Bug 19531: When saving patron record do not redirect to circ if not authorised
[koha.git] / tools / letter.pl
blobd0c52c2120c291e65acb3fd5a8a15ba29116a42c
1 #!/usr/bin/perl
3 # Copyright 2000-2002 Katipo Communications
5 # This file is part of Koha.
7 # Koha is free software; you can redistribute it and/or modify it
8 # under the terms of the GNU General Public License as published by
9 # the Free Software Foundation; either version 3 of the License, or
10 # (at your option) any later version.
12 # Koha is distributed in the hope that it will be useful, but
13 # WITHOUT ANY WARRANTY; without even the implied warranty of
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 # GNU General Public License for more details.
17 # You should have received a copy of the GNU General Public License
18 # along with Koha; if not, see <http://www.gnu.org/licenses>.
20 =head1 tools/letter.pl
22 ALGO :
23 this script use an $op to know what to do.
24 if $op is empty or none of the values listed below,
25 - the default screen is built (with all or filtered (if search string is set) records).
26 - the user can click on add, modify or delete record.
27 - filtering is done on the code field
28 if $op=add_form
29 - if primary key (module + code) exists, this is a modification,so we read the required record
30 - builds the add/modify form
31 if $op=add_validate
32 - the user has just send data, so we create/modify the record
33 if $op=delete_form
34 - we show the record selected and ask for confirmation
35 if $op=delete_confirm
36 - we delete the designated record
38 =cut
40 # TODO This script drives the CRUD operations on the letter table
41 # The DB interaction should be handled by calls to C4/Letters.pm
43 use strict;
44 use warnings;
45 use CGI qw ( -utf8 );
46 use C4::Auth;
47 use C4::Context;
48 use C4::Output;
49 use C4::Letters;
50 use C4::Members::Attributes;
52 # $protected_letters = protected_letters()
53 # - return a hashref of letter_codes representing letters that should never be deleted
54 sub protected_letters {
55 my $dbh = C4::Context->dbh;
56 my $codes = $dbh->selectall_arrayref(q{SELECT DISTINCT letter_code FROM message_transports});
57 return { map { $_->[0] => 1 } @{$codes} };
60 our $input = new CGI;
61 my $searchfield = $input->param('searchfield');
62 my $script_name = '/cgi-bin/koha/tools/letter.pl';
63 our $branchcode = $input->param('branchcode');
64 $branchcode = '' if defined $branchcode and $branchcode eq '*';
65 my $code = $input->param('code');
66 my $module = $input->param('module') || '';
67 my $content = $input->param('content');
68 my $op = $input->param('op') || '';
69 my $redirect = $input->param('redirect');
70 my $dbh = C4::Context->dbh;
72 our ( $template, $borrowernumber, $cookie, $staffflags ) = get_template_and_user(
74 template_name => 'tools/letter.tt',
75 query => $input,
76 type => 'intranet',
77 authnotrequired => 0,
78 flagsrequired => { tools => 'edit_notices' },
79 debug => 1,
83 our $my_branch = C4::Context->preference("IndependentBranches") && !$staffflags->{'superlibrarian'}
84 ? C4::Context->userenv()->{'branch'}
85 : undef;
86 # we show only the TMPL_VAR names $op
88 $template->param(
89 independant_branch => $my_branch,
90 script_name => $script_name,
91 searchfield => $searchfield,
92 branchcode => $branchcode,
93 action => $script_name
96 if ( $op eq 'add_validate' or $op eq 'copy_validate' ) {
97 add_validate();
98 if( $redirect eq "just_save" ){
99 print $input->redirect("/cgi-bin/koha/tools/letter.pl?op=add_form&branchcode=$branchcode&module=$module&code=$code&redirect=done");
100 exit;
101 } else {
102 $op = q{}; # we return to the default screen for the next operation
105 if ($op eq 'copy_form') {
106 my $oldbranchcode = $input->param('oldbranchcode') || q||;
107 my $branchcode = $input->param('branchcode');
108 add_form($oldbranchcode, $module, $code);
109 $template->param(
110 oldbranchcode => $oldbranchcode,
111 branchcode => $branchcode,
112 copying => 1,
113 modify => 0,
116 elsif ( $op eq 'add_form' ) {
117 add_form($branchcode, $module, $code);
119 elsif ( $op eq 'delete_confirm' ) {
120 delete_confirm($branchcode, $module, $code);
122 elsif ( $op eq 'delete_confirmed' ) {
123 delete_confirmed($branchcode, $module, $code);
124 $op = q{}; # next operation is to return to default screen
126 else {
127 default_display($branchcode,$searchfield);
130 # Do this last as delete_confirmed resets
131 if ($op) {
132 $template->param($op => 1);
133 } else {
134 $template->param(no_op_set => 1);
137 output_html_with_http_headers $input, $cookie, $template->output;
139 sub add_form {
140 my ( $branchcode,$module, $code ) = @_;
142 my $letters;
143 # if code has been passed we can identify letter and its an update action
144 if ($code) {
145 $letters = C4::Letters::GetLetterTemplates(
147 branchcode => $branchcode,
148 module => $module,
149 code => $code,
154 my $message_transport_types = GetMessageTransportTypes();
155 my $templates = { map { $_ => { message_transport_type => $_ } } sort @$message_transport_types };
156 my %letters = ( default => { templates => $templates } );
158 if ( C4::Context->preference('TranslateNotices') ) {
159 my $translated_languages =
160 C4::Languages::getTranslatedLanguages( 'opac',
161 C4::Context->preference('template') );
162 for my $language (@$translated_languages) {
163 for my $sublanguage( @{ $language->{sublanguages_loop} } ) {
164 if ( $language->{plural} ) {
165 $letters{ $sublanguage->{rfc4646_subtag} } = {
166 description => $sublanguage->{native_description}
167 . ' '
168 . $sublanguage->{region_description} . ' ('
169 . $sublanguage->{rfc4646_subtag} . ')',
170 templates => { %$templates },
173 else {
174 $letters{ $sublanguage->{rfc4646_subtag} } = {
175 description => $sublanguage->{native_description}
176 . ' ('
177 . $sublanguage->{rfc4646_subtag} . ')',
178 templates => { %$templates },
183 $template->param( languages => $translated_languages );
185 if ($letters) {
186 $template->param(
187 modify => 1,
188 code => $code,
190 my $first_flag_name = 1;
191 my ( $lang, @templates );
192 # The letter name is contained into each mtt row.
