+ "admin/show",
+ title => "kivitendo " . t8('Administration'),
+ );
+}
+
+sub action_new_user {
+ my ($self) = @_;
+
+ $self->user(SL::DB::AuthUser->new(
+ config_values => {
+ vclimit => 200,
+ countrycode => "de",
+ numberformat => "1.000,00",
+ dateformat => "dd.mm.yy",
+ stylesheet => "kivitendo.css",
+ menustyle => "neu",
+ },
+ ));
+
+ $self->edit_user_form(title => t8('Create a new user'));
+}
+
+sub action_edit_user {
+ my ($self) = @_;
+ $self->edit_user_form(title => t8('Edit User'));
+}
+
+sub action_save_user {
+ my ($self) = @_;
+ my $params = delete($::form->{user}) || { };
+ my $props = delete($params->{config_values}) || { };
+ my $is_new = !$params->{id};
+
+ # Assign empty arrays if the browser doesn't send those controls.
+ $params->{clients} ||= [];
+ $params->{groups} ||= [];
+
+ $self->user($is_new ? SL::DB::AuthUser->new : SL::DB::AuthUser->new(id => $params->{id})->load)
+ ->assign_attributes(%{ $params })
+ ->config_values({ %{ $self->user->config_values }, %{ $props } });
+
+ my @errors = $self->user->validate;
+
+ if (@errors) {
+ flash('error', @errors);
+ $self->edit_user_form(title => $is_new ? t8('Create a new user') : t8('Edit User'));
+ return;
+ }
+
+ $self->user->save;
+
+ if ($::auth->can_change_password && $::form->{new_password}) {
+ $::auth->change_password($self->user->login, $::form->{new_password});
+ }
+
+ flash_later('info', $is_new ? t8('The user has been created.') : t8('The user has been saved.'));
+ $self->redirect_to(action => 'show');
+}
+
+sub action_delete_user {
+ my ($self) = @_;
+
+ my @clients = @{ $self->user->clients || [] };
+
+ # backup user metadata (email, name, etc)
+ my $user_config_values_ref = $self->user->config_values();
+ my $login =$self->user->login;
+
+ if (!$self->user->delete) {
+ flash('error', t8('The user could not be deleted.'));
+ $self->edit_user_form(title => t8('Edit User'));
+ return;
+ }
+
+ # Flag corresponding entries in 'employee' as deleted.
+ # and restore the most important user data in employee
+ # TODO try and catch the whole transaction {user->delete; update employee} {exception}
+ foreach my $client (@clients) {
+ my $dbh = $client->dbconnect(AutoCommit => 1) || next;
+ $dbh->do(qq|UPDATE employee SET deleted = TRUE, name = ?, deleted_email = ?,
+ deleted_tel = ?, deleted_fax = ?, deleted_signature = ? WHERE login = ?|,undef,
+ $user_config_values_ref->{name}, $user_config_values_ref->{email},
+ $user_config_values_ref->{tel}, $user_config_values_ref->{fax},
+ $user_config_values_ref->{signature}, $self->user->login);
+ $dbh->disconnect;
+ }
+
+ flash_later('info', t8('The user has been deleted.'));
+ $self->redirect_to(action => 'show');
+}
+
+#
+# actions: clients
+#
+
+sub action_new_client {
+ my ($self) = @_;
+
+ $self->client(SL::DB::AuthClient->new(
+ dbhost => $::auth->{DB_config}->{host},
+ dbport => $::auth->{DB_config}->{port},
+ dbuser => $::auth->{DB_config}->{user},
+ dbpasswd => $::auth->{DB_config}->{password},
+ ));
+
+ $self->edit_client_form(title => t8('Create a new client'));
+}
+
+sub action_edit_client {
+ my ($self) = @_;
+ $self->edit_client_form(title => t8('Edit Client'));
+}
+
+sub action_save_client {
+ my ($self) = @_;
+ my $params = delete($::form->{client}) || { };
+ my $is_new = !$params->{id};
+
+ # Assign empty arrays if the browser doesn't send those controls.
+ $params->{groups} ||= [];
+ $params->{users} ||= [];
+
+ $self->client($is_new ? SL::DB::AuthClient->new : SL::DB::AuthClient->new(id => $params->{id})->load)->assign_attributes(%{ $params });
+
+ my @errors = $self->client->validate;
+
+ if (@errors) {
+ flash('error', @errors);
+ $self->edit_client_form(title => $is_new ? t8('Create a new client') : t8('Edit Client'));
+ return;
+ }
+
+ $self->client->save;
+ if ($self->client->is_default) {
+ SL::DB::Manager::AuthClient->update_all(set => { is_default => 0 }, where => [ '!id' => $self->client->id ]);
+ }
+
+ flash_later('info', $is_new ? t8('The client has been created.') : t8('The client has been saved.'));
+ $self->redirect_to(action => 'show');
+}
+
+sub action_delete_client {
+ my ($self) = @_;
+
+ if (!$self->client->delete) {
+ flash('error', t8('The client could not be deleted.'));
+ $self->edit_client_form(title => t8('Edit Client'));
+ return;
+ }
+
+ flash_later('info', t8('The client has been deleted.'));
+ $self->redirect_to(action => 'show');
+}
+
+sub action_test_database_connectivity {
+ my ($self) = @_;
+
+ my %cfg = %{ $::form->{client} || {} };
+ my $dbconnect = 'dbi:Pg:dbname=' . $cfg{dbname} . ';host=' . $cfg{dbhost} . ';port=' . $cfg{dbport};
+ my $dbh = DBI->connect($dbconnect, $cfg{dbuser}, $cfg{dbpasswd});
+
+ my $ok = !!$dbh;
+ my $error = $DBI::errstr;
+
+ $dbh->disconnect if $dbh;
+
+ $self->render('admin/test_db_connection', { layout => 0 },
+ title => t8('Database Connection Test'),
+ ok => $ok,
+ error => $error);
+}
+
+#
+# actions: groups
+#
+
+sub action_new_group {
+ my ($self) = @_;
+
+ $self->group(SL::DB::AuthGroup->new);
+ $self->edit_group_form(title => t8('Create a new group'));
+}
+
+sub action_edit_group {
+ my ($self) = @_;
+ $self->edit_group_form(title => t8('Edit User Group'));
+}
+
+sub action_save_group {
+ my ($self) = @_;
+
+ my $params = delete($::form->{group}) || { };
+ my $is_new = !$params->{id};
+
+ # Assign empty arrays if the browser doesn't send those controls.
