X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;ds=sidebyside;f=projects.php;h=8b4537e796579c462a6a71ca591f54c9ddddd3e4;hb=aeb30899d6ec142220d83b34fd8f6c68c05e8e90;hp=1d5f7e2e49ddad197a6839b6517ac5116f6e3ad0;hpb=75ef763b9bd7f515280a6d130e5ad81720d72156;p=timetracker.git diff --git a/projects.php b/projects.php index 1d5f7e2e..8b4537e7 100644 --- a/projects.php +++ b/projects.php @@ -29,25 +29,57 @@ require_once('initialize.php'); import('form.Form'); import('ttTeamHelper'); +import('ttGroupHelper'); // Access checks. -// TODO: introduce view_projects right to keep access checks simple. -if (!(ttAccessAllowed('track_own_time') || ttAccessAllowed('track_time') || ttAccessAllowed('manage_projects'))) { +if (!(ttAccessAllowed('view_own_projects') || ttAccessAllowed('manage_projects'))) { header('Location: access_denied.php'); exit(); } -if (MODE_PROJECTS != $user->tracking_mode && MODE_PROJECTS_AND_TASKS != $user->tracking_mode) { +if (MODE_PROJECTS != $user->getTrackingMode() && MODE_PROJECTS_AND_TASKS != $user->getTrackingMode()) { header('Location: feature_disabled.php'); exit(); } +if ($request->isPost() && !$user->isGroupValid($request->getParameter('group'))) { + header('Location: access_denied.php'); // Wrong group id in post. + exit(); +} // End of access checks. +if ($request->isPost()) { + $group_id = $request->getParameter('group'); + $user->setOnBehalfGroup($group_id); + // Projects feature may not be available in new group, check and redirect. + if (MODE_PROJECTS != $user->getTrackingMode() && MODE_PROJECTS_AND_TASKS != $user->getTrackingMode()) { + header('Location: feature_disabled.php'); + exit(); + } +} else { + $group_id = $user->getGroup(); +} + +$form = new Form('projectsForm'); +if ($user->can('manage_subgroups')) { + $groups = $user->getGroupsForDropdown(); + if (count($groups) > 1) { + $form->addInput(array('type'=>'combobox', + 'onchange'=>'this.form.submit();', + 'name'=>'group', + 'style'=>'width: 250px;', + 'value'=>$group_id, + 'data'=>$groups, + 'datakeys'=>array('id','name'))); + $smarty->assign('group_dropdown', 1); + } +} + if($user->can('manage_projects')) { - $active_projects = ttTeamHelper::getActiveProjects($user->team_id); - $inactive_projects = ttTeamHelper::getInactiveProjects($user->team_id); + $active_projects = ttGroupHelper::getActiveProjects(); + $inactive_projects = ttGroupHelper::getInactiveProjects(); } else $active_projects = $user->getAssignedProjects(); +$smarty->assign('forms', array($form->getName()=>$form->toArray())); $smarty->assign('active_projects', $active_projects); $smarty->assign('inactive_projects', $inactive_projects); $smarty->assign('title', $i18n->get('title.projects'));