3 # script to edit a member's flags
4 # Written by Steve Tonnesen
5 # July 26, 2002 (my birthday!)
11 use C4
::Auth
qw(:DEFAULT :EditPermissions);
14 use C4
::Members
::Attributes
qw(GetBorrowerAttributes);
15 #use C4::Acquisitions;
17 use Koha
::Patron
::Categories
;
25 my $flagsrequired = { permissions
=> 1 };
26 my $member=$input->param('member');
27 my $patron = Koha
::Patrons
->find( $member );
29 print $input->redirect("/cgi-bin/koha/circ/circulation.pl?borrowernumber=$member");
33 my $category_type = $patron->category->category_type;
34 my $bor = $patron->unblessed;
35 if( $category_type eq 'S' ) { # FIXME Is this really needed?
36 $flagsrequired->{'staffaccess'} = 1;
38 my ($template, $loggedinuser, $cookie) = get_template_and_user
({
39 template_name
=> "members/member-flags.tt",
43 flagsrequired
=> $flagsrequired,
47 my $logged_in_user = Koha
::Patrons
->find( $loggedinuser ) or die "Not logged in";
48 output_and_exit_if_error
( $input, $cookie, $template, { module
=> 'members', logged_in_user
=> $logged_in_user, current_patron
=> $patron } );
51 $member2{'borrowernumber'}=$member;
53 if ($input->param('newflags')) {
55 die "Wrong CSRF token"
56 unless Koha
::Token
->new->check_csrf({
57 session_id
=> scalar $input->cookie('CGISESSID'),
58 token
=> scalar $input->param('csrf_token'),
62 my $dbh=C4
::Context
->dbh();
64 my @perms = $input->multi_param('flag');
65 my %all_module_perms = ();
67 foreach my $perm (@perms) {
69 $all_module_perms{$perm} = 1;
71 my ($module, $sub_perm) = split /:/, $perm, 2;
72 push @
{ $sub_perms{$module} }, $sub_perm;
78 my $sth=$dbh->prepare("SELECT bit,flag FROM userflags ORDER BY bit");
80 while (my ($bit, $flag) = $sth->fetchrow_array) {
81 if (exists $all_module_perms{$flag}) {
82 $module_flags += 2**$bit;
86 $sth = $dbh->prepare("UPDATE borrowers SET flags=? WHERE borrowernumber=?");
87 $sth->execute($module_flags, $member);
89 # deal with subpermissions
90 $sth = $dbh->prepare("DELETE FROM user_permissions WHERE borrowernumber = ?");
91 $sth->execute($member);
92 $sth = $dbh->prepare("INSERT INTO user_permissions (borrowernumber, module_bit, code)
96 foreach my $module (keys %sub_perms) {
97 next if exists $all_module_perms{$module};
98 foreach my $sub_perm (@
{ $sub_perms{$module} }) {
99 $sth->execute($member, $sub_perm, $module);
103 print $input->redirect("/cgi-bin/koha/members/moremember.pl?borrowernumber=$member");
107 my $dbh = C4
::Context
->dbh();
108 # FIXME This needs to be improved to avoid doing the same query
109 my $sth = $dbh->prepare("select bit,flag from userflags");
111 while ( my ( $bit, $flag ) = $sth->fetchrow ) {
112 if ( $bor->{flags
} && $bor->{flags
} & 2**$bit ) {
113 $accessflags->{$flag} = 1;
117 my $all_perms = get_all_subpermissions
();
118 my $user_perms = get_user_subpermissions
($bor->{'userid'});
119 $sth = $dbh->prepare("SELECT bit, flag FROM userflags ORDER BY bit");
123 while (my ($bit, $flag) = $sth->fetchrow) {
125 if ($accessflags->{$flag}) {
129 my %row = ( bit
=> $bit,
134 my @sub_perm_loop = ();
135 my $expand_parent = 0;
137 if (exists $all_perms->{$flag}) {
139 foreach my $sub_perm (sort keys %{ $all_perms->{$flag} }) {
140 push @sub_perm_loop, {
141 id
=> "${flag}_$sub_perm",
142 perm
=> "$flag:$sub_perm",
149 if (exists $user_perms->{$flag}) {
151 # put selected ones first
152 foreach my $sub_perm (sort keys %{ $user_perms->{$flag} }) {
153 push @sub_perm_loop, {
154 id
=> "${flag}_$sub_perm",
155 perm
=> "$flag:$sub_perm",
161 # then ones not selected
162 if (exists $all_perms->{$flag}) {
163 foreach my $sub_perm (sort keys %{ $all_perms->{$flag} }) {
164 push @sub_perm_loop, {
165 id
=> "${flag}_$sub_perm",
166 perm
=> "$flag:$sub_perm",
169 } unless exists $user_perms->{$flag} and exists $user_perms->{$flag}->{$sub_perm};
173 $row{expand
} = $expand_parent;
174 if ($#sub_perm_loop > -1) {
175 $row{sub_perm_loop
} = \
@sub_perm_loop;
180 if ( $patron->is_child ) {
181 my $patron_categories = Koha
::Patron
::Categories
->search_limited({ category_type
=> 'A' }, {order_by
=> ['categorycode']});
182 $template->param( 'CATCODE_MULTI' => 1) if $patron_categories->count > 1;
183 $template->param( 'catcode' => $patron_categories->next->categorycode ) if $patron_categories->count == 1;
186 if (C4
::Context
->preference('ExtendedPatronAttributes')) {
187 my $attributes = GetBorrowerAttributes
($bor->{'borrowernumber'});
189 ExtendedPatronAttributes
=> 1,
190 extendedattributes
=> $attributes
198 Koha
::Token
->new->generate_csrf( { session_id
=> scalar $input->cookie('CGISESSID'), } ),
201 output_html_with_http_headers
$input, $cookie, $template->output;