require_once('initialize.php');
import('form.Form');
+import('ttGroupHelper');
import('ttTimesheetHelper');
// Access checks.
header('Location: feature_disabled.php');
exit();
}
+if ($user->isClient()) {
+ $users_for_client = ttGroupHelper::getUsersForClient($user->client_id);
+ if (count($users_for_client) == 0) {
+ header('Location: access_denied.php'); // There are no users for client.
+ exit();
+ }
+}
if ($request->isPost()) {
$userChanged = $request->getParameter('user_changed');
- if ($userChanged && !($user->can('track_time') && $user->isUserValid($request->getParameter('user')))) {
- header('Location: access_denied.php'); // Group changed, but no rght or wrong user id.
+ if ($userChanged && !(ttTimesheetHelper::isUserValid($request->getParameter('user')))) {
+ header('Location: access_denied.php'); // Wrong user id.
exit();
}
}
// End of access checks.
// Determine user for whom we display this page.
+$notClient = !$user->isClient();
if ($request->isPost() && $userChanged) {
$user_id = $request->getParameter('user');
} else {
- $user_id = $user->getUser();
+ if ($notClient)
+ $user_id = $user->getUser();
+ else
+ $user_id = $users_for_client[0]['id']; // First found user for a client.
}
-
$group_id = $user->getGroup();
// Elements of timesheetsForm.
$form = new Form('timesheetsForm');
-if ($user->can('view_timesheets') || $user->can('view_all_timesheets') || $user->can('manage_timesheets') || $user->can('manage_all_timesheets')) {
- $rank = $user->getMaxRankForGroup($group_id);
- if ($user->can('track_own_time'))
- $options = array('group_id'=>$group_id,'status'=>ACTIVE,'max_rank'=>$rank,'include_self'=>true,'self_first'=>true);
- else
- $options = array('group_id'=>$group_id,'status'=>ACTIVE,'max_rank'=>$rank);
- $user_list = $user->getUsers($options);
+if ($user->can('view_timesheets') || $user->can('view_all_timesheets') || $user->can('view_client_timesheets')) {
+ // Prepare user list for dropdown.
+ if ($notClient) {
+ $rank = $user->can('view_all_timesheets') ? MAX_RANK : $user->getMaxRankForGroup($group_id);
+ if ($user->can('view_own_timesheets'))
+ $options = array('max_rank'=>$rank,'include_self'=>true,'self_first'=>true);
+ else
+ $options = array('max_rank'=>$rank);
+ $user_list = $user->getUsers($options);
+ } else
+ $user_list = $users_for_client; // Obtained above.
+
if (count($user_list) >= 1) {
$form->addInput(array('type'=>'combobox',
'onchange'=>'document.timesheetsForm.user_changed.value=1;document.timesheetsForm.submit();',
}
}
-
-
-
-// TODO: fix this for client access.
$active_timesheets = ttTimesheetHelper::getActiveTimesheets($user_id);
-$inactive_timesheets = ttTimesheetHelper::getInactiveTimesheets($user_id);
-$show_client = $user->isPluginEnabled('cl') && !$user->isClient();
+if ($notClient)
+ $inactive_timesheets = ttTimesheetHelper::getInactiveTimesheets($user_id);
+
+$showClient = $user->isPluginEnabled('cl') && $notClient;
+$canEdit = $notClient && ($user->can('manage_own_timesheets') ||
+ $user->can('manage_timesheets') || $user->can('manage_all_timesheets'));
$smarty->assign('active_timesheets', $active_timesheets);
$smarty->assign('inactive_timesheets', $inactive_timesheets);
-$smarty->assign('show_client', $show_client);
-$smarty->assign('show_submit_status', !$user->isClient());
-$smarty->assign('show_approval_status', !$user->isClient());
+$smarty->assign('show_client', $showClient);
+$smarty->assign('not_client', $notClient);
+$smarty->assign('can_edit', $canEdit);
$smarty->assign('forms', array($form->getName()=>$form->toArray()));
$smarty->assign('title', $i18n->get('title.timesheets'));
$smarty->assign('content_page_name', 'timesheets.tpl');