X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=bin%2Fmozilla%2Foe.pl;h=b337842ff6b23ea3d3093d5054ff706826910bbc;hb=b29783a3f0cff568b5d344d4fd34fe65840bea46;hp=be239299ddd25592094627846f3f656df923e7f5;hpb=50d3e0096d2dec732dad862a3ae6154e0415e824;p=kivitendo-erp.git diff --git a/bin/mozilla/oe.pl b/bin/mozilla/oe.pl index be239299d..b337842ff 100644 --- a/bin/mozilla/oe.pl +++ b/bin/mozilla/oe.pl @@ -33,12 +33,15 @@ use POSIX qw(strftime); +use SL::DO; +use SL::FU; use SL::OE; use SL::IR; use SL::IS; use SL::PE; use SL::ReportGenerator; -use List::Util qw(max reduce); +use List::Util qw(max reduce sum); +use Data::Dumper; require "bin/mozilla/io.pl"; require "bin/mozilla/arap.pl"; @@ -59,9 +62,25 @@ require "bin/mozilla/reportgenerator.pl"; # $locale->text('Workflow request_quotation'); # $locale->text('Workflow sales_quotation'); +my $oe_access_map = { + 'sales_order' => 'sales_order_edit', + 'purchase_order' => 'purchase_order_edit', + 'request_quotation' => 'request_quotation_edit', + 'sales_quotation' => 'sales_quotation_edit', +}; + +sub check_oe_access { + my $right = $oe_access_map->{$form->{type}}; + $right ||= 'DOES_NOT_EXIST'; + + $auth->assert($right); +} + sub set_headings { $lxdebug->enter_sub(); + check_oe_access(); + my ($action) = @_; if ($form->{type} eq 'purchase_order') { @@ -99,10 +118,12 @@ sub set_headings { sub add { $lxdebug->enter_sub(); + check_oe_access(); + set_headings("add"); $form->{callback} = - "$form->{script}?action=add&type=$form->{type}&vc=$form->{vc}&login=$form->{login}&password=$form->{password}" + "$form->{script}?action=add&type=$form->{type}&vc=$form->{vc}" unless $form->{callback}; &order_links; @@ -114,6 +135,9 @@ sub add { sub edit { $lxdebug->enter_sub(); + + check_oe_access(); + # show history button $form->{javascript} = qq||; #/show hhistory button @@ -149,11 +173,20 @@ sub edit { set_headings("edit"); &order_links; + + $form->{rowcount} = 0; + foreach $ref (@{ $form->{form_details} }) { + $form->{rowcount}++; + map { $form->{"${_}_$form->{rowcount}"} = $ref->{$_} } keys %{$ref}; + } + &prepare_order; + if ($form->{print_and_save}) { $form->{language_id} = $language_id; $form->{printer_id} = $printer_id; } + &display_form; $lxdebug->leave_sub(); @@ -161,6 +194,9 @@ sub edit { sub order_links { $lxdebug->enter_sub(); + + check_oe_access(); + # get customer/vendor $form->all_vc(\%myconfig, $form->{vc}, ($form->{vc} eq 'customer') ? "AR" : "AP"); @@ -172,126 +208,55 @@ sub order_links { OE->retrieve(\%myconfig, \%$form); - if ($form->{payment_id}) { - $payment_id = $form->{payment_id}; - } - if ($form->{language_id}) { - $language_id = $form->{language_id}; - } - if ($form->{taxzone_id}) { - $taxzone_id = $form->{taxzone_id}; - } - - $salesman_id = $form->{salesman_id} if ($editing); - - # if multiple rowcounts (== collective order) then check if the # there were more than one customer (in that case OE::retrieve removes # the content from the field) - if ( $form->{rowcount} - && $form->{type} eq 'sales_order' - && defined $form->{customer} - && $form->{customer} eq '') { - - # $main::lxdebug->message(0, "Detected Edit order with concurrent customers"); - $form->error( - $locale->text( - 'Collective Orders only work for orders from one customer!') - ); - } + $form->error($locale->text('Collective Orders only work for orders from one customer!')) + if $form->{rowcount} && $form->{type} eq 'sales_order' + && defined $form->{customer} && $form->{customer} eq ''; - $taxincluded = $form->{taxincluded}; - $form->{shipto} = 1 if $form->{id}; + $form->{"$form->{vc}_id"} ||= $form->{"all_$form->{vc}"}->[0]->{id} if $form->{"all_$form->{vc}"}; - if ($form->{"all_$form->{vc}"}) { - unless ($form->{"$form->{vc}_id"}) { - $form->{"$form->{vc}_id"} = $form->{"all_$form->{vc}"}->[0]->{id}; - } - } - - $cp_id = $form->{cp_id}; - $intnotes = $form->{intnotes}; + $form->backup_vars(qw(payment_id language_id taxzone_id salesman_id taxincluded cp_id intnotes)); + $form->{shipto} = 1 if $form->{id}; # get customer / vendor - if ($form->{type} =~ /(purchase_order|request_quotation)/) { - IR->get_vendor(\%myconfig, \%$form); + IR->get_vendor(\%myconfig, \%$form) if $form->{type} =~ /(purchase_order|request_quotation)/; + IS->get_customer(\%myconfig, \%$form) if $form->{type} =~ /sales_(order|quotation)/; - #quote all_vendor Bug 133 - foreach $ref (@{ $form->{all_vendor} }) { - $ref->{name} = $form->quote($ref->{name}); - } - - } - if ($form->{type} =~ /sales_(order|quotation)/) { - IS->get_customer(\%myconfig, \%$form); - - #quote all_vendor Bug 133 - foreach $ref (@{ $form->{all_customer} }) { - $ref->{name} = $form->quote($ref->{name}); - } - - } - $form->{cp_id} = $cp_id; + $form->restore_vars(qw(payment_id language_id taxzone_id intnotes cp_id)); + $form->restore_vars(qw(taxincluded)) if $form->{id}; + $form->restore_vars(qw(salesman_id)) if $editing; + $form->{forex} = $form->{exchangerate}; + $form->{employee} = "$form->{employee}--$form->{employee_id}"; - if ($payment_id) { - $form->{payment_id} = $payment_id; - } - if ($language_id) { - $form->{language_id} = $language_id; - } - if ($taxzone_id) { - $form->{taxzone_id} = $taxzone_id; - } - $form->{intnotes} = $intnotes if $intnotes; - ($form->{ $form->{vc} }) = split /--/, $form->{ $form->{vc} }; - $form->{"old$form->{vc}"} = qq|$form->{$form->{vc}}--$form->{"$form->{vc}_id"}|; - - # build the popup menus + # build vendor/customer drop down comatibility... don't ask if (@{ $form->{"all_$form->{vc}"} }) { - $form->{ $form->{vc} } = - qq|$form->{$form->{vc}}--$form->{"$form->{vc}_id"}|; - map { $form->{"select$form->{vc}"} .= -"\n" } - (@{ $form->{"all_$form->{vc}"} }); + $form->{"select$form->{vc}"} = 1; + $form->{$form->{vc}} = qq|$form->{$form->{vc}}--$form->{"$form->{vc}_id"}|; } - $form->{taxincluded} = $taxincluded if ($form->{id}); - - # departments - if (@{ $form->{all_departments} }) { - $form->{selectdepartment} = "\n" - } @{ $form->{all_departments} }; - } - - $form->{employee} = "$form->{employee}--$form->{employee_id}"; - - # forex - $form->{forex} = $form->{exchangerate}; - - $form->{salesman_id} = $salesman_id if ($editing); + $form->{"old$form->{vc}"} = $form->{$form->{vc}}; + $form->{"old$form->{vc}"} .= qq|--$form->{"$form->{vc}_id"}| unless ($form->{"old$form->{vc}"} =~ m/--\d+$/); $lxdebug->leave_sub(); } sub prepare_order { $lxdebug->enter_sub(); - $form->{formname} = $form->{type} unless $form->{formname}; - my $i = 0; - foreach $ref (@{ $form->{form_details} }) { - $form->{rowcount} = ++$i; - map { $form->{"${_}_$i"} = $ref->{$_} } keys %{$ref}; - } + check_oe_access(); + + $form->{formname} ||= $form->{type}; + + # format discounts if values come from db. either as single id, or as a collective order + my $format_discounts = $form->{id} || $form->{convert_from_oe_ids}; + for my $i (1 .. $form->{rowcount}) { - $form->{"reqdate_$i"} = $form->{"deliverydate_$i"} unless $form->{"reqdate_$i"}; - $form->{"discount_$i"} = $form->format_amount(\%myconfig, $form->{"discount_$i"} * ($form->{id} ? 100 : 1)); + $form->{"reqdate_$i"} ||= $form->{"deliverydate_$i"}; + $form->{"discount_$i"} = $form->format_amount(\%myconfig, $form->{"discount_$i"} * ($format_discounts ? 100 : 1)); $form->{"sellprice_$i"} = $form->format_amount(\%myconfig, $form->{"sellprice_$i"}); $form->{"qty_$i"} = $form->format_amount(\%myconfig, $form->{"qty_$i"}); - map { $form->{"${_}_$i"} =~ s/\"/"/g } qw(partnumber description unit); } $lxdebug->leave_sub(); @@ -301,34 +266,18 @@ sub form_header { $lxdebug->enter_sub(); my @custom_hiddens; + check_oe_access(); + # Container for template variables. Unfortunately this has to be visible in form_footer too, so not my. our %TMPL_VAR = (); - $form->{employee_id} = $form->{old_employee_id} if $form->{old_employee_id}; - $form->{salesman_id} = $form->{old_salesman_id} if $form->{old_salesman_id}; - $form->{defaultcurrency} = $form->get_default_currency(\%myconfig); $form->{employee_id} = $form->{old_employee_id} if $form->{old_employee_id}; $form->{salesman_id} = $form->{old_salesman_id} if $form->{old_salesman_id}; - map { $form->{$_} = H($form->{$_}) } - qw(shippingpoint shipvia notes intnotes shiptoname - shiptostreet shiptozipcode shiptocity shiptocountry shiptocontact - shiptophone shiptofax shiptodepartment_1 shiptodepartment_2); - # use JavaScript Calendar or not $form->{jsscript} = 1; - $TMPL_VAR{button1} = qq| - - text('button') . qq|> - |; - $TMPL_VAR{button2} = qq| - - text('button') . qq|> - |; - #write Trigger - $TMPL_VAR{jsscript} = Form->write_trigger(\%myconfig, "2", "transdate", "BL", "trigger1", "reqdate", "BL", "trigger2"); # openclosed checkboxes my @tmp; @@ -338,18 +287,7 @@ sub form_header { $form->{"closed"} ? "checked" : "", $locale->text('Closed') if $form->{id}; $TMPL_VAR{openclosed} = sprintf qq|%s\n|, 2 * scalar @tmp, join "\n", @tmp if @tmp; - # set option selected - foreach $item ($form->{vc}, 'currency', 'department', ($form->{vc} eq "customer" ? 