interface/usergroup/user_admin.php

   1 <?php
   2 // This program is free software; you can redistribute it and/or
   3 // modify it under the terms of the GNU General Public License
   4 // as published by the Free Software Foundation; either version 2
   5 // of the License, or (at your option) any later version.
   6 require_once("../globals.php");
   7 require_once("../../library/acl.inc");
   8 require_once("$srcdir/sha1.js");
   9 require_once("$srcdir/sql.inc");
  10 require_once("$srcdir/calendar.inc");
  11 require_once("$srcdir/formdata.inc.php");
  12 require_once("$srcdir/options.inc.php");
  13 require_once(dirname(__FILE__) . "/../../library/classes/WSProvider.class.php");
  14 require_once("$srcdir/erx_javascript.inc.php");
  15
  16 if (!$_GET["id"] || !acl_check('admin', 'users'))
  17   exit();
  18
  19 if ($_GET["mode"] == "update") {
  20   if ($_GET["username"]) {
  21     // $tqvar = addslashes(trim($_GET["username"]));
  22     $tqvar = trim(formData('username','G'));
  23     $user_data = mysql_fetch_array(sqlStatement("select * from users where id={$_GET["id"]}"));
  24     sqlStatement("update users set username='$tqvar' where id={$_GET["id"]}");
  25     sqlStatement("update groups set user='$tqvar' where user='". $user_data["username"]  ."'");
  26     //echo "query was: " ."update groups set user='$tqvar' where user='". $user_data["username"]  ."'" ;
  27   }
  28   if ($_GET["taxid"]) {
  29     $tqvar = formData('taxid','G');
  30     sqlStatement("update users set federaltaxid='$tqvar' where id={$_GET["id"]}");
  31   }
  32   if ($_GET["drugid"]) {
  33     $tqvar = formData('drugid','G');
  34     sqlStatement("update users set federaldrugid='$tqvar' where id={$_GET["id"]}");
  35   }
  36   if ($_GET["upin"]) {
  37     $tqvar = formData('upin','G');
  38     sqlStatement("update users set upin='$tqvar' where id={$_GET["id"]}");
  39   }
  40   if ($_GET["npi"]) {
  41     $tqvar = formData('npi','G');
  42     sqlStatement("update users set npi='$tqvar' where id={$_GET["id"]}");
  43   }
  44   if ($_GET["taxonomy"]) {
  45     $tqvar = formData('taxonomy','G');
  46     sqlStatement("update users set taxonomy = '$tqvar' where id= {$_GET["id"]}");
  47   }
  48   if ($_GET["lname"]) {
  49     $tqvar = formData('lname','G');
  50     sqlStatement("update users set lname='$tqvar' where id={$_GET["id"]}");
  51   }
  52   if ($_GET["job"]) {
  53     $tqvar = formData('job','G');
  54     sqlStatement("update users set specialty='$tqvar' where id={$_GET["id"]}");
  55   }
  56   if ($_GET["mname"]) {
  57           $tqvar = formData('mname','G');
  58           sqlStatement("update users set mname='$tqvar' where id={$_GET["id"]}");
  59   }
  60   if ($_GET["facility_id"]) {
  61           $tqvar = formData('facility_id','G');
  62           sqlStatement("update users set facility_id = '$tqvar' where id = {$_GET["id"]}");
  63           //(CHEMED) Update facility name when changing the id
  64           sqlStatement("UPDATE users, facility SET users.facility = facility.name WHERE facility.id = '$tqvar' AND users.id = {$_GET["id"]}");
  65           //END (CHEMED)
  66   }
  67   if ($GLOBALS['restrict_user_facility'] && $_GET["schedule_facility"]) {
  68           sqlStatement("delete from users_facility
  69             where tablename='users'
  70             and table_id={$_GET["id"]}
  71             and facility_id not in (" . implode(",", $_GET['schedule_facility']) . ")");
  72           foreach($_GET["schedule_facility"] as $tqvar) {
  73       sqlStatement("replace into users_facility set
  74                     facility_id = '$tqvar',
  75                     tablename='users',
  76                     table_id = {$_GET["id"]}");
  77     }
  78   }
  79   if ($_GET["fname"]) {
  80           $tqvar = formData('fname','G');
  81           sqlStatement("update users set fname='$tqvar' where id={$_GET["id"]}");
  82   }
  83   //(CHEMED) Calendar UI preference
  84   if ($_GET["cal_ui"]) {
  85           $tqvar = formData('cal_ui','G');
  86           sqlStatement("update users set cal_ui = '$tqvar' where id = {$_GET["id"]}");
  87
  88           // added by bgm to set this session variable if the current user has edited
  89           //   their own settings
  90           if ($_SESSION['authId'] == $_GET["id"]) {
  91             $_SESSION['cal_ui'] = $tqvar;
  92           }
  93   }
  94   //END (CHEMED) Calendar UI preference
  95
  96   if (isset($_GET['default_warehouse'])) {
  97     sqlStatement("UPDATE users SET default_warehouse = '" .
