// Class ttUserHelper contains helper functions for operations with users.
class ttUserHelper {
-
- // The getUserDetails function returns user details.
- static function getUserDetails($user_id) {
- $result = array();
- $mdb2 = getConnection();
- $sql = "select * from tt_users where id = $user_id";
- $res = $mdb2->query($sql);
-
- if (!is_a($res, 'PEAR_Error')) {
- $val = $res->fetchRow();
- return $val;
- }
- return false;
- }
-
// The getUserName function returns user name.
static function getUserName($user_id) {
- $mdb2 = getConnection();
-
+ $mdb2 = getConnection();
+
$sql = "select name from tt_users where id = $user_id and (status = 1 or status = 0)";
$res = $mdb2->query($sql);
$sql = "select login, count(*) as cnt from tt_users where email = ".$mdb2->quote($email)." and status = 1 group by email";
$res = $mdb2->query($sql);
-
- if (is_a($res, 'PEAR_Error'))
+
+ if (is_a($res, 'PEAR_Error'))
return false;
-
+
$val = $res->fetchRow();
if (1 <> $val['cnt']) {
// We either have no users or multiple users with a given email.
}
return $val['login'];
}
-
+
// The getUserIdByTmpRef obtains user id from a temporary reference (used for password resets).
static function getUserIdByTmpRef($ref) {
$mdb2 = getConnection();
-
+
$sql = "select user_id from tt_tmp_refs where ref = ".$mdb2->quote($ref);
$res = $mdb2->query($sql);
// insert - inserts a user into database.
static function insert($fields, $hash = true) {
- $mdb2 = getConnection();
+ global $user;
+ $mdb2 = getConnection();
$password = $mdb2->quote($fields['password']);
if($hash)
$password = 'md5('.$password.')';
$email = isset($fields['email']) ? $fields['email'] : '';
- $team_id = (int) $fields['team_id'];
- $role = (int) $fields['role'];
+ $group_id = (int) $fields['group_id'];
+ $org_id = (int) $fields['org_id'];
$rate = str_replace(',', '.', isset($fields['rate']) ? $fields['rate'] : 0);
+ $quota_percent = str_replace(',', '.', isset($fields['quota_percent']) ? $fields['quota_percent'] : 100);
if($rate == '')
$rate = 0;
if (array_key_exists('status', $fields)) { // Key exists and may be NULL during migration of deleted acounts.
$status_f = ', status';
$status_v = ', '.$mdb2->quote($fields['status']);
}
+ $created_ip_v = ', '.$mdb2->quote($_SERVER['REMOTE_ADDR']);
+ $created_by_v = ', '.$user->id;
- $sql = "insert into tt_users (name, login, password, team_id, role, client_id, rate, email $status_f) values (".
+ $sql = "insert into tt_users (name, login, password, group_id, org_id, role_id, client_id, rate, quota_percent, email, created, created_ip, created_by $status_f) values (".
$mdb2->quote($fields['name']).", ".$mdb2->quote($fields['login']).
- ", $password, $team_id, $role, ".$mdb2->quote($fields['client_id']).", $rate, ".$mdb2->quote($email)." $status_v)";
+ ", $password, $group_id, $org_id, ".$mdb2->quote($fields['role_id']).", ".$mdb2->quote($fields['client_id']).", $rate, $quota_percent, ".$mdb2->quote($email).", now() $created_ip_v $created_by_v $status_v)";
$affected = $mdb2->exec($sql);
-
+
// Now deal with project assignment.
if (!is_a($affected, 'PEAR_Error')) {
- $sql = "SELECT LAST_INSERT_ID() AS last_id";
- $res = $mdb2->query($sql);
- $val = $res->fetchRow();
- $last_id = $val['last_id'];
-
+ $last_id = $mdb2->lastInsertID('tt_users', 'id');
$projects = isset($fields['projects']) ? $fields['projects'] : array();
if (count($projects) > 0) {
// We have at least one project assigned. Insert corresponding entries in tt_user_project_binds table.
else
$p['rate'] = str_replace(',', '.', $p['rate']);
- $sql = "insert into tt_user_project_binds (project_id, user_id, rate, status) values(".$p['id'].",".$last_id.",".$p['rate'].", 1)";
+ $sql = "insert into tt_user_project_binds (project_id, user_id, group_id, org_id, rate, status)".
+ " values(".$p['id'].", $last_id, $group_id, $org_id, ".$p['rate'].", 1)";
$affected = $mdb2->exec($sql);
}
}
}
return false;
}
-
+
// update - updates a user in database.
static function update($user_id, $fields) {
- global $user;
+ global $user;
$mdb2 = getConnection();
-
+
// Check parameters.