'customer' : 'vendor')) { - $form->{"select$item"} =~ s/ selected//; - $form->{"select$item"} =~ s/option>\Q$form->{$item}\E/option selected>$form->{$item}/; - } - - #quote select[customer|vendor] Bug 133 - $form->{"select$form->{vc}"} = $form->quote($form->{"select$form->{vc}"}); - - #substitute \n and \r to \s (bug 543) - $form->{"select$form->{vc}"} =~ s/[\n\r]/ /g; - + # project ids my @old_project_ids = ($form->{"globalproject_id"}, grep { $_ } map { $form->{"project_id_$_"} } 1..$form->{"rowcount"}); my $vc = $form->{vc} eq "customer" ? "customers" : "vendors"; @@ -363,14 +301,16 @@ sub form_header { "taxzones" => "ALL_TAXZONES", "payments" => "ALL_PAYMENTS", "currencies" => "ALL_CURRENCIES", + "departments" => "ALL_DEPARTMENTS", $vc => { key => "ALL_" . uc($vc), limit => $myconfig{vclimit} + 1 }, "price_factors" => "ALL_PRICE_FACTORS"); # label subs $TMPL_VAR{sales_employee_labels} = sub { $_[0]->{name} || $_[0]->{login} }; - $TMPL_VAR{shipto_labels} = sub { join "; ", grep { $_ } map { $_[0]->{"shipto${_}" } } qw(name department_1 street city) }; - $TMPL_VAR{contact_labels} = sub { $_[0]->{"cp_name"} . ($_[0]->{cp_abteilung} ? " ($_[0]->{cp_abteilung})" : "") }; + $TMPL_VAR{shipto_labels} = sub { join "; ", grep { $_ } map { $_[0]->{"shipto${_}" } } qw(name department_1 street city) }; + $TMPL_VAR{contact_labels} = sub { join(', ', $_[0]->{"cp_name"}, $_[0]->{"cp_givenname"}) . ($_[0]->{cp_abteilung} ? " ($_[0]->{cp_abteilung})" : "") }; + $TMPL_VAR{department_labels} = sub { "$_[0]->{description}--$_[0]->{id}" }; # vendor/customer $TMPL_VAR{vc_keys} = sub { "$_[0]->{name}--$_[0]->{id}" }; @@ -384,7 +324,7 @@ sub form_header { @values = map { $_ } @{ $form->{ALL_CURRENCIES} }; %labels = map { $_ => $_ } @{ $form->{ALL_CURRENCIES} }; $form->{currency} = $form->{defaultcurrency} unless $form->{currency}; - $TMPL_VAR{show_exchangerate} = $form->{currency} ne $form->{defaultcurrency} && $form->{exchangerate}; + $TMPL_VAR{show_exchangerate} = $form->{currency} ne $form->{defaultcurrency}; $TMPL_VAR{currencies} = NTI($cgi->popup_menu('-name' => 'currency', '-default' => $form->{"currency"}, '-values' => \@values, '-labels' => \%labels)) if scalar @values; push @custom_hiddens, "forex"; @@ -393,15 +333,27 @@ sub form_header { # credit remaining $creditwarning = (($form->{creditlimit} != 0) && ($form->{creditremaining} < 0) && !$form->{update}) ? 1 : 0; $TMPL_VAR{is_credit_remaining_negativ} = ($form->{creditremaining} =~ /-/) ? "0" : "1"; - + # business $TMPL_VAR{business_label} = ($form->{vc} eq "customer" ? $locale->text('Customer type') : $locale->text('Vendor type')); - push @custom_hiddens, "ordnumber" if $form->{type} =~ /_quotation$/; push @custom_hiddens, "customer_klass" if $form->{vc} eq 'customer'; $credittext = $locale->text('Credit Limit exceeded!!!'); + my $follow_up_vc = $form->{ $form->{vc} eq 'customer' ? 'customer' : 'vendor' }; + $follow_up_vc =~ s/--\d*\s*$//; + $TMPL_VAR{follow_up_trans_info} = ($form->{type} =~ /_quotation$/ ? $form->{quonumber} : $form->{ordnumber}) . " ($follow_up_vc)"; + + if ($form->{id}) { + my $follow_ups = FU->follow_ups('trans_id' => $form->{id}); + + if (scalar @{ $follow_ups }) { + $TMPL_VAR{num_follow_ups} = scalar @{ $follow_ups }; + $TMPL_VAR{num_due_follow_ups} = sum map { $_->{due} * 1 } @{ $follow_ups }; + } + } + $onload = ($form->{resubmit} && ($form->{format} eq "html")) ? "window.open('about:blank','Beleg'); document.oe.target = 'Beleg';document.oe.submit()" : ($form->{resubmit}) ? "document.oe.submit()" : ($creditwarning) ? "alert('$credittext')" @@ -410,7 +362,7 @@ sub form_header { $onload .= qq|;setupDateFormat('|. $myconfig{dateformat} .qq|', '|. $locale->text("Falsches Datumsformat!") .qq|')|; $onload .= qq|;setupPoints('|. $myconfig{numberformat} .qq|', '|. $locale->text("wrongformat") .qq|')|; $TMPL_VAR{onload} = $onload; - + $form->{javascript} .= qq||; $form->{javascript} .= qq||; $form->{javascript} .= qq||; @@ -423,7 +375,7 @@ sub form_header { max_dunning_level dunning_amount shiptoname shiptostreet shiptozipcode shiptocity shiptocountry shiptocontact shiptophone shiptofax shiptodepartment_1 shiptodepartment_2 shiptoemail - message email subject cc bcc taxpart taxservice taxaccounts), + message email subject cc bcc taxpart taxservice taxaccounts cursor_fokus), @custom_hiddens, map { $_.'_rate', $_.'