  98       formData('default_warehouse','G') .
  99       "' WHERE id = '" . formData('id','G') . "'");
 100   }
 101
 102   if (isset($_GET['irnpool'])) {
 103     sqlStatement("UPDATE users SET irnpool = '" .
 104       formData('irnpool','G') .
 105       "' WHERE id = '" . formData('id','G') . "'");
 106   }
 107
 108   if ($_GET["newauthPass"] && $_GET["newauthPass"] != "d41d8cd98f00b204e9800998ecf8427e") { // account for empty
 109     $tqvar = formData('newauthPass','G');
 110     sqlStatement("update users set password='$tqvar' where id={$_GET["id"]}");
 111   }
 112
 113   // for relay health single sign-on
 114   if ($_GET["ssi_relayhealth"]) {
 115     $tqvar = formData('ssi_relayhealth','G');
 116     sqlStatement("update users set ssi_relayhealth = '$tqvar' where id = {$_GET["id"]}");
 117   }
 118
 119   $tqvar  = $_GET["authorized"] ? 1 : 0;
 120   $actvar = $_GET["active"]     ? 1 : 0;
 121   $calvar = $_GET["calendar"]   ? 1 : 0;
 122
 123   sqlStatement("UPDATE users SET authorized = $tqvar, active = $actvar, " .
 124     "calendar = $calvar, see_auth = '" . $_GET['see_auth'] . "' WHERE " .
 125     "id = {$_GET["id"]}");
 126
 127   if ($_GET["comments"]) {
 128     $tqvar = formData('comments','G');
 129     sqlStatement("update users set info = '$tqvar' where id = {$_GET["id"]}");
 130   }
 131
 132   if (isset($phpgacl_location) && acl_check('admin', 'acl')) {
 133     // Set the access control group of user
 134     $user_data = mysql_fetch_array(sqlStatement("select username from users where id={$_GET["id"]}"));
 135     set_user_aro($_GET['access_group'], $user_data["username"],
 136       formData('fname','G'), formData('mname','G'), formData('lname','G'));
 137   }
 138
 139   $ws = new WSProvider($_GET['id']);
 140
 141   /*Dont move usergroup_admin (1).php just close window
 142   // On a successful update, return to the users list.