- if (!$user_id || !isset($fields['login']))
+ if (!$user_id)
return false;
+ $group_id = $user->getGroup();
+ $org_id = $user->org_id;
+
// Prepare query parts.
+ if (isset($fields['login'])) {
+ $login_part = ", login = ".$mdb2->quote($fields['login']);
+ }
+
if (isset($fields['password']))
$pass_part = ', password = md5('.$mdb2->quote($fields['password']).')';
- if (right_assign_roles & $user->rights) {
- if (isset($fields['role'])) {
- $role = (int) $fields['role'];
- $role_part = ", role = $role";
+
+ if (isset($fields['name']))
+ $name_part = ', name = '.$mdb2->quote($fields['name']);
+
+ if ($user->can('manage_users')) {
+ if (isset($fields['role_id'])) {
+ $role_id = (int) $fields['role_id'];
+ $role_part = ", role_id = $role_id";
}
if (array_key_exists('client_id', $fields)) // Could be NULL.
$client_part = ", client_id = ".$mdb2->quote($fields['client_id']);
}
-
+
if (array_key_exists('rate', $fields)) {
$rate = str_replace(',', '.', isset($fields['rate']) ? $fields['rate'] : 0);
if($rate == '') $rate = 0;
$rate_part = ", rate = ".$mdb2->quote($rate);
}
-
+
+ if (array_key_exists('quota_percent', $fields)) {
+ $quota_percent = str_replace(',', '.', isset($fields['quota_percent']) ? $fields['quota_percent'] : 100);
+ $quota_percent_part = ", quota_percent = ".$mdb2->quote($quota_percent);
+ }
+
+ if (isset($fields['email']))
+ $email_part = ', email = '.$mdb2->quote($fields['email']);
+
if (isset($fields['status'])) {
$status = (int) $fields['status'];
$status_part = ", status = $status";
}
-
- $sql = "update tt_users set login = ".$mdb2->quote($fields['login']).
- "$pass_part, name = ".$mdb2->quote($fields['name']).
- "$role_part $client_part $rate_part $status_part, email = ".$mdb2->quote($fields['email']).
- " where id = $user_id";
+
+ $modified_part = ', modified = now(), modified_ip = '.$mdb2->quote($_SERVER['REMOTE_ADDR']).', modified_by = '.$user->id;
+ $parts = ltrim($login_part.$pass_part.$name_part.$role_part.$client_part.$rate_part.$quota_percent_part.$email_part.$modified_part.$status_part, ',');
+
+ $sql = "update tt_users set $parts".
+ " where id = $user_id and group_id = $group_id and org_id = $org_id";
$affected = $mdb2->exec($sql);
if (is_a($affected, 'PEAR_Error')) return false;
-
+
if (array_key_exists('projects', $fields)) {
// Deal with project assignments.
// Note: we cannot simply delete old project binds and insert new ones because it screws up reporting
// otherwise de-activate the bind (set its status to inactive). This will keep the bind
// and its rate in database for reporting.
- $all_projects = ttTeamHelper::getAllProjects($user->team_id);
+ $all_projects = ttTeamHelper::getAllProjects($user->getGroup());
$assigned_projects = isset($fields['projects']) ? $fields['projects'] : array();
-
+
foreach($all_projects as $p) {
// Determine if a project is assigned.
$assigned = false;
if (is_a($affected, 'PEAR_Error')) die ($affected->getMessage());
} else {
// Record does not exist. Insert it.
- ttUserHelper::insertBind($user_id, $project_id, $rate, 1);
- }
+ ttUserHelper::insertBind(array(
+ 'user_id' => $user_id,
+ 'project_id' => $project_id,
+ 'rate' => $rate,
+ 'status' => ACTIVE));
+ }
}
}
}
return true;
}
-
- // markDeleted - marks user and its associated things as deleted.
- static function markDeleted($user_id) {
- $mdb2 = getConnection();
- global $user;
-
- // Preliminary checks. Only managers, co-managers, and admin can do this.
- if (!$user->canManageTeam() && !$user->isAdmin())
- return false;
-
- // Tho logic is different depending on who is doint the operation.
- // Co-manage and admin - mark user deleted.
- // Manager - mark user deleted. If manager is the only account in team, mark team items deleted.
-
- // admin part.
- if ($user->isAdmin()) {
- // Mark user binds as deleted.