+ $params->{clients} ||= [];
+ $params->{users} ||= [];
+
+ $self->group($is_new ? SL::DB::AuthGroup->new : SL::DB::AuthGroup->new(id => $params->{id})->load)->assign_attributes(%{ $params });
+
+ my @errors = $self->group->validate;
+
+ if (@errors) {
+ flash('error', @errors);
+ $self->edit_group_form(title => $is_new ? t8('Create a new user group') : t8('Edit User Group'));
+ return;
+ }
+
+ $self->group->save;
+
+ flash_later('info', $is_new ? t8('The user group has been created.') : t8('The user group has been saved.'));
+ $self->redirect_to(action => 'show');
+}
+
+sub action_delete_group {
+ my ($self) = @_;
+
+ if (!$self->group->delete) {
+ flash('error', t8('The user group could not be deleted.'));
+ $self->edit_group_form(title => t8('Edit User Group'));
+ return;
+ }
+
+ flash_later('info', t8('The user group has been deleted.'));
+ $self->redirect_to(action => 'show');
+}
+
+#
+# actions: printers
+#
+
+sub action_list_printers {
+ my ($self) = @_;
+ $self->render('admin/list_printers', title => t8('Printer management'));
+}
+
+sub action_new_printer {
+ my ($self) = @_;
+
+ $self->printer(SL::DB::Printer->new);
+ $self->edit_printer_form(title => t8('Create a new printer'));
+}
+
+sub action_edit_printer {
+ my ($self) = @_;
+ $self->edit_printer_form(title => t8('Edit Printer'));
+}
+
+sub action_save_printer {
+ my ($self) = @_;
+ my $params = delete($::form->{printer}) || { };
+ my $is_new = !$params->{id};
+
+ $self->printer($is_new ? SL::DB::Printer->new : SL::DB::Printer->new(id => $params->{id})->load)->assign_attributes(%{ $params });
+
+ my @errors = $self->printer->validate;
+
+ if (@errors) {
+ flash('error', @errors);
+ $self->edit_printer_form(title => $is_new ? t8('Create a new printer') : t8('Edit Printer'));
+ return;
+ }
+
+ $self->printer->save;
+
+ flash_later('info', $is_new ? t8('The printer has been created.') : t8('The printer has been saved.'));
+ $self->redirect_to(action => 'list_printers', 'client.id' => $self->client->id);
+}
+
+sub action_delete_printer {
+ my ($self) = @_;
+
+ if (!$self->printer->delete) {
+ flash('error', t8('The printer could not be deleted.'));
+ $self->edit_printer_form(title => t8('Edit Printer'));
+ return;
+ }
+
+ flash_later('info', t8('The printer has been deleted.'));
+ $self->redirect_to(action => 'list_printers', 'client.id' => $self->client->id);
+}
+
+#
+# actions: database administration
+#
+
+sub action_create_dataset_login {
+ my ($self) = @_;
+
+ $self->database_administration_login_form(
+ title => t8('Create Dataset'),
+ next_action => 'create_dataset',
+ );
+}
+
+sub action_create_dataset {
+ my ($self) = @_;
+ $self->create_dataset_form;
+}
+
+sub action_do_create_dataset {
+ my ($self) = @_;
+
+ my @errors;
+ push @errors, t8("Dataset missing!") if !$::form->{db};
+ push @errors, t8("Default currency missing!") if !$::form->{defaultcurrency};
+
+ if (@errors) {
+ flash('error', @errors);
+ return $self->create_dataset_form;
+ }
+
+ $::form->{encoding} = 'UNICODE';
+ User->new->dbcreate($::form);
+
+ flash_later('info', t8("The dataset #1 has been created.", $::form->{db}));
+ $self->redirect_to(action => 'show');
+}
+
+sub action_delete_dataset_login {
+ my ($self) = @_;
+
+ $self->database_administration_login_form(
+ title => t8('Delete Dataset'),
+ next_action => 'delete_dataset',
+ );
+}
+
+sub action_delete_dataset {
+ my ($self) = @_;
+ $self->delete_dataset_form;
+}
+
+sub action_do_delete_dataset {
+ my ($self) = @_;
+
+ my @errors;
+ push @errors, t8("Dataset missing!") if !$::form->{db};
+
+ if (@errors) {
+ flash('error', @errors);
+ return $self->create_dataset_form;
+ }
+
+ User->new->dbdelete($::form);
+
+ flash_later('info', t8("The dataset #1 has been deleted.", $::form->{db}));
+ $self->redirect_to(action => 'show');
+}
+
+#
+# actions: locking, unlocking
+#
+
+sub action_show_lock {
+ my ($self) = @_;
+
+ $self->render(
+ "admin/show_lock",
+ title => "kivitendo " . t8('Administration'),