782050c3ca
- Created user_role.php for viewing and editing user roles and their permissions. - Implemented inline editing for role details and permissions. - Added user_role_manage.php for creating and managing user roles. - Introduced user_roles.php for listing all user roles with pagination and filtering options. - Integrated API calls for fetching and updating role data and permissions. - Enhanced user interface with success messages and navigation controls.
124 lines
3.4 KiB
PHP
124 lines
3.4 KiB
PHP
<?php
|
|
defined($security_key) or exit;
|
|
|
|
//------------------------------------------
|
|
// Role Access Permissions
|
|
//------------------------------------------
|
|
//Connect to DB
|
|
$pdo = dbConnect($dbname);
|
|
|
|
//------------------------------------------
|
|
//NEW ARRAY
|
|
//------------------------------------------
|
|
$criterias = [];
|
|
$clause = '';
|
|
|
|
//------------------------------------------
|
|
//Check for $_GET variables and build up clause
|
|
//------------------------------------------
|
|
if(isset($get_content) && $get_content!=''){
|
|
//GET VARIABLES FROM URL
|
|
$requests = explode("&", $get_content);
|
|
//Check for keys and values
|
|
foreach ($requests as $y){
|
|
$v = explode("=", $y);
|
|
//INCLUDE VARIABLES IN ARRAY
|
|
$criterias[$v[0]] = $v[1];
|
|
if ($v[0] == 'page' || $v[0] =='p' || $v[0] =='totals' || $v[0] =='success_msg'){
|
|
//do nothing
|
|
}
|
|
elseif ($v[0] == 'rowid') {
|
|
//build up search by ID
|
|
$clause .= ' AND rap.rowID = :'.$v[0];
|
|
}
|
|
elseif ($v[0] == 'role_id') {
|
|
//build up search by role_id
|
|
$clause .= ' AND rap.role_id = :'.$v[0];
|
|
}
|
|
elseif ($v[0] == 'access_id') {
|
|
//build up search by access_id
|
|
$clause .= ' AND rap.access_id = :'.$v[0];
|
|
}
|
|
else {
|
|
//create clause
|
|
$clause .= ' AND rap.'.$v[0].' = :'.$v[0];
|
|
}
|
|
}
|
|
}
|
|
|
|
//Build WHERE clause
|
|
$whereclause = '';
|
|
if ($clause != ''){
|
|
$whereclause = 'WHERE '.substr($clause, 4);
|
|
}
|
|
|
|
if (isset($criterias['totals']) && $criterias['totals'] ==''){
|
|
//Request for total rows
|
|
$sql = 'SELECT count(*) as count FROM role_access_permissions rap '.$whereclause;
|
|
}
|
|
else {
|
|
//SQL with joined tables for names
|
|
$sql = 'SELECT rap.*,
|
|
r.name as role_name,
|
|
ae.access_name,
|
|
ae.access_path
|
|
FROM role_access_permissions rap
|
|
LEFT JOIN user_roles r ON rap.role_id = r.rowID
|
|
LEFT JOIN access_elements ae ON rap.access_id = ae.rowID
|
|
'.$whereclause.'
|
|
ORDER BY ae.access_name ASC';
|
|
}
|
|
|
|
$stmt = $pdo->prepare($sql);
|
|
|
|
//------------------------------------------
|
|
//Bind to query
|
|
//------------------------------------------
|
|
if (!empty($criterias)){
|
|
foreach ($criterias as $key => $value){
|
|
$key_condition = ':'.$key;
|
|
if (str_contains($sql, $key_condition)){
|
|
if ($key == 'p'){
|
|
//Do nothing (bug)
|
|
}
|
|
else {
|
|
$stmt->bindValue($key, $value, PDO::PARAM_STR);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
//------------------------------------------
|
|
// Debuglog
|
|
//------------------------------------------
|
|
if (debug){
|
|
$message = $date.';'.$sql.';'.$username;
|
|
debuglog($message);
|
|
}
|
|
|
|
//------------------------------------------
|
|
//Execute Query
|
|
//------------------------------------------
|
|
if(isset($criterias['totals']) && $criterias['totals']==''){
|
|
$stmt->execute();
|
|
$messages = $stmt->fetch();
|
|
$messages = $messages[0];
|
|
}
|
|
else {
|
|
//Execute Query
|
|
$stmt->execute();
|
|
//Get results
|
|
$messages = $stmt->fetchAll(PDO::FETCH_ASSOC);
|
|
}
|
|
|
|
//------------------------------------------
|
|
//JSON_EnCODE
|
|
//------------------------------------------
|
|
$messages = json_encode($messages, JSON_UNESCAPED_UNICODE);
|
|
//------------------------------------------
|
|
//Send results
|
|
//------------------------------------------
|
|
echo $messages;
|
|
|
|
?>
|