- $sql = "update tt_user_project_binds set status = NULL where user_id = $user_id";
- $affected = $mdb2->exec($sql);
- if (is_a($affected, 'PEAR_Error'))
- return false;
-
- // Mark user as deleted.
- $sql = "update tt_users set status = NULL where id = $user_id";
- $affected = $mdb2->exec($sql);
- if (is_a($affected, 'PEAR_Error'))
- return false;
-
- } elseif ($user->isCoManager()) {
- // Mark user binds as deleted.
- $sql = "update tt_user_project_binds set status = NULL where user_id = $user_id";
- $affected = $mdb2->exec($sql);
- if (is_a($affected, 'PEAR_Error'))
- return false;
- // Mark user as deleted.
- $sql = "update tt_users set status = NULL where id = $user_id and team_id = ".$user->team_id;
- $affected = $mdb2->exec($sql);
- if (is_a($affected, 'PEAR_Error'))
- return false;
-
- } elseif ($user->isManager()) {
- $user_count = ttTeamHelper::getUserCount($user->team_id);
-
- // Marking deleted a manager with active users is not allowed.
- if (($user_id == $user->id) && ($user_count > 1))
- return false;
-
- if (1 == $user_count) {
- // Mark tasks deleted.
- if (!ttTeamHelper::markTasksDeleted($user->team_id))
- return false;
-
- // Mark projects deleted.
- $sql = "update tt_projects set status = NULL where team_id = $user->team_id";
- $affected = $mdb2->exec($sql);
- if (is_a($affected, 'PEAR_Error'))
- return false;
-
- // Mark clients deleted.
- $sql = "update tt_clients set status = NULL where team_id = $user->team_id";
- $affected = $mdb2->exec($sql);
- if (is_a($affected, 'PEAR_Error'))
- return false;
-
- // Mark custom fields deleted.
- $sql = "update tt_custom_fields set status = NULL where team_id = $user->team_id";
- $affected = $mdb2->exec($sql);
- if (is_a($affected, 'PEAR_Error'))
- return false;
-
- // Mark team deleted.
- $sql = "update tt_teams set status = NULL where id = $user->team_id";
- $affected = $mdb2->exec($sql);
- if (is_a($affected, 'PEAR_Error'))
- return false;
-
- }
-
- // Mark user binds as deleted.
- $sql = "update tt_user_project_binds set status = NULL where user_id = $user_id";
- $affected = $mdb2->exec($sql);
- if (is_a($affected, 'PEAR_Error'))
- return false;
-
- // Mark user as deleted.
- $sql = "update tt_users set status = NULL where id = $user_id and team_id = ".$user->team_id;
- $affected = $mdb2->exec($sql);
- if (is_a($affected, 'PEAR_Error'))
- return false;
- }
-
- return true;
- }
-
// The delete function permanently deletes a user and all associated data.
static function delete($user_id) {
$mdb2 = getConnection();
// Delete custom field log entries for user, if we have them.
- $sql = "delete from tt_custom_field_log where log_id in
- (select id from tt_log where user_id = $user_id)";
+ $sql = "delete from tt_custom_field_log where log_id in
+ (select id from tt_log where user_id = $user_id)";
$affected = $mdb2->exec($sql);
if (is_a($affected, 'PEAR_Error'))
return false;
$affected = $mdb2->exec($sql);
if (is_a($affected, 'PEAR_Error'))
return false;
-
+
// Delete expense items for user.
$sql = "delete from tt_expense_items where user_id = $user_id";
$affected = $mdb2->exec($sql);
return false;
// Clean up tt_fav_reports table.
- $sql = "delete from tt_fav_reports where user_id = $user_id";
+ $sql = "delete from tt_fav_reports where user_id = $user_id";
$affected = $mdb2->exec($sql);
if (is_a($affected, 'PEAR_Error'))
return false;
$affected = $mdb2->exec($sql);
if (is_a($affected, 'PEAR_Error'))
return false;
-
+
return true;
}
-
+
// The saveTmpRef saves a temporary reference for user that is used to reset user password.
static function saveTmpRef($ref, $user_id) {
$mdb2 = getConnection();
-
- $sql = "delete from tt_tmp_refs where timestamp + 86400 < now()";
+
+ $sql = "delete from tt_tmp_refs where created < now() - interval 1 hour";
$affected = $mdb2->exec($sql);
- $sql = "insert into tt_tmp_refs (ref, user_id) values(".$mdb2->quote($ref).", $user_id)";
+ $sql = "insert into tt_tmp_refs (created, ref, user_id) values(now(), ".$mdb2->quote($ref).", $user_id)";
$affected = $mdb2->exec($sql);
}
-
+
// The setPassword function updates password for user.
static function setPassword($user_id, $password) {
$mdb2 = getConnection();
-
+
$sql = "update tt_users set password = md5(".$mdb2->quote($password).") where id = $user_id";
$affected = $mdb2->exec($sql);
-
+
return (!is_a($affected, 'PEAR_Error'));
}
-
+
// insertBind - inserts a user to project bind into tt_user_project_binds table.