 143   include("usergroup_admin.php");
 144   exit(0);
 145   */    echo '
 146 <script type="text/javascript">
 147 <!--
 148 parent.$.fn.fancybox.close();
 149 //-->
 150 </script>
 151
 152         ';
 153 }
 154
 155 $res = sqlStatement("select * from users where id={$_GET["id"]}");
 156 for ($iter = 0;$row = sqlFetchArray($res);$iter++)
 157                 $result[$iter] = $row;
 158 $iter = $result[0];
 159
 160 ///
 161 if (isset($_POST["mode"])) {
 162         echo '
 163 <script type="text/javascript">
 164 <!--
 165 parent.$.fn.fancybox.close();
 166 //-->
 167 </script>
 168
 169         ';
 170 }
 171 ///
 172
 173 ?>
 174
 175 <html>
 176 <head>
 177
 178 <link rel="stylesheet" href="<?php echo $css_header; ?>" type="text/css">
 179 <script type="text/javascript" src="../../library/dialog.js"></script>
 180 <script type="text/javascript" src="../../library/js/jquery.1.3.2.js"></script>
 181 <script type="text/javascript" src="../../library/js/common.js"></script>
 182 <script src="checkpwd_validation.js" type="text/javascript"></script>
 183
 184 <script language="JavaScript">
 185 function checkChange()
 186 {
 187   alert("<?php echo addslashes(xl('If you change e-RX Role for ePrescription, it may affect the ePrescription workflow. If you face any difficulty, contact your ePrescription vendor.'));?>");
 188 }
 189 function submitform() {
 190         top.restoreSession();
 191         var flag=0;
 192         function trimAll(sString)
 193         {
 194                 while (sString.substring(0,1) == ' ')
 195                 {
 196                         sString = sString.substring(1, sString.length);
 197                 }
 198                 while (sString.substring(sString.length-1, sString.length) == ' ')
 199                 {
 200                         sString = sString.substring(0,sString.length-1);
 201                 }
 202                 return sString;
 203         }
 204         if(trimAll(document.getElementById('fname').value) == ""){
 205                 alert("<?php xl('Required field missing: Please enter the First name','e');?>");
 206                 document.getElementById('fname').style.backgroundColor="red";
 207                 document.getElementById('fname').focus();
 208                 return false;
 209         }
 210         if(trimAll(document.getElementById('lname').value) == ""){
 211                 alert("<?php xl('Required field missing: Please enter the Last name','e');?>");
 212                 document.getElementById('lname').style.backgroundColor="red";
 213                 document.getElementById('lname').focus();
 214                 return false;
 215         }
 216         if(document.forms[0].clearPass.value!="")
 217         {
 218                 //Checking for the strong password if the 'secure password' feature is enabled
 219                 if(document.forms[0].secure_pwd.value == 1)
 220                 {
 221                         var pwdresult = passwordvalidate(document.forms[0].clearPass.value);
 222                         if(pwdresult == 0) {
 223                                 flag=1;
 224                                 alert("<?php echo xl('The password must be at least eight characters, and should'); echo '\n'; echo xl('contain at least three of the four following items:'); echo '\n'; echo xl('A number'); echo '\n'; echo xl('A lowercase letter'); echo '\n'; echo xl('An uppercase letter'); echo '\n'; echo xl('A special character');echo '('; echo xl('not a letter or number'); echo ').'; echo '\n'; echo xl('For example:'); echo ' healthCare@09'; ?>");
 225                                 return false;
 226                         }
 227                 }
 228                 //Checking for password history if the 'password history' feature is enabled.
 229                 if(document.forms[0].pwd_history.value == 1){
 230                         // ViCareplus : As per NIST standard, the SHA1 encryption algorithm is used
 231                         var p  = SHA1(document.forms[0].clearPass.value);
 232                         var p1 = document.forms[0].pwd.value;
 233                         var p2 = document.forms[0].pwd_history1.value;
 234                         var p3 = document.forms[0].pwd_history2.value;
 235                         if((p == p1) || (p == p2) || (p == p3))
 236                         {
 237                                 flag=1;
 238                                 document.getElementById('error_message').innerHTML="<?php xl('Recent three passwords are not allowed.',e) ?>";
 239                                 return false;
 240                         }
 241                 }
 242
 243         }//If pwd null ends here
 244         //Request to reset the user password if the user was deactived once the password expired.
