X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=users.php;h=fe0e92da900c5075ad45f05bb1ad301857cbcdf3;hb=109089e858e28200e714a790883c236230b3922f;hp=8787844b45c970a92b572c73efa983bb90549010;hpb=2178ec6d4efd6cad07b8f137415ecec207efcdad;p=timetracker.git diff --git a/users.php b/users.php index 8787844b..fe0e92da 100644 --- a/users.php +++ b/users.php @@ -28,15 +28,43 @@ require_once('initialize.php'); import('form.Form'); -import('ttTeamHelper'); import('ttTimeHelper'); import('ttRoleHelper'); -// Access check. +// Access checks. if (!(ttAccessAllowed('view_users') || ttAccessAllowed('manage_users'))) { header('Location: access_denied.php'); exit(); } +if ($request->isPost() && !$user->isGroupValid($request->getParameter('group'))) { + header('Location: access_denied.php'); // Wrong group id in post. + exit(); +} +// Note: we don't use "manage_subgroups" in access check, because when user cannot +// "manage_users" or "view_users" they do not belong here. +// End of access checks. + +if ($request->isPost()) { + $group_id = $request->getParameter('group'); + $user->setOnBehalfGroup($group_id); +} else { + $group_id = $user->getGroup(); +} + +$form = new Form('usersForm'); +if ($user->can('manage_subgroups')) { + $groups = $user->getGroupsForDropdown(); + if (count($groups) > 1) { + $form->addInput(array('type'=>'combobox', + 'onchange'=>'this.form.submit();', + 'name'=>'group', + 'style'=>'width: 250px;', + 'value'=>$group_id, + 'data'=>$groups, + 'datakeys'=>array('id','name'))); + $smarty->assign('group_dropdown', 1); + } +} // Prepare a list of active users. if ($user->can('view_users')) @@ -51,7 +79,7 @@ if($user->can('manage_users')) { $inactive_users = $user->getUsers($options); } -// Check if the team is set to show indicators for uncompleted time entries. +// Check if the group is set to show indicators for uncompleted time entries. if ($user->uncompleted_indicators) { // Check each active user if they have an uncompleted time entry. foreach ($active_users as $key => $user) { @@ -59,6 +87,7 @@ if ($user->uncompleted_indicators) { } } +$smarty->assign('forms', array($form->getName()=>$form->toArray())); $smarty->assign('active_users', $active_users); $smarty->assign('inactive_users', $inactive_users); $smarty->assign('title', $i18n->get('title.users'));