- static function insertBind($user_id, $project_id, $rate, $status) {
+ static function insertBind($fields) {
+ global $user;
$mdb2 = getConnection();
-
- $sql = "insert into tt_user_project_binds (user_id, project_id, rate, status)
- values($user_id, $project_id, ".$mdb2->quote($rate).", $status)";
+
+ $group_id = $user->getGroup();
+ $org_id = $user->org_id;
+ $user_id = (int) $fields['user_id'];
+ $project_id = (int) $fields['project_id'];
+ $rate = $mdb2->quote($fields['rate']);
+ $status = $mdb2->quote($fields['status']);
+
+ $sql = "insert into tt_user_project_binds (user_id, project_id, group_id, org_id, rate, status)".
+ " values($user_id, $project_id, $group_id, $org_id, $rate, $status)";
$affected = $mdb2->exec($sql);
return (!is_a($affected, 'PEAR_Error'));
}
-
+
// deleteBind - deactivates user to project bind when time entries exist,
- // otherwise deletes it entirely.
+ // otherwise deletes it entirely.
static function deleteBind($user_id, $project_id) {
$mdb2 = getConnection();
-
+
$sql = "select count(*) as cnt from tt_log where
user_id = $user_id and project_id = $project_id and status = 1";
$res = $mdb2->query($sql);
if (is_a($res, 'PEAR_Error')) die ($res->getMessage());
-
+
$count = 0;
$val = $res->fetchRow();
$count = $val['cnt'];
-
+
if ($count > 0) {
// Deactivate user bind.
$sql = "select id from tt_user_project_binds where user_id = $user_id and project_id = $project_id";
if (is_a($res, 'PEAR_Error')) die ($res->getMessage());
if ($val = $res->fetchRow()) {
$sql = "update tt_user_project_binds set status = 0 where id = ".$val['id'];
- $affected = $mdb2->exec($sql);
+ $affected = $mdb2->exec($sql);
if (is_a($affected, 'PEAR_Error')) die ($res->getMessage());
}
} else {
$sql = "delete from tt_user_project_binds where user_id = $user_id and project_id = $project_id";
$affected = $mdb2->exec($sql);
if (is_a($affected, 'PEAR_Error')) die ($res->getMessage());
- }
+ }
return true;
}
+
+ // updateLastAccess - updates last access info for user in db.
+ static function updateLastAccess() {
+ global $user;
+ $mdb2 = getConnection();
+ $accessed_ip = $mdb2->quote($_SERVER['REMOTE_ADDR']);
+ $sql = "update tt_users set accessed = now(), accessed_ip = $accessed_ip where id = $user->id";
+ $mdb2->exec($sql);
+ }
+
+ // canAdd determines if we can add a user in case there is a limit.
+ static function canAdd($num_users = 1) {
+ $mdb2 = getConnection();
+ $sql = "select param_value from tt_site_config where param_name = 'max_users'";
+ $res = $mdb2->query($sql);
+ $val = $res->fetchRow();
+ if (!$val) return true; // No limit.
+
+ $max_count = $val['param_value'];
+ $sql = "select count(*) as user_count from tt_users where group_id > 0 and status is not null";
+ $res = $mdb2->query($sql);
+ $val = $res->fetchRow();
+ if ($val['user_count'] <= $max_count - $num_users)
+ return true; // Limit not reached.
+
+ return false;
+ }
+
+ // getUserRank - obtains a rank for a given user.
+ static function getUserRank($user_id) {
+ global $user;
+ $mdb2 = getConnection();
+
+ $group_id = $user->getGroup();
+ $org_id = $user->org_id;
+
+ $sql = "select r.rank from tt_users u".
+ " left join tt_roles r on (u.role_id = r.id)".
+ " where u.id = $user_id and u.group_id = $group_id and u.org_id = $org_id";
+ $res = $mdb2->query($sql);
+ if (is_a($res, 'PEAR_Error')) return 0;
+ $val = $res->fetchRow();
+ return $val['rank'];
+ }
}
projects / timetracker.git / blobdiff