diff options
Diffstat (limited to 'controllers/user.php')
| -rw-r--r-- | controllers/user.php | 198 |
1 files changed, 198 insertions, 0 deletions
diff --git a/controllers/user.php b/controllers/user.php new file mode 100644 index 00000000..0fdd9d1e --- /dev/null +++ b/controllers/user.php @@ -0,0 +1,198 @@ +<?php + +namespace Controller; + +class User extends Base +{ + // Display access forbidden page + public function forbidden() + { + $this->response->html($this->template->layout('user_forbidden', array( + 'menu' => 'users', + 'title' => t('Access Forbidden') + ))); + } + + // Logout and destroy session + public function logout() + { + $this->session->close(); + $this->response->redirect('?controller=user&action=login'); + } + + // Display the form login + public function login() + { + if (isset($_SESSION['user'])) $this->response->redirect('?controller=app'); + + $this->response->html($this->template->layout('user_login', array( + 'errors' => array(), + 'values' => array(), + 'no_layout' => true, + 'title' => t('Login') + ))); + } + + // Check credentials + public function check() + { + $values = $this->request->getValues(); + list($valid, $errors) = $this->user->validateLogin($values); + + if ($valid) $this->response->redirect('?controller=app'); + + $this->response->html($this->template->layout('user_login', array( + 'errors' => $errors, + 'values' => $values, + 'no_layout' => true, + 'title' => t('Login') + ))); + } + + // List all users + public function index() + { + $users = $this->user->getAll(); + $nb_users = count($users); + + $this->response->html( + $this->template->layout('user_index', array( + 'projects' => $this->project->getList(), + 'users' => $users, + 'nb_users' => $nb_users, + 'menu' => 'users', + 'title' => t('Users').' ('.$nb_users.')' + ))); + } + + // Display a form to create a new user + public function create() + { + $this->checkPermissions(); + + $this->response->html($this->template->layout('user_new', array( + 'projects' => $this->project->getList(), + 'errors' => array(), + 'values' => array(), + 'menu' => 'users', + 'title' => t('New user') + ))); + } + + // Validate and save a new user + public function save() + { + $this->checkPermissions(); + + $values = $this->request->getValues(); + list($valid, $errors) = $this->user->validateCreation($values); + + if ($valid) { + + if ($this->user->create($values)) { + $this->session->flash(t('User created successfully.')); + $this->response->redirect('?controller=user'); + } + else { + $this->session->flashError(t('Unable to create your user.')); + } + } + + $this->response->html($this->template->layout('user_new', array( + 'projects' => $this->project->getList(), + 'errors' => $errors, + 'values' => $values, + 'menu' => 'users', + 'title' => t('New user') + ))); + } + + // Display a form to edit a user + public function edit() + { + $user = $this->user->getById($this->request->getIntegerParam('user_id')); + + if (! $_SESSION['user']['is_admin'] && $_SESSION['user']['id'] != $user['id']) { + $this->response->redirect('?controller=user&action=forbidden'); + } + + if (! empty($user)) unset($user['password']); + + $this->response->html($this->template->layout('user_edit', array( + 'projects' => $this->project->getList(), + 'errors' => array(), + 'values' => $user, + 'menu' => 'users', + 'title' => t('Edit user') + ))); + } + + // Validate and update a user + public function update() + { + $values = $this->request->getValues(); + + if ($_SESSION['user']['is_admin'] == 1) { + $values += array('is_admin' => 0); + } + else { + + if ($_SESSION['user']['id'] != $values['id']) { + $this->response->redirect('?controller=user&action=forbidden'); + } + + if (isset($values['is_admin'])) { + unset($values['is_admin']); // Regular users can't be admin + } + } + + list($valid, $errors) = $this->user->validateModification($values); + + if ($valid) { + + if ($this->user->update($values)) { + $this->session->flash(t('User updated successfully.')); + $this->response->redirect('?controller=user'); + } + else { + $this->session->flashError(t('Unable to update your user.')); + } + } + + $this->response->html($this->template->layout('user_edit', array( + 'projects' => $this->project->getList(), + 'errors' => $errors, + 'values' => $values, + 'menu' => 'users', + 'title' => t('Edit user') + ))); + } + + // Confirmation dialog before to remove a user + public function confirm() + { + $this->checkPermissions(); + + $this->response->html($this->template->layout('user_remove', array( + 'user' => $this->user->getById($this->request->getIntegerParam('user_id')), + 'menu' => 'users', + 'title' => t('Remove user') + ))); + } + + // Remove a user + public function remove() + { + $this->checkPermissions(); + + $user_id = $this->request->getIntegerParam('user_id'); + + if ($user_id && $this->user->remove($user_id)) { + $this->session->flash(t('User removed successfully.')); + } else { + $this->session->flashError(t('Unable to remove this user.')); + } + + $this->response->redirect('?controller=user'); + } +} |