_description' } split / /, $form->{taxaccounts} ]; # deleted: discount @@ -437,7 +389,7 @@ sub form_header { is_pur_ord => scalar ($form->{type} =~ /purchase_order$/), ); - print $form->parse_html_template("oe/orders_header", { %TMPL_VAR }); + print $form->parse_html_template("oe/form_header", { %TMPL_VAR }); $lxdebug->leave_sub(); } @@ -445,14 +397,16 @@ sub form_header { sub form_footer { $lxdebug->enter_sub(); + check_oe_access(); + $form->{invtotal} = $form->{invsubtotal}; $rows = max 2, $form->numtextrows($form->{notes}, 25, 8); $introws = max 2, $form->numtextrows($form->{intnotes}, 35, 8); $rows = max $rows, $introws; - $TMPL_VAR{notes} = qq||; - $TMPL_VAR{intnotes} = qq||; + $TMPL_VAR{notes} = qq||; + $TMPL_VAR{intnotes} = qq||; if (!$form->{taxincluded}) { @@ -469,7 +423,7 @@ sub form_footer { } } - $form->{invsubtotal} = $form->format_amount(\%myconfig, $form->{invsubtotal}, 2, 0); +# $form->{invsubtotal} = $form->format_amount(\%myconfig, $form->{invsubtotal}, 2, 0); # template does this } else { foreach $item (split / /, $form->{taxaccounts}) { @@ -494,7 +448,7 @@ sub form_footer { $form->{oldinvtotal} = $form->{invtotal}; - print $form->parse_html_template("oe/orders_footer", { + print $form->parse_html_template("oe/form_footer", { %TMPL_VAR, webdav => $webdav, print_options => print_options(inline => 1), @@ -507,24 +461,28 @@ sub form_footer { sub update { $lxdebug->enter_sub(); - + my ($recursive_call) = shift; + check_oe_access(); + +# $main::lxdebug->message(0, Dumper($form)); + set_headings($form->{"id"} ? "edit" : "add"); - map { $form->{$_} = $form->parse_amount(\%myconfig, $form->{$_}) } qw(exchangerate creditlimit creditremaining) unless $recursive_call; + map { $form->{$_} = $form->parse_amount(\%myconfig, $form->{$_}) } qw(exchangerate) unless $recursive_call; $form->{update} = 1; - + $payment_id = $form->{payment_id} if $form->{payment_id}; - + &check_name($form->{vc}); - + $form->{payment_id} = $payment_id if $form->{payment_id} eq ""; - + $buysell = 'buy'; $buysell = 'sell' if ($form->{vc} eq 'vendor'); - $form->{exchangerate} = $exchangerate if - $form->{forex} = $exchangerate = $form->check_exchangerate(\%myconfig, $form->{currency}, $form->{transdate}, $buysell); + $form->{forex} = $form->check_exchangerate(\%myconfig, $form->{currency}, $form->{transdate}, $buysell); + $form->{exchangerate} = $form->{forex} if $form->{forex}; $exchangerate = $form->{exchangerate} || 1; @@ -536,8 +494,8 @@ sub update { && ($form->{"partsgroup_$i"} eq "")) { $form->{creditremaining} += ($form->{oldinvtotal} - $form->{oldtotalpaid}); - &check_form; + &check_form; } else { if ($form->{type} =~ /^sales/) { @@ -548,7 +506,11 @@ sub update { my $rows = scalar @{ $form->{item_list} }; - $form->{"discount_$i"} = $form->format_amount(\%myconfig, $form->{discount} * 100); + # hier ist das problem fuer bug 817 $form->{discount} wird nicht durchgeschliffen + # ferner fallunterscheidung fuer verkauf oder einkauf s.a. bug 736 jb 04.05.2009 + # select discount as vendor_discount from vendor || + # select discount as customer_discount from customer + $form->{"discount_$i"} = $form->format_amount(\%myconfig, $form->{"$form->{vc}_discount"} * 100); if ($rows) { $form->{"qty_$i"} = 1 unless ($form->{"qty_$i"}); @@ -623,6 +585,8 @@ sub update { sub search { $lxdebug->enter_sub(); + check_oe_access(); + if ($form->{type} eq 'purchase_order') { $form->{title} = $locale->text('Purchase Orders'); $form->{vc} = 'vendor'; @@ -703,11 +667,22 @@ sub search { text('button') . qq|> |; - + $button3 = qq| + + text('button') . qq|> + |; + $button4 = qq| + + text('button') . qq|> + |; + #write Trigger $jsscript = - Form->write_trigger(\%myconfig, "2", "transdatefrom", "BR", "trigger3", - "transdateto", "BL", "trigger4"); + Form->write_trigger(\%myconfig, "4", "transdatefrom", "BR", "trigger3", + "transdateto", "BL", "trigger4", + "reqdatefrom", "BR", "trigger5", "reqdateto", "BL", "trigger6"); my $vc = $form->{vc} eq "customer" ? "customers" : "vendors"; @@ -735,7 +710,7 @@ sub search { push(@values, $item->{"id"}); $labels{$item->{"id"}} = $item->{"name"} ne "" ? $item->{"name"} : $item->{"login"}; } - + #salesmen my %labels_salesmen = (); my @values_salesmen = (''); @@ -769,7 +744,7 @@ sub search { my $vc_label = $form->{vc} eq "customer" ? $locale->text('Customer') : $locale->text('Vendor'); $vc = $myconfig{vclimit} <= scalar(@values) - ? qq|{vc}"} =~ /^(.*)\-\-.*$/)) . qq|" name="$form->{vc}">| + ? qq|{vc}"} =~ /^(.*)\-\-.*$/)) . qq|" name="$form->{vc}">| : NTI($cgi->popup_menu('-name' => "$form->{vc}", '-default' => $form->{"old$form->{vc}"}, '-onChange' => 'document.getElementById(\'update_button\').click();', @@ -809,10 +784,15 @@ $employee_block $projectnumber - | . $locale->text('From') . qq| $button1 + | . $locale->text('Order Date') . " " . $locale->text('From') . qq| $button1 | . $locale->text('Bis') . qq| $button2 + + | . $locale->text('Delivery Date') . " " . $locale->text('From') . qq| $button3 + | . $locale->text('Bis') . qq| $button4 + + | . $locale->text('Include in Report') . qq| @@ -825,13 +805,15 @@ $employee_block | . $locale->text('ID') . qq| $ordlabel + + | . $locale->text('Date') . qq| | . $locale->text('Required by') . qq| $vc_label $employee - + | . $locale->text('Ship via') . qq| @@ -864,8 +846,6 @@ $jsscript