 245         if((document.forms[0].pwd_expires.value != 0) && (document.forms[0].clearPass.value == "")) {
 246                 if((document.forms[0].user_type.value != "Emergency Login") && (document.forms[0].pre_active.value == 0) && (document.forms[0].active.checked == 1) && (document.forms[0].grace_time.value != "") && (document.forms[0].current_date.value) > (document.forms[0].grace_time.value))
 247                 {
 248                         flag=1;
 249                         document.getElementById('error_message').innerHTML="<?php xl('Please reset the password.',e) ?>";
 250                 }
 251         }
 252
 253   if (document.forms[0].access_group_id) {
 254     var sel = getSelected(document.forms[0].access_group_id.options);
 255     for (var item in sel) {
 256       if (sel[item].value == "Emergency Login") {
 257         document.forms[0].check_acl.value = 1;
 258       }
 259     }
 260   }
 261
 262           <?php if($GLOBALS['erx_enable']){ ?>
 263         alertMsg='';
 264         f=document.forms[0];
 265         for(i=0;i<f.length;i++){
 266           if(f[i].type=='text' && f[i].value)
 267           {
 268             if(f[i].name == 'fname' || f[i].name == 'mname' || f[i].name == 'lname')
 269             {
 270               alertMsg += checkLength(f[i].name,f[i].value,35);
 271               alertMsg += checkUsername(f[i].name,f[i].value);
 272             }
 273             else if(f[i].name == 'taxid')
 274             {
 275               alertMsg += checkLength(f[i].name,f[i].value,10);
 276               alertMsg += checkFederalEin(f[i].name,f[i].value);
 277             }
 278             else if(f[i].name == 'state_license_number')
 279             {
 280               alertMsg += checkLength(f[i].name,f[i].value,10);
 281               alertMsg += checkStateLicenseNumber(f[i].name,f[i].value);
 282             }
 283             else if(f[i].name == 'npi')
 284             {
 285               alertMsg += checkLength(f[i].name,f[i].value,10);
 286               alertMsg += checkTaxNpiDea(f[i].name,f[i].value);
 287             }
 288             else if(f[i].name == 'drugid')
 289             {
 290               alertMsg += checkLength(f[i].name,f[i].value,30);
 291               alertMsg += checkAlphaNumeric(f[i].name,f[i].value);
 292             }
 293           }
 294         }
 295         if(alertMsg)
 296         {
 297           alert(alertMsg);
 298           return false;
 299         }
 300         <?php } ?>
 301         if(flag == 0){
 302                 // ViCareplus : As per NIST standard, SHA1 encryption algorithm is used
 303                 document.forms[0].newauthPass.value=SHA1(document.forms[0].clearPass.value);document.forms[0].clearPass.value='';
 304                 document.forms[0].submit();
 305                 parent.$.fn.fancybox.close();
 306         }
 307 }
 308 //Getting the list of selected item in ACL
 309 function getSelected(opt) {
 310          var selected = new Array();
 311             var index = 0;
 312             for (var intLoop = 0; intLoop < opt.length; intLoop++) {
 313                if ((opt[intLoop].selected) ||
 314                    (opt[intLoop].checked)) {
 315                   index = selected.length;
 316                   selected[index] = new Object;
 317                   selected[index].value = opt[intLoop].value;
 318                   selected[index].index = intLoop;
 319                }
 320             }
 321             return selected;
 322          }
 323
 324 function authorized_clicked() {
 325  var f = document.forms[0];
 326  f.calendar.disabled = !f.authorized.checked;
 327  f.calendar.checked  =  f.authorized.checked;
 328 }
 329
 330 </script>
 331
 332 </head>
 333 <body class="body_top">
 334 <table><tr><td>
