $module) {
        //create an array of module sections to display
        if (isset($module['items']) && is_array($module['items'])) {
            foreach($module['items'] as $itemKey => $item) {
                $listKey = (!empty($item['display']) ? $item['display'] : $itemKey);
                $item['rawname'] = $module['rawname'];
                $module_list[ $listKey ] = $item;
            }
        }
    }
}

// extensions vs device/users ... module_list setting
if (isset($amp_conf["AMPEXTENSIONS"]) && ($amp_conf["AMPEXTENSIONS"] == "deviceanduser")) {
       unset($module_list["extensions"]);
} else {
       unset($module_list["devices"]);
       unset($module_list["users"]);
}

// no more adding the APPLY Changes bar to module list because array_multisort messes up integer array keys
// $module_list['99'] = array('category' => NULL, 'name' => _("Apply Changes Bar"));

// changed from $module_name to $admin_module_name because the former is used by framework
foreach ($module_list as $key => $row) {
    $module_category[$key] = $row['category'];
    $admin_module_name[$key] = $row['name'];
}
array_multisort($module_category, SORT_ASC, $admin_module_name, SORT_ASC, $module_list);

$sections = array();
if (isset($_REQUEST["sections"])) {
    if (is_array($_REQUEST["sections"])) {
        $sections = $_REQUEST["sections"];
    } else {
        //TODO do we even need this??
        $sections = explode(";",$_REQUEST["sections"]);
    }
}

//if submitting form, update database
switch ($action) {
    case "addampuser":
        core_ampusers_add($username, $password, $extension_low, $extension_high, $deptname, $sections);
        //indicate 'need reload' link in footer.php 
        needreload();
        redirect_standard();
    break;
    case "editampuser":
        // Check to make sure the hidden var is sane, and that they haven't changed the password field
        if (strlen($form_password_sha1)==40 && $password == "******") {
            // Password unchanged
            core_ampusers_del($userdisplay);
            core_ampusers_add($username, $form_password_sha1, $extension_low, $extension_high, $deptname, $sections);
        } elseif ($password != "******") {
            // Password has been changed
            core_ampusers_del($userdisplay);
            core_ampusers_add($username, $password, $extension_low, $extension_high, $deptname, $sections);
        }
        //indicate 'need reload' link in footer.php 
        needreload();
        redirect_standard('userdisplay');
    break;
    case "delampuser":
        core_ampusers_del($userdisplay);
        //indicate 'need reload' link in footer.php 
        needreload();
        $userdisplay = ""; // go "add" screen
        redirect_standard();
    break;
}

?>
</div>

<div class="rnav">
<ul>
    <li><a <?php  echo ($userdisplay=='' ? 'class="current"':'') ?> href="config.php?display=<?php echo urlencode($display)?>"><?php echo _("Add User")?></a></li>
<?php 
//get existing trunk info
$tresults = core_ampusers_list();

foreach ($tresults as $tresult) {
    echo "\t<li><a ".($userdisplay==$tresult[0] ? 'class="current"':'')." href=\"config.php?display=".urlencode($display)."&amp;userdisplay=".urlencode($tresult[0])."\">".$tresult[0]."</a></li>\n";
}
?>
</ul>
</div>

<div class="content">

<?php 

    if ($userdisplay) {
        echo "<h2>"._("Edit Administrator")."</h2>";
        
        $user = getAmpUser($userdisplay);
        
        $username = $user["username"];
        $password = "******";
        $password_sha1 = $user["password_sha1"];
        $extension_high = $user["extension_high"];
        $extension_low = $user["extension_low"];
        $deptname = $user["deptname"];
        $sections = $user["sections"];
        
        $tlabel = sprintf(_("Delete User: %s"),$userdisplay);
        $label = '<span><img width="16" height="16" border="0" title="'.$tlabel.'" alt="" src="images/core_delete.png"/>&nbsp;'.$tlabel.'</span>';
?>
        <p><a href="config.php?display=<?php echo urlencode($display) ?>&amp;userdisplay=<?php echo urlencode($userdisplay) ?>&amp;action=delampuser"><?php echo $label ?></a></p>
<?php 

    } else {
        // set defaults
        $username = "";
        $password = "";
        $deptname = "";
        
        $extension_low = "";
        $extension_high = "";
        
        $sections = array("*");
        