-{login}> -{password}> {vc}> {type}> @@ -901,11 +881,13 @@ sub create_subtotal_row { sub orders { $lxdebug->enter_sub(); + check_oe_access(); + $ordnumber = ($form->{type} =~ /_order$/) ? "ordnumber" : "quonumber"; ($form->{ $form->{vc} }, $form->{"${form->{vc}}_id"}) = split(/--/, $form->{ $form->{vc} }); - $form->{sort} ||= 'transdate'; + report_generator_set_default_sort('transdate', 1); OE->transactions(\%myconfig, \%$form); @@ -956,7 +938,8 @@ sub orders { my @hidden_variables = map { "l_${_}" } @columns; push @hidden_variables, "l_subtotal", $form->{vc}, qw(l_closed l_notdelivered open closed delivered notdelivered ordnumber quonumber - transaction_description transdatefrom transdateto type vc employee_id salesman_id); + transaction_description transdatefrom transdateto type vc employee_id salesman_id + reqdatefrom reqdateto); my $href = build_std_url('action=orders', grep { $form->{$_} } @hidden_variables); @@ -983,8 +966,9 @@ sub orders { 'marge_percent' => { 'text' => $locale->text('Ertrag prozentual'), } ); - foreach my $name (qw(id transdate reqdate quonumber ordnumber name employee salesman shipvia)) { - $column_defs{$name}->{link} = $href . "&sort=$name"; + foreach my $name (qw(id transdate reqdate quonumber ordnumber name employee salesman shipvia transaction_description)) { + my $sortdir = $form->{sort} eq $name ? 1 - $form->{sortdir} : $form->{sortdir}; + $column_defs{$name}->{link} = $href . "&sort=$name&sortdir=$sortdir"; } my %column_alignment = map { $_ => 'right' } qw(netamount tax amount curr); @@ -995,49 +979,32 @@ sub orders { $report->set_columns(%column_defs); $report->set_column_order(@columns); - - $report->set_export_options('orders', @hidden_variables); - - $report->set_sort_indicator($form->{sort}, 1); + $report->set_export_options('orders', @hidden_variables, qw(sort sortdir)); + $report->set_sort_indicator($form->{sort}, $form->{sortdir}); my @options; - if ($form->{customer}) { - push @options, $locale->text('Customer') . " : $form->{customer}"; - } - if ($form->{vendor}) { - push @options, $locale->text('Vendor') . " : $form->{vendor}"; - } - if ($form->{department}) { - ($department) = split /--/, $form->{department}; - push @options, $locale->text('Department') . " : $department"; - } - if ($form->{ordnumber}) { - push @options, $locale->text('Order Number') . " : $form->{ordnumber}"; - } - if ($form->{notes}) { - push @options, $locale->text('Notes') . " : $form->{notes}"; - } - if ($form->{transaction_description}) { - push @options, $locale->text('Transaction description') . " : $form->{transaction_description}"; - } - if ($form->{transdatefrom}) { - push @options, $locale->text('From') . " " . $locale->date(\%myconfig, $form->{transdatefrom}, 1); - } - if ($form->{transdateto}) { - push @options, $locale->text('Bis') . " " . $locale->date(\%myconfig, $form->{transdateto}, 1); - } - if ($form->{open}) { - push @options, $locale->text('Open'); - } - if ($form->{closed}) { - push @options, $locale->text('Closed'); - } - if ($form->{delivered}) { - push @options, $locale->text('Delivered'); - } - if ($form->{notdelivered}) { - push @options, $locale->text('Not delivered'); - } + my ($department) = split m/--/, $form->{department}; + + push @options, $locale->text('Customer') . " : $form->{customer}" if $form->{customer}; + push @options, $locale->text('Vendor') . " : $form->{vendor}" if $form->{vendor}; + push @options, $locale->text('Department') . " : $department" if $form->{department}; + push @options, $locale->text('Order Number') . " : $form->{ordnumber}" if $form->{ordnumber}; + push @options, $locale->text('Notes') . " : $form->{notes}" if $form->{notes}; + push @options, $locale->text('Transaction description') . " : $form->{transaction_description}" if $form->{transaction_description}; + if ( $form->{transdatefrom} or $form->{transdateto} ) { + push @options, $locale->text('Order