 335 <span class="title"><?php xl('Edit User','e'); ?></span>&nbsp;
 336 </td><td>
 337     <a class="css_button" name='form_save' id='form_save' href='#' onclick='return submitform()'> <span><?php xl('Save','e');?></span> </a>
 338         <a class="css_button" id='cancel' href='#'><span><?php xl('Cancel','e');?></span></a>
 339 </td></tr>
 340 </table>
 341 <br>
 342 <FORM NAME="user_form" METHOD="GET" ACTION="usergroup_admin.php" target="_parent" onsubmit='return top.restoreSession()'>
 343 <input type=hidden name="pwd_history" value="<?php echo $GLOBALS['password_history']; ?>" >
 344 <input type=hidden name="pwd_history1" value="<?php echo $iter["pwd_history1"]; ?>" >
 345 <input type=hidden name="pwd_history2" value="<?php echo $iter["pwd_history2"]; ?>" >
 346 <input type=hidden name="pwd" value="<?php echo $iter["password"]; ?>" >
 347
 348 <input type=hidden name="pwd_expires" value="<?php echo $GLOBALS['password_expiration_days']; ?>" >
 349 <input type=hidden name="pre_active" value="<?php echo $iter["active"]; ?>" >
 350 <input type=hidden name="exp_date" value="<?php echo $iter["pwd_expiration_date"]; ?>" >
 351 <input type=hidden name="get_admin_id" value="<?php echo $GLOBALS['Emergency_Login_email']; ?>" >
 352 <input type=hidden name="admin_id" value="<?php echo $GLOBALS['Emergency_Login_email_id']; ?>" >
 353 <input type=hidden name="check_acl" value="">
 354 <?php
 355 //Calculating the grace time
 356 $current_date = date("Y-m-d");
 357 $password_exp=$iter["pwd_expiration_date"];
 358 if($password_exp != "0000-00-00")
 359   {
 360     $grace_time1 = date("Y-m-d", strtotime($password_exp . "+".$GLOBALS['password_grace_time'] ."days"));
 361   }
 362 ?>
 363 <input type=hidden name="current_date" value="<?php echo strtotime($current_date); ?>" >
 364 <input type=hidden name="grace_time" value="<?php echo strtotime($grace_time1); ?>" >
 365 <!--  Get the list ACL for the user -->
 366 <?php
 367 $acl_name=acl_get_group_titles($iter["username"]);
 368 $bg_count=count($acl_name);
 369    for($i=0;$i<$bg_count;$i++){
 370       if($acl_name[$i] == "Emergency Login")
 371        $bg_name=$acl_name[$i];
 372       }
 373 ?>
 374 <input type=hidden name="user_type" value="<?php echo $bg_name; ?>" >
 375
 376 <TABLE border=0 cellpadding=0 cellspacing=0>
 377 <TR>
 378 <TD style="width:180px;"><span class=text><?php xl('Username','e'); ?>: </span></TD><TD style="width:270px;"><input type=entry name=username style="width:150px;" value="<?php echo $iter["username"]; ?>" disabled></td>
 379 <TD style="width:200px;"><span class=text><?php xl('Password','e'); ?>: </span></TD><TD class='text' style="width:280px;"><input type=entry name=clearPass style="width:150px;"  value=""><font class="mandatory">*</font></td>
 380 </TR>
 381
 382 <TR height="30" style="valign:middle;">
 383 <td><span class="text">&nbsp;</span></td><td>&nbsp;</td>
 384 <td colspan="2"><span class=text><?php xl('Provider','e'); ?>:
 385  <input type="checkbox" name="authorized" onclick="authorized_clicked()"<?php
 386   if ($iter["authorized"]) echo " checked"; ?> />
 387  &nbsp;&nbsp;<span class='text'><?php xl('Calendar','e'); ?>:
 388  <input type="checkbox" name="calendar"<?php
 389   if ($iter["calendar"]) echo " checked";
 390   if (!$iter["authorized"]) echo " disabled"; ?> />
 391  &nbsp;&nbsp;<span class='text'><?php xl('Active','e'); ?>:
 392  <input type="checkbox" name="active"<?php if ($iter["active"]) echo " checked"; ?> />
 393 </TD>
 394 </TR>
 395
 396 <TR>
 397 <TD><span class=text><?php xl('First Name','e'); ?>: </span></TD>
 398 <TD><input type=entry name=fname id=fname style="width:150px;" value="<?php echo $iter["fname"]; ?>"><span class="mandatory">&nbsp;*</span></td>
 399 <td><span class=text><?php xl('Middle Name','e'); ?>: </span></TD><td><input type=entry name=mname style="width:150px;"  value="<?php echo $iter["mname"]; ?>"></td>
