X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=WEB-INF%2Flib%2FttUser.class.php;h=53ddb48474f6155b8943fcefb0199b10c9723da7;hb=cd967f39df8f99e94a150233825d2505b72ae6f4;hp=2f71ad362f2c4604bbf661c1b8ee1bed295851df;hpb=9a23a8c0a51b7ec38a96f525484134f3cb85dc7e;p=timetracker.git diff --git a/WEB-INF/lib/ttUser.class.php b/WEB-INF/lib/ttUser.class.php index 2f71ad36..53ddb484 100644 --- a/WEB-INF/lib/ttUser.class.php +++ b/WEB-INF/lib/ttUser.class.php @@ -31,8 +31,8 @@ class ttUser { var $name = null; // User name. var $id = null; // User id. var $team_id = null; // Team id. - var $role = null; // User role (user, client, comanager, manager, admin). - var $client_id = null; // Client id for client user role. + var $role = null; // User role (user, client, comanager, manager, admin). + var $client_id = null; // Client id for client user role. var $behalf_id = null; // User id, on behalf of whom we are working. var $behalf_name = null; // User name, on behalf of whom we are working. var $email = null; // User email. @@ -45,34 +45,34 @@ class ttUser { var $record_type = 0; // Record type (duration vs start and finish, or both). var $currency = null; // Currency. var $plugins = null; // Comma-separated list of enabled plugins. - var $team = null; // Team name. + var $team = null; // Team name. var $custom_logo = 0; // Whether to use a custom logo for team. - var $address = null; // Address for invoices. - var $lock_interval = 0; // Lock interval in days for time records. + var $address = null; // Address for invoices. + var $lock_spec = null; // Cron specification for record locking. var $rights = 0; // A mask of user rights. - + // Constructor. function ttUser($login, $id = null) { - if (!$login && !$id) { + if (!$login && !$id) { // nothing to initialize - return; - } - + return; + } + $mdb2 = getConnection(); - + $sql = "SELECT u.id, u.login, u.name, u.team_id, u.role, u.client_id, u.email, t.name as team_name, - t.address, t.currency, t.locktime, t.lang, t.decimal_mark, t.date_format, t.time_format, t.week_start, t.tracking_mode, t.record_type, t.plugins, t.custom_logo + t.address, t.currency, t.lang, t.decimal_mark, t.date_format, t.time_format, t.week_start, + t.tracking_mode, t.record_type, t.plugins, t.lock_spec, t.custom_logo FROM tt_users u LEFT JOIN tt_teams t ON (u.team_id = t.id) WHERE "; - if ($id) - $sql .= "u.id = $id"; + if ($id) + $sql .= "u.id = $id"; else - $sql .= "u.login = ".$mdb2->quote($login); - $sql .= " AND u.status = 1"; - + $sql .= "u.login = ".$mdb2->quote($login); + $sql .= " AND u.status = 1"; + $res = $mdb2->query($sql); if (is_a($res, 'PEAR_Error')) { return; - //die($res->getMessage()); } $val = $res->fetchRow(); @@ -95,35 +95,35 @@ class ttUser { $this->address = $val['address']; $this->currency = $val['currency']; $this->plugins = $val['plugins']; + $this->lock_spec = $val['lock_spec']; $this->custom_logo = $val['custom_logo']; - $this->lock_interval = $val['locktime']; - + // Set "on behalf" id and name. if (isset($_SESSION['behalf_id'])) { $this->behalf_id = $_SESSION['behalf_id']; $this->behalf_name = $_SESSION['behalf_name']; } - + // Set user rights. if ($this->role == ROLE_USER) { - $this->rights = right_data_entry|right_view_charts|right_view_reports; - } else if ($this->role == ROLE_CLIENT) { - $this->rights = right_view_reports|right_view_invoices; // TODO: how about right_view_charts, too? - } else if ($this->role == ROLE_COMANAGER) { - $this->rights = right_data_entry|right_view_charts|right_view_reports|right_view_invoices|right_manage_team; - } else if ($this->role == ROLE_MANAGER) { - $this->rights = right_data_entry|right_view_charts|right_view_reports|right_view_invoices|right_manage_team|right_assign_roles|right_export_team; - } else if ($this->role == ROLE_SITE_ADMIN) { - $this->rights = right_administer_site; + $this->rights = right_data_entry|right_view_charts|right_view_reports; + } elseif ($this->role == ROLE_CLIENT) { + $this->rights = right_view_reports|right_view_invoices; // TODO: how about right_view_charts, too? + } elseif ($this->role == ROLE_COMANAGER) { + $this->rights = right_data_entry|right_view_charts|right_view_reports|right_view_invoices|right_manage_team; + } elseif ($this->role == ROLE_MANAGER) { + $this->rights = right_data_entry|right_view_charts|right_view_reports|right_view_invoices|right_manage_team|right_assign_roles|right_export_team; + } elseif ($this->role == ROLE_SITE_ADMIN) { + $this->rights = right_administer_site; } } } - + // The getActiveUser returns user id on behalf of whom current user is operating. function getActiveUser() { return ($this->behalf_id ? $this->behalf_id : $this->id); } - + // isAdmin - determines whether current user is admin (has right_administer_site). function isAdmin() { return (right_administer_site & $this->role); @@ -138,23 +138,29 @@ class ttUser { function isCoManager() { return (ROLE_COMANAGER == $this->role); } - + // isClient - determines whether current user is a client. function isClient() { return (ROLE_CLIENT == $this->role); } - + // canManageTeam - determines whether current user is manager or co-manager. function canManageTeam() { return (right_manage_team & $this->role); } - + + // isPluginEnabled checks whether a plugin is enabled for user. + function isPluginEnabled($plugin) + { + return in_array($plugin, explode(',', $this->plugins)); + } + // getAssignedProjects - returns an array of assigned projects. function getAssignedProjects() { $result = array(); $mdb2 = getConnection(); - + // Do a query with inner join to get assigned projects. $sql = "select p.id, p.name, p.description, p.tasks, upb.rate from tt_projects p inner join tt_user_project_binds upb on (upb.user_id = ".$this->getActiveUser()." and upb.project_id = p.id and upb.status = 1) @@ -167,5 +173,24 @@ class ttUser { } return $result; } + + // isDateLocked checks whether a specifc date is locked for modifications. + function isDateLocked($date) + { + if ($this->isPluginEnabled('lk') && $this->lock_spec) { + // Override for managers. + if ($this->canManageTeam()) return false; + + require_once(LIBRARY_DIR.'/tdcron/class.tdcron.php'); + require_once(LIBRARY_DIR.'/tdcron/class.tdcron.entry.php'); + + // Calculate the last occurrence of a lock. + $last = tdCron::getLastOccurrence($this->lock_spec, mktime()); + $lockdate = new DateAndTime(DB_DATEFORMAT, strftime('%Y-%m-%d', $last)); + if ($date->before($lockdate)) { + return true; + } + } + return false; + } } -?> \ No newline at end of file