Date'); + push @options, $locale->text('From') . " " . $locale->date(\%myconfig, $form->{transdatefrom}, 1) if $form->{transdatefrom}; + push @options, $locale->text('Bis') . " " . $locale->date(\%myconfig, $form->{transdateto}, 1) if $form->{transdateto}; + }; + if ( $form->{reqdatefrom} or $form->{reqdateto} ) { + push @options, $locale->text('Delivery Date'); + push @options, $locale->text('From') . " " . $locale->date(\%myconfig, $form->{reqdatefrom}, 1) if $form->{reqdatefrom}; + push @options, $locale->text('Bis') . " " . $locale->date(\%myconfig, $form->{reqdateto}, 1) if $form->{reqdateto}; + }; + push @options, $locale->text('Open') if $form->{open}; + push @options, $locale->text('Closed') if $form->{closed}; + push @options, $locale->text('Delivered') if $form->{delivered}; + push @options, $locale->text('Not delivered') if $form->{notdelivered}; $report->set_options('top_info_text' => join("\n", @options), 'raw_top_info_text' => $form->parse_html_template('oe/orders_top'), @@ -1121,6 +1088,8 @@ sub orders { sub check_delivered_flag { $lxdebug->enter_sub(); + check_oe_access(); + if (($form->{type} ne 'sales_order') && ($form->{type} ne 'purchase_order')) { return $lxdebug->leave_sub(); } @@ -1147,6 +1116,8 @@ sub check_delivered_flag { sub save_and_close { $lxdebug->enter_sub(); + check_oe_access(); + $form->{defaultcurrency} = $form->get_default_currency(\%myconfig); if ($form->{type} =~ /_order$/) { @@ -1169,14 +1140,14 @@ sub save_and_close { if ($form->{currency} ne $form->{defaultcurrency}); &validate_items; - - if($form->{payment_id}) { + + if($form->{payment_id}) { $payment_id = $form->{payment_id}; } - + # if the name changed get new values if (&check_name($form->{vc})) { - if($form->{payment_id} eq "") { + if($form->{payment_id} eq "") { $form->{payment_id} = $payment_id; } &update; @@ -1246,6 +1217,8 @@ sub save_and_close { sub save { $lxdebug->enter_sub(); + check_oe_access(); + $form->{defaultcurrency} = $form->get_default_currency(\%myconfig); @@ -1269,14 +1242,14 @@ sub save { if ($form->{currency} ne $form->{defaultcurrency}); &validate_items; - - if($form->{payment_id}) { + + if($form->{payment_id}) { $payment_id = $form->{payment_id}; } - + # if the name changed get new values if (&check_name($form->{vc})) { - if($form->{payment_id} eq "") { + if($form->{payment_id} eq "") { $form->{payment_id} = $payment_id; } &update; @@ -1333,7 +1306,7 @@ sub save { $form->{addition} = "SAVED"; $form->save_history($form->dbconnect(\%myconfig)); } - # /saving the history + # /saving the history $form->{simple_save} = 1; if(!$form->{print_and_save}) { @@ -1347,6 +1320,8 @@ sub save { sub delete { $lxdebug->enter_sub(); + check_oe_access(); + $form->header; if ($form->{type} =~ /_order$/) { @@ -1367,6 +1342,7 @@ sub delete { map { delete $form->{$_} } qw(action header); foreach $key (keys %$form) { + next if (($key eq 'login') || ($key eq 'password') || ('' ne ref $form->{$key})); $form->{$key} =~ s/\"/"/g; print qq|\n|; } @@ -1393,6 +1369,8 @@ sub delete { sub delete_order_quotation { $lxdebug->enter_sub(); + check_oe_access(); + if ($form->{type} =~ /_order$/) { $msg = $locale->text('Order deleted!'); $err = $locale->text('Cannot delete order!'); @@ -1407,7 +1385,7 @@ sub delete_order_quotation { $form->{addition} = "DELETED"; $form->save_history($form->dbconnect(\%myconfig)); } - # /saving the history + # /saving the history $form->info($msg); exit(); } @@ -1419,6 +1397,9 @@ sub delete_order_quotation { sub invoice { $lxdebug->enter_sub(); + check_oe_access(); + $auth->assert($form->{type} eq 'purchase_order' || $form->{type} eq 'request_quotation' ? 'vendor_invoice_edit' : 'invoice_edit'); + $form->{old_employee_id} = $form->{employee_id}; $form->{old_salesman_id} = $form->{salesman_id}; @@ -1440,9 +1421,9 @@ sub invoice { $form->{ordnumber} = ""; $form->{quodate} = $form->{transdate}; } - + $payment_id = $form->{payment_id} if $form->{payment_id}; - + # if the name changed get new values if (&check_name($form->{vc})) { $form->{payment_id} = $payment_id if $form->{payment_id} eq ""; @@ -1473,27 +1454,14 @@ sub invoice { } } - # close orders/quotations - $form->{closed} = 1; - - # save order if one ordnumber has been given - # if not it's most likely a collective order, which can't be saved back - # so they just have to be closed - if (($form->{ordnumber} ne '') || ($form->{quonumber} ne '')) { - OE->close_order(\%myconfig, \%$form) if ($form->{id}); - } else { - OE->close_orders(\%myconfig, \%$form); - } + $form->{convert_from_oe_ids} = $form->{id}; + $form->{transdate} = $form->{invdate} = $form->current_date(\%myconfig); + $form->{duedate} = $form->current_date(\%myconfig, $form->{invdate}, $form->{terms} * 1); + $form->{shipto} = 1; + $form->{defaultcurrency} = $form->get_default_currency(\%myconfig); - $form->{transdate} = $form->{invdate} = $form->current_date(\%myconfig); - $form->{duedate} = $form->current_date(\%myconfig, $form->{invdate}, $form->{terms} * 1); - - $form->{id} = ''; - $form->{closed} = 0; + delete @{$form}{qw(id closed)}; $form->{rowcount}--; - $form->{shipto} = 1; - - $form->{defaultcurrency} = $form->get_default_currency(\%myconfig); if ($form->{type} =~ /_order$/) { $form->{exchangerate} = $exchangerate; @@ -1508,7 +1476,7 @@ sub invoice { $buysell = 'sell'; } - if ( $form->{type} eq 'sales_order' + if ( $form->{type} eq 'sales_order' || $form->{type} eq 'sales_quotation') { $form->{title} = $locale->text('Add Sales Invoice'); $form->{script} = 'is.pl'; @@ -1528,22 +1496,12 @@ sub invoice { map { $form->{"select$_"} = "" } ($form->{vc}, currency); - map { $form->{$_} = $form->parse_amount(\%myconfig, $form->{$_}) } - qw(creditlimit creditremaining); - $currency = $form->{currency}; &invoice_links; $form->{currency} = $currency; - $form->{exchangerate} = ""; - $form->{forex} = ""; - $form->{exchangerate} = $exchangerate - if ( - $form->{forex} = ( - $exchangerate = - $form->check_exchangerate( - \%myconfig, $form->{currency}, $form->{invdate}, $buysell - ))); + $form->{forex} = $form->check_exchangerate( \%myconfig, $form->{currency}, $form->{invdate}, $buysell); + $form->{exchangerate} = $form->{forex} || ''; $form->{creditremaining} -= ($form->{oldinvtotal} - $form->{ordtotal}); @@ -1583,6 +1541,9 @@ sub invoice { sub backorder_exchangerate { $lxdebug->enter_sub(); + + check_oe_access(); + my ($orddate, $buysell) = @_; $form->header; @@ -1597,6 +1558,7 @@ sub backorder_exchangerate { map { delete $form->{$_} } qw(action header exchangerate); foreach $key (keys %$form) { + next if (($key eq 'login') || ($key eq 'password') || ('' ne ref $form->{$key})); $form->{$key} =~ s/\"/"/g; print qq|\n|; } @@ -1605,9 +1567,6 @@ sub backorder_exchangerate { print qq| -{login}> -{password}> - @@ -1733,6 +1692,8 @@ sub create_backorder { sub save_as_new { $lxdebug->enter_sub(); + check_oe_access(); + $form->{saveasnew} = 1; $form->{closed} = 0; map { delete $form->{$_} } qw(printed emailed queued); @@ -1755,6 +1716,8 @@ sub save_as_new { sub check_for_direct_delivery_yes { $lxdebug->enter_sub(); + check_oe_access(); + $form->{direct_delivery_checked} = 1; delete @{$form}{grep /^shipto/, keys %{ $form }}; map { s/^CFDD_//; $form->{$_} = $form->{"CFDD_${_}"} } grep /^CFDD_/, keys %{ $form }; @@ -1766,6 +1729,8 @@ sub check_for_direct_delivery_yes { sub check_for_direct_delivery_no { $lxdebug->enter_sub(); + check_oe_access(); + $form->{direct_delivery_checked} = 1; delete @{$form}{grep /^shipto/, keys %{ $form }}; purchase_order(); @@ -1776,6 +1741,8 @@ sub check_for_direct_delivery_no { sub check_for_direct_delivery { $lxdebug->enter_sub(); + check_oe_access(); + if ($form->{direct_delivery_checked} || (!$form->{shiptoname} && !$form->{shiptostreet} && !$form->{shipto_id})) { $lxdebug->leave_sub(); @@ -1790,7 +1757,7 @@ sub check_for_direct_delivery { } delete $form->{action}; - $form->{VARIABLES} = [ map { { "key" => $_, "value" => $form->{$_} } } grep { ref $_ eq "" } keys %{ $form } ]; + $form->{VARIABLES} = [ map { { "key" => $_, "value" => $form->{$_} } } grep { ($_ ne 'login') && ($_ ne 'password') && (ref $_ eq "") } keys %{ $form } ]; $form->header(); print $form->parse_html_template("oe/check_for_direct_delivery"); @@ -1803,15 +1770,13 @@ sub check_for_direct_delivery { sub purchase_order { $lxdebug->enter_sub(); + check_oe_access(); + $auth->assert('purchase_order_edit'); + if ($form->{type} eq 'sales_order') { check_for_direct_delivery(); } - if ( $form->{type} eq 'sales_quotation' - || $form->{type} eq 'request_quotation') { - OE->close_order(\%myconfig, \%$form); - } - if ($form->{type} =~ /^sales_/) { delete($form->{ordnumber}); } @@ -1830,10 +1795,8 @@ sub purchase_order { sub sales_order { $lxdebug->enter_sub(); - if ( $form->{type} eq 'sales_quotation' - || $form->{type} eq 'request_quotation') { - OE->close_order(\%myconfig, $form); - } + check_oe_access(); + $auth->assert('sales_order_edit'); if ($form->{type} eq "purchase_order") { delete($form->{ordnumber}); @@ -1841,9 +1804,9 @@ sub sales_order { $form->{cp_id} *= 1; - $form->{title} = $locale->text('Add Sales Order'); - $form->{vc} = "customer"; - $form->{type} = "sales_order"; + $form->{title} = $locale->text('Add Sales Order'); + $form->{vc} = "customer"; + $form->{type} = "sales_order"; &poso; @@ -1853,46 +1816,95 @@ sub sales_order { sub poso { $lxdebug->enter_sub(); + check_oe_access(); + $auth->assert('purchase_order_edit | sales_order_edit'); + $form->{transdate} = $form->current_date(\%myconfig); delete $form->{duedate}; - $form->{closed} = 0; + $form->{convert_from_oe_ids} = $form->{id}; + $form->{closed} = 0; - $form->{old_employee_id} = $form->{employee_id}; - $form->{old_salesman_id} = $form->{salesman_id}; + $form->{old_employee_id} = $form->{employee_id}; + $form->{old_salesman_id} = $form->{salesman_id}; # reset - map { delete $form->{$_} } - qw(id subject message cc bcc printed emailed queued customer vendor creditlimit creditremaining discount tradediscount oldinvtotal); + map { delete $form->{$_} } qw(id subject message cc bcc printed emailed queued customer vendor creditlimit creditremaining discount tradediscount oldinvtotal delivered + ordnumber); for $i (1 .. $form->{rowcount}) { - map({ $form->{"${_}_${i}"} = $form->parse_amount(\%myconfig, - $form->{"${_}_${i}"}) - if ($form->{"${_}_${i}"}) } - qw(ship qty sellprice listprice basefactor)); + map { $form->{"${_}_${i}"} = $form->parse_amount(\%myconfig, $form->{"${_}_${i}"}) if ($form->{"${_}_${i}"}) } qw(ship qty sellprice listprice basefactor); } + my %saved_vars = map { $_ => $form->{$_} } grep { $form->{$_} } qw(currency); + &order_links; + map { $form->{$_} = $saved_vars{$_} } keys %saved_vars; + &prepare_order; # format amounts for $i (1 .. $form->{rowcount} - 1) { - map { $form->{"${_}_$i"} =~ s/\"/"/g } - qw(partnumber description unit); + map { $form->{"${_}_$i"} =~ s/\"/"/g } qw(partnumber description unit); } - map { $form->{$_} = $form->format_amount(\%myconfig, $form->{$_}, 0, "0") } - qw(creditlimit creditremaining); - &update; $lxdebug->leave_sub(); } +sub delivery_order { + $lxdebug->enter_sub(); + + if ($form->{type} =~ /^sales/) { + $auth->assert('sales_delivery_order_edit'); + + $form->{vc} = 'customer'; + $form->{type} = 'sales_delivery_order'; + + } else { + $auth->assert('purchase_delivery_order_edit'); + + $form->{vc} = 'vendor'; + $form->{type} = 'purchase_delivery_order'; + } + + require "bin/mozilla/do.pl"; + + $form->{cp_id} *= 1; + $form->{convert_from_oe_ids} = $form->{id}; + $form->{transdate} = $form->current_date(\%myconfig); + delete $form->{duedate}; + + $form->{old_employee_id} = $form->{employee_id}; + $form->{old_salesman_id} = $form->{salesman_id}; + + # reset + delete @{$form}{qw(id subject message cc bcc printed emailed queued creditlimit creditremaining discount tradediscount oldinvtotal closed delivered)}; + + for $i (1 .. $form->{rowcount}) { + map { $form->{"${_}_${i}"} = $form->parse_amount(\%myconfig, $form->{"${_}_${i}"}) if ($form->{"${_}_${i}"}) } qw(ship qty sellprice listprice basefactor); + } + + my %old_values = map { $_ => $form->{$_} } qw(customer_id oldcustomer customer vendor_id oldvendor vendor); + + order_links(); + + prepare_order(); + + map { $form->{$_} = $old_values{$_} if ($old_values{$_}) } keys %old_values; + + update(); + + $lxdebug->leave_sub(); +} + sub e_mail { $lxdebug->enter_sub(); + check_oe_access(); + $form->{print_and_save} = 1; $print_post = 1; @@ -1901,10 +1913,7 @@ sub e_mail { save(); - my %saved_vars; - map({ $saved_vars{$_} = $form->{$_}; } qw(id ordnumber quonumber)); - restore_form($saved_form); - map({ $form->{$_} = $saved_vars{$_}; } qw(id ordnumber quonumber)); + restore_form($saved_form, 0, qw(id ordnumber quonumber)); edit_e_mail(); @@ -1925,6 +1934,10 @@ sub no { sub display_form { $lxdebug->enter_sub(); + check_oe_access(); + + retrieve_partunits() if ($form->{type} =~ /_delivery_order$/); + $form->{"taxaccounts"} =~ s/\s*$//; $form->{"taxaccounts"} =~ s/^\s*//; foreach my $accno (split(/\s*/, $form->{"taxaccounts"})) { @@ -1953,3 +1966,21 @@ sub display_form { $lxdebug->leave_sub(); } +sub report_for_todo_list { + $lxdebug->enter_sub(); + + my $quotations = OE->transactions_for_todo_list(); + my $content; + + if (@{ $quotations }) { + my $edit_url = build_std_url('script=oe.pl', 'action=edit'); + + $content = $form->parse_html_template('oe/report_for_todo_list', { 'QUOTATIONS' => $quotations, + 'edit_url' => $edit_url }); + } + + $lxdebug->leave_sub(); + + return $content; +} +