3 # script to edit a member's flags
4 # Written by Steve Tonnesen
5 # July 26, 2002 (my birthday!)
10 use C4::Output qw( output_and_exit_if_error output_and_exit output_html_with_http_headers );
11 use C4::Auth qw( get_template_and_user get_all_subpermissions get_user_subpermissions );
14 use Koha::Patron::Categories;
17 use C4::Output qw( output_and_exit_if_error output_and_exit output_html_with_http_headers );
21 my $flagsrequired = { permissions => 1 };
22 my $member=$input->param('member');
23 my $patron = Koha::Patrons->find( $member );
25 print $input->redirect("/cgi-bin/koha/circ/circulation.pl?borrowernumber=$member");
29 my $category_type = $patron->category->category_type;
30 my $bor = $patron->unblessed;
31 if( $category_type eq 'S' ) { # FIXME Is this really needed?
32 $flagsrequired->{'staffaccess'} = 1;
34 my ($template, $loggedinuser, $cookie) = get_template_and_user({
35 template_name => "members/member-flags.tt",
38 flagsrequired => $flagsrequired,
41 my $logged_in_user = Koha::Patrons->find( $loggedinuser );
42 output_and_exit_if_error( $input, $cookie, $template, { module => 'members', logged_in_user => $logged_in_user, current_patron => $patron } );
45 $member2{'borrowernumber'}=$member;
47 if ($input->param('newflags')) {
49 my $dbh=C4::Context->dbh();
51 my @perms = $input->multi_param('flag');
52 my %all_module_perms = ();
54 foreach my $perm (@perms) {
56 $all_module_perms{$perm} = 1;
58 my ($module, $sub_perm) = split /:/, $perm, 2;
59 push @{ $sub_perms{$module} }, $sub_perm;
65 my $sth=$dbh->prepare("SELECT bit,flag FROM userflags ORDER BY bit");
67 while (my ($bit, $flag) = $sth->fetchrow_array) {
68 if (exists $all_module_perms{$flag}) {
69 $module_flags += 2**$bit;
73 $sth = $dbh->prepare("UPDATE borrowers SET flags=? WHERE borrowernumber=?");
74 my $old_flags = $patron->flags // 0;
75 if( ( $old_flags == 1 || $module_flags == 1 ) &&
76 $old_flags != $module_flags ) {
77 die "Non-superlibrarian is changing superlibrarian privileges" if !C4::Context->IsSuperLibrarian && C4::Context->preference('ProtectSuperlibrarianPrivileges'); # Interface should not allow this, so we can just die here
79 $sth->execute($module_flags, $member);
81 # deal with subpermissions
82 $sth = $dbh->prepare("DELETE FROM user_permissions WHERE borrowernumber = ?");
83 $sth->execute($member);
84 $sth = $dbh->prepare("INSERT INTO user_permissions (borrowernumber, module_bit, code)
88 foreach my $module (keys %sub_perms) {
89 next if exists $all_module_perms{$module};
90 foreach my $sub_perm (@{ $sub_perms{$module} }) {
91 $sth->execute($member, $sub_perm, $module);
95 print $input->redirect("/cgi-bin/koha/members/moremember.pl?borrowernumber=$member");
99 my $dbh = C4::Context->dbh();
100 # FIXME This needs to be improved to avoid doing the same query
101 my $sth = $dbh->prepare("select bit,flag from userflags");
103 while ( my ( $bit, $flag ) = $sth->fetchrow ) {
104 if ( $bor->{flags} && $bor->{flags} & 2**$bit ) {
105 $accessflags->{$flag} = 1;
109 my $all_perms = get_all_subpermissions();
110 my $user_perms = get_user_subpermissions($bor->{'userid'});
111 $sth = $dbh->prepare("SELECT bit, flag FROM userflags ORDER BY bit");
115 while (my ($bit, $flag) = $sth->fetchrow) {
117 if ($accessflags->{$flag}) {
121 my %row = ( bit => $bit,
126 my @sub_perm_loop = ();
127 my $expand_parent = 0;
129 if (exists $all_perms->{$flag}) {
131 foreach my $sub_perm (sort keys %{ $all_perms->{$flag} }) {
132 push @sub_perm_loop, {
133 id => "${flag}_$sub_perm",
134 perm => "$flag:$sub_perm",
141 if (exists $user_perms->{$flag}) {
143 # put selected ones first
144 foreach my $sub_perm (sort keys %{ $user_perms->{$flag} }) {
145 push @sub_perm_loop, {
146 id => "${flag}_$sub_perm",
147 perm => "$flag:$sub_perm",
153 # then ones not selected
154 if (exists $all_perms->{$flag}) {
155 foreach my $sub_perm (sort keys %{ $all_perms->{$flag} }) {
156 push @sub_perm_loop, {
157 id => "${flag}_$sub_perm",
158 perm => "$flag:$sub_perm",
161 } unless exists $user_perms->{$flag} and exists $user_perms->{$flag}->{$sub_perm};
165 $row{expand} = $expand_parent;
166 if ($#sub_perm_loop > -1) {
167 $row{sub_perm_loop} = \@sub_perm_loop;
169 next if ( ( $row{flag} eq 'cash_management' ) && !C4::Context->preference('UseCashRegisters') );
176 disable_superlibrarian_privs => C4::Context->preference('ProtectSuperlibrarianPrivileges') ? !C4::Context->IsSuperLibrarian : 0,
179 output_html_with_http_headers $input, $cookie, $template->output;