 400 </TR>
 401
 402 <TR>
 403 <td><span class=text><?php xl('Last Name','e'); ?>: </span></td><td><input type=entry name=lname id=lname style="width:150px;"  value="<?php echo $iter["lname"]; ?>"><span class="mandatory">&nbsp;*</span></td>
 404 <td><span class=text><?php xl('Default Facility','e'); ?>: </span></td><td><select name=facility_id style="width:150px;" >
 405 <?php
 406 $fres = sqlStatement("select * from facility where service_location != 0 order by name");
 407 if ($fres) {
 408 for ($iter2 = 0; $frow = sqlFetchArray($fres); $iter2++)
 409                 $result[$iter2] = $frow;
 410 foreach($result as $iter2) {
 411 ?>
 412   <option value="<?php echo $iter2['id']; ?>" <?php if ($iter['facility_id'] == $iter2['id']) echo "selected"; ?>><?php echo htmlspecialchars($iter2['name']); ?></option>
 413 <?php
 414 }
 415 }
 416 ?>
 417 </select></td>
 418 </tr>
 419
 420 <?php if ($GLOBALS['restrict_user_facility']) { ?>
 421 <tr>
 422  <td colspan=2>&nbsp;</td>
 423  <td><span class=text><?php xl('Schedule Facilities:', 'e');?></td>
 424  <td>
 425   <select name="schedule_facility[]" multiple style="width:150px;" >
 426 <?php
 427   $userFacilities = getUserFacilities($_GET['id']);
 428   $ufid = array();
 429   foreach($userFacilities as $uf)
 430     $ufid[] = $uf['id'];
 431   $fres = sqlStatement("select * from facility where service_location != 0 order by name");
 432   if ($fres) {
 433     while($frow = sqlFetchArray($fres)):
 434 ?>
 435    <option <?php echo in_array($frow['id'], $ufid) || $frow['id'] == $iter['facility_id'] ? "selected" : null ?>
 436       value="<?php echo $frow['id'] ?>"><?php echo htmlspecialchars($frow['name']) ?></option>
 437 <?php
 438   endwhile;
 439 }
 440 ?>
 441   </select>
 442  </td>
 443 </tr>
 444 <?php } ?>
 445
 446 <TR>
 447 <TD><span class=text><?php xl('Federal Tax ID','e'); ?>: </span></TD><TD><input type=text name=taxid style="width:150px;"  value="<?php echo $iter["federaltaxid"]?>"></td>
 448 <TD><span class=text><?php xl('Federal Drug ID','e'); ?>: </span></TD><TD><input type=text name=drugid style="width:150px;"  value="<?php echo $iter["federaldrugid"]?>"></td>
 449 </TR>
 450
 451 <tr>
 452 <td><span class="text"><?php xl('UPIN','e'); ?>: </span></td><td><input type="text" name="upin" style="width:150px;" value="<?php echo $iter["upin"]?>"></td>
 453 <td class='text'><?php xl('See Authorizations','e'); ?>: </td>
 454 <td><select name="see_auth" style="width:150px;" >
 455 <?php
 456  foreach (array(1 => xl('None'), 2 => xl('Only Mine'), 3 => xl('All')) as $key => $value)
 457  {
 458   echo " <option value='$key'";
 459   if ($key == $iter['see_auth']) echo " selected";
 460   echo ">$value</option>\n";
 461  }
 462 ?>
 463 </select></td>
 464 </tr>
 465
 466 <tr>
 467 <td><span class="text"><?php xl('NPI','e'); ?>: </span></td><td><input type="text" name="npi" style="width:150px;"  value="<?php echo $iter["npi"]?>"></td>
 468 <td><span class="text"><?php xl('Job Description','e'); ?>: </span></td><td><input type="text" name="job" style="width:150px;"  value="<?php echo $iter["specialty"]?>"></td>
 469 </tr>
 470
 471 <?php if (!empty($GLOBALS['ssi']['rh'])) { ?>
 472 <tr>
 473 <td><span class="text"><?php xl('Relay Health ID', 'e'); ?>: </span></td>
 474 <td><input type="password" name="ssi_relayhealth" style="width:150px;"  value="<?php echo $iter["ssi_relayhealth"]; ?>"></td>
 475 </tr>
 476 <?php } ?>
 477
 478 <!-- (CHEMED) Calendar UI preference -->
 479 <tr>
 480 <td><span class="text"><?php xl('Taxonomy','e'); ?>: </span></td>
 481 <td><input type="text" name="taxonomy" style="width:150px;"  value="<?php echo $iter["taxonomy"]?>"></td>
 482 <td><span class="text"><?php xl('Calendar UI','e'); ?>: </span></td><td><select name="cal_ui" style="width:150px;" >
