X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=projects.php;h=b8faa14d6b695565b5db7749fd139952e208a26d;hb=f58ab716cb0cc4b8be8e48723b345bfab29697a6;hp=d5f3bc12e9aaf85551d683b101d3e87db095d4fc;hpb=b401022733a9645ed701522585b2d57db936f5cc;p=timetracker.git diff --git a/projects.php b/projects.php index d5f3bc12..b8faa14d 100644 --- a/projects.php +++ b/projects.php @@ -30,20 +30,57 @@ require_once('initialize.php'); import('form.Form'); import('ttTeamHelper'); -// Access check. -if (!ttAccessAllowed('data_entry') || (MODE_PROJECTS != $user->tracking_mode && MODE_PROJECTS_AND_TASKS != $user->tracking_mode)) { +// Access checks. +if (!(ttAccessAllowed('view_own_projects') || ttAccessAllowed('manage_projects'))) { header('Location: access_denied.php'); exit(); } +if (MODE_PROJECTS != $user->getTrackingMode() && MODE_PROJECTS_AND_TASKS != $user->getTrackingMode()) { + header('Location: feature_disabled.php'); + exit(); +} +if ($request->isPost() && !$user->isGroupValid($request->getParameter('group'))) { + header('Location: access_denied.php'); // Wrong group id in post. + exit(); +} +// End of access checks. + +if ($request->isPost()) { + $group_id = $request->getParameter('group'); + $user->setOnBehalfGroup($group_id); + // Projects feature may not be available in new group, check and redirect. + if (MODE_PROJECTS != $user->getTrackingMode() && MODE_PROJECTS_AND_TASKS != $user->getTrackingMode()) { + header('Location: feature_disabled.php'); + exit(); + } +} else { + $group_id = $user->getGroup(); +} + +$form = new Form('projectsForm'); +if ($user->can('manage_subgroups')) { + $groups = $user->getGroupsForDropdown(); + if (count($groups) > 1) { + $form->addInput(array('type'=>'combobox', + 'onchange'=>'this.form.submit();', + 'name'=>'group', + 'style'=>'width: 250px;', + 'value'=>$group_id, + 'data'=>$groups, + 'datakeys'=>array('id','name'))); + $smarty->assign('group_dropdown', 1); + } +} -if($user->canManageTeam()) { - $active_projects = ttTeamHelper::getActiveProjects($user->team_id); - $inactive_projects = ttTeamHelper::getInactiveProjects($user->team_id); +if($user->can('manage_projects')) { + $active_projects = ttTeamHelper::getActiveProjects($group_id); + $inactive_projects = ttTeamHelper::getInactiveProjects($group_id); } else $active_projects = $user->getAssignedProjects(); +$smarty->assign('forms', array($form->getName()=>$form->toArray())); $smarty->assign('active_projects', $active_projects); $smarty->assign('inactive_projects', $inactive_projects); -$smarty->assign('title', $i18n->getKey('title.projects')); +$smarty->assign('title', $i18n->get('title.projects')); $smarty->assign('content_page_name', 'projects.tpl'); $smarty->display('index.tpl');