    
        echo "<h2>"._("Add Administrator")."</h2>";
    } 
?>
    
        <form autocomplete="off" name="ampuserEdit" action="config.php" method="get">
            <input type="hidden" name="display" value="<?php echo $display?>"/>
            <input type="hidden" name="userdisplay" value="<?php echo $userdisplay ?>"/>
            <input type="hidden" name="action" value=""/>
            <input type="hidden" name="tech" value="<?php echo $tech?>"/>
            <input type="hidden" name="password_sha1" value="<?php echo $password_sha1 ?>"/>
            <table>
            <tr>
                <td colspan="2">
                    <h4><?php echo _("General Settings")?></h4>
                </td>
            </tr>
<?php if (($amp_conf["AUTHTYPE"] != "database") && ($amp_conf["AUTHTYPE"] != "webserver")) { ?>            
            <tr>
                <td colspan="2">
    <?php echo '<b>'._("NOTE:").'</b>'._("AUTHTYPE is not set to 'database' in /etc/amportal.conf - note that this module is not currently providing access control, and changing passwords here or adding users will have no effect unless AUTHTYPE is set to 'database'.") ?><br /><br />
                </td>
            </tr>
<?php } ?>
            <tr>
                <td>
                    <a href=# class="info"><?php echo _("Username<span>Create a unique username for this new user</span>")?></a>: 
                </td><td>
                    <input type="text" size="20" name="username" value="<?php echo $username;?>" tabindex="<?php echo ++$tabindex;?>"/>
                </td>
            </tr>
            <tr>
                <td>
                    <a href=# class="info"><?php echo _("Password<span>Create a password for this new user</span>")?></a>: 
                </td><td>
                    <input type="password" size="20" name="password" value="<?php echo $password; ?>" tabindex="<?php echo ++$tabindex;?>"/>
                </td>
            </tr>
            <tr>
                <td colspan="2">
                    <br>
                    <h4><?php echo _("Access Restrictions")?></h4>
                </td>
            </tr>
            <tr>
                <td>
                    <a href=# class="info"><?php echo _("Department Name<span>Restrict this user's view of Digital Receptionist menus and System Recordings to only those for this department.</span>")?></a>: 
                </td><td>
                    <input type="text" size="20" name="deptname" value="<?php echo htmlspecialchars($deptname);?>" tabindex="<?php echo ++$tabindex;?>"/>
                </td>
            </tr>
            <tr>
                <td>
                    <a href=# class="info"><?php echo _("Extension Range<span>Restrict this user's view to only Extensions, Ring Groups, and Queues within this range.</span>")?></a>: 
                </td><td>
                    <input type="text" size="5" name="extension_low" value="<?php echo htmlspecialchars($extension_low);?>" tabindex="<?php echo ++$tabindex;?>"/>
                    &nbsp;to
                    <input type="text" size="5" name="extension_high" value="<?php echo htmlspecialchars($extension_high);?>" tabindex="<?php echo ++$tabindex;?>"/>
                </td>
            </tr>
            <tr>
                <td valign="top">
                    <a href=# class="info"><?php echo _("Admin Access<span>Select the Admin Sections this user should have access to.</span>")?></a>: 
                </td><td>
                    <select multiple name="sections[]" tabindex="<?php echo ++$tabindex;?>">
                    <option />
<?php 
                $prev_category = NULL;
                foreach ($module_list as $key => $row) {
                    if ($row['category'] != $prev_category) {
                        if ($prev_category)
                            echo "</optgroup>\n";
                        echo "<optgroup label=\""._($row['category'])."\">\n";
                        $prev_category = $row['category'];
                    }

                    echo "<option value=\"".$key."\"";
                    if (in_array($key, $sections)) echo " SELECTED";
                    $label = dgettext($row['rawname'],$row['name']);
                    if ($label == $row['name']) {
                        $label = _($label);
                    }
                    echo ">"._($row['name'])."</option>\n";
                }
                echo "</optgroup>\n";

                // Apply Changes Bar
                echo "<option value=\"99\"";
                if (in_array("99", $sections)) echo " SELECTED";
                echo ">"._("Apply Changes Bar")."</option>\n";

                // Apply Changes Bar
                echo "<option value=\"999\"";
                if (in_array("999", $sections)) echo " SELECTED";
                echo ">".(($amp_conf['AMPEXTENSIONS'] == 'deviceanduser')?_("Add Device"):_("Add Extension"))."</option>\n";

                // All Sections
                echo "<option value=\"*\"";
                if (in_array("*", $sections)) echo " SELECTED";
                echo ">"._("ALL SECTIONS")."</option>\n";
?>                    
                    </select>
                </td>
            </tr>
            
            <tr>
                <td colspan="2">
                    <h6><input name="Submit" type="button" value="<?php echo _("Submit Changes")?>" onclick="checkAmpUser(ampuserEdit, '<?php echo ($userdisplay ? "editampuser" : "addampuser") ?>')" tabindex="<?php echo ++$tabindex;?>"></h6>
                </td>
            </tr>
            </table>
        </form>

<script language="javascript">
<!--

function checkAmpUser(theForm, action) {
    $username = theForm.username.value;
    $deptname = theForm.deptname.value;
    
    if ($username == "") {
        <?php echo "alert('"._("Username must not be blank")."')"?>;
    } else if (!$username.match('^[a-zA-Z][a-zA-Z0-9]+$')) {
        <?php echo "alert('"._("Username cannot start with a number, and can only contain letters and numbers")."')"?>;
    } else if ($deptname == "default") {
        <?php echo "alert('"._("For security reasons, you cannot use the department name default")."')"?>;
    } else if ($deptname != "" && !$deptname.match('^[a-zA-Z0-9]+$')) {
        <?php echo "alert('"._("Department name cannot have a space")."')"?>;
    } else {
        theForm.action.value = action;
        theForm.submit();
    }
}

//-->
</script>