 483 <?php
 484  foreach (array(3 => xl('Outlook'), 1 => xl('Original'), 2 => xl('Fancy')) as $key => $value)
 485  {
 486   echo " <option value='$key'";
 487   if ($key == $iter['cal_ui']) echo " selected";
 488   echo ">$value</option>\n";
 489  }
 490 ?>
 491 </select></td>
 492 </tr>
 493 <!-- END (CHEMED) Calendar UI preference -->
 494
 495 <tr>
 496 <td><span class="text"><?php xl('State License Number','e'); ?>: </span></td>
 497 <td><input type="text" name="state_license_number" style="width:150px;"  value="<?php echo $iter["state_license_number"]?>"></td>
 498 <td class='text'><?php xl('NewCrop eRX Role','e'); ?>:</td>
 499 <td>
 500   <?php echo generate_select_list("erxrole", "newcrop_erx_role", $iter['newcrop_user_role'],'','--Select Role--','','','',array('style'=>'width:150px')); ?>
 501 </td>
 502 </tr>
 503
 504 <?php if ($GLOBALS['inhouse_pharmacy']) { ?>
 505 <tr>
 506  <td class="text"><?php xl('Default Warehouse','e'); ?>: </td>
 507  <td class='text'>
 508 <?php
 509 echo generate_select_list('default_warehouse', 'warehouse',
 510   $iter['default_warehouse'], '');
 511 ?>
 512  </td>
 513  <td class="text"><?php xl('Invoice Refno Pool','e'); ?>: </td>
 514  <td class='text'>
 515 <?php
 516 echo generate_select_list('irnpool', 'irnpool', $iter['irnpool'],
 517   xl('Invoice reference number pool, if used'));
 518 ?>
 519  </td>
 520 </tr>
 521 <?php } ?>
 522
 523 <?php
 524  // Collect the access control group of user
 525  if (isset($phpgacl_location) && acl_check('admin', 'acl')) {
 526 ?>
 527   <tr>
 528   <td class='text'><?php xl('Access Control','e'); ?>:</td>
 529   <td><select id="access_group_id" name="access_group[]" multiple style="width:150px;" >
 530   <?php
 531    $list_acl_groups = acl_get_group_title_list();
 532    $username_acl_groups = acl_get_group_titles($iter["username"]);
 533    foreach ($list_acl_groups as $value) {
 534     if (($username_acl_groups) && in_array($value,$username_acl_groups)) {
 535      // Modified 6-2009 by BM - Translate group name if applicable
 536      echo " <option value='$value' selected>" . xl_gacl_group($value) . "</option>\n";
 537     }
 538     else {
 539      // Modified 6-2009 by BM - Translate group name if applicable
 540      echo " <option value='$value'>" . xl_gacl_group($value) . "</option>\n";
 541     }
 542    }
 543   ?>
 544   </select></td>
 545   <td><span class=text><?php xl('Additional Info','e'); ?>:</span></td>
 546   <td><textarea style="width:150px;" name="comments" wrap=auto rows=4 cols=25><?php echo $iter["info"];?></textarea></td>
 547
 548   </tr>
 549   <tr height="20" valign="bottom">
 550   <td colspan="4" class="text">
 551   <font class="mandatory">*</font> <?php xl('Leave blank to keep password unchanged.','e'); ?>
 552 <!--
 553 Display red alert if entered password matched one of last three passwords/Display red alert if user password was expired and the user was inactivated previously
 554 -->
 555   <div class="redtext" id="error_message">&nbsp;</div>
 556   </td>
 557   </tr>
 558 <?php
 559  }
 560 ?>
 561 </table>
 562
 563 <INPUT TYPE="HIDDEN" NAME="id" VALUE="<?php echo $_GET["id"]; ?>">
 564 <INPUT TYPE="HIDDEN" NAME="mode" VALUE="update">
 565 <INPUT TYPE="HIDDEN" NAME="privatemode" VALUE="user_admin">
 566 <INPUT TYPE="HIDDEN" NAME="newauthPass" VALUE="">
 567 <INPUT TYPE="HIDDEN" NAME="secure_pwd" VALUE="<?php echo $GLOBALS['secure_password']; ?>">
 568 </FORM>
 569 <script language="JavaScript">
 570 $(document).ready(function(){
 571     $("#cancel").click(function() {
 572                   parent.$.fn.fancybox.close();
 573          });
 574
 575 });
 576 </script>
 577 </BODY>
 578
 579 </HTML>
 580
 581 <?php
 582 //  d41d8cd98f00b204e9800998ecf8427e == blank
 583 ?>