193 # So we can only sent the first one to the template.
194 for my $letter ( @$letters ) {
195 # The letter_name
196 if ( $first_flag_name and $letter->{name} ) {
197 $template->param(
198 letter_name=> $letter->{name},
200 $first_flag_name = 0;
203 my $lang = $letter->{lang};
204 my $mtt = $letter->{message_transport_type};
205 $letters{ $lang }{templates}{$mtt} = {
206 message_transport_type => $letter->{message_transport_type},
207 is_html => $letter->{is_html},
208 title => $letter->{title},
209 content => $letter->{content} // '',
213 else {
214 $template->param( adding => 1 );
217 $template->param(
218 letters => \%letters,
221 my $field_selection;
222 push @{$field_selection}, add_fields('branches');
223 if ($module eq 'reserves') {
224 push @{$field_selection}, add_fields('borrowers', 'reserves', 'biblio', 'biblioitems', 'items');
226 elsif ( $module eq 'acquisition' ) {
227 push @{$field_selection}, add_fields('aqbooksellers', 'aqorders', 'biblio', 'items');
229 elsif ($module eq 'claimacquisition' || $module eq 'orderacquisition') {
230 push @{$field_selection}, add_fields('aqbooksellers', 'aqbasket', 'aqorders', 'biblio', 'biblioitems');
232 elsif ($module eq 'claimissues') {
233 push @{$field_selection}, add_fields('aqbooksellers', 'serial', 'subscription');
234 push @{$field_selection},
236 value => q{},
237 text => '---BIBLIO---'
239 foreach(qw(title author serial)) {
240 push @{$field_selection}, {value => "biblio.$_", text => ucfirst $_ };
243 elsif ($module eq 'serial') {
244 push @{$field_selection}, add_fields('branches', 'biblio', 'biblioitems', 'borrowers', 'subscription', 'serial');
246 elsif ($module eq 'suggestions') {
247 push @{$field_selection}, add_fields('suggestions', 'borrowers', 'biblio');
249 else {
250 push @{$field_selection}, add_fields('biblio','biblioitems'),
251 add_fields('items'),
252 {value => 'items.content', text => 'items.content'},
253 {value => 'items.fine', text => 'items.fine'},
254 add_fields('borrowers');
255 if ($module eq 'circulation') {
256 push @{$field_selection}, add_fields('opac_news');
260 if ( $module eq 'circulation' and $code and $code eq "CHECKIN" ) {
261 push @{$field_selection}, add_fields('old_issues');
262 } else {
263 push @{$field_selection}, add_fields('issues');
266 if ( $module eq 'circulation' and $code =~ /^AR_/ ) {
267 push @{$field_selection}, add_fields('article_requests');
271 $template->param(
272 module => $module,
273 SQLfieldnames => $field_selection,
274 branchcode => $branchcode,
276 return;
279 sub add_validate {
280 my $dbh = C4::Context->dbh;
281 my $branchcode = $input->param('branchcode');
282 my $module = $input->param('module');
283 my $oldmodule = $input->param('oldmodule');
284 my $code = $input->param('code');
285 my $name = $input->param('name');
286 my @mtt = $input->multi_param('message_transport_type');
287 my @title = $input->multi_param('title');
288 my @content = $input->multi_param('content');
289 my @lang = $input->multi_param('lang');
290 for my $mtt ( @mtt ) {
291 my $is_html = $input->param("is_html_$mtt");
292 my $title = shift @title;
293 my $content = shift @content;
294 my $lang = shift @lang;
295 my $letter = C4::Letters::getletter( $oldmodule, $code, $branchcode, $mtt, $lang );
297 # getletter can return the default letter even if we pass a branchcode
298 # If we got the default one and we needed the specific one, we didn't get the one we needed!
299 if ( $letter and $branchcode and $branchcode ne $letter->{branchcode} ) {
300 $letter = undef;
302 unless ( $title and $content ) {
303 # Delete this mtt if no title or content given
304 delete_confirmed( $branchcode, $oldmodule, $code, $mtt, $lang );
305 next;
307 elsif ( $letter and $letter->{message_transport_type} eq $mtt and $letter->{lang} eq $lang ) {
308 $dbh->do(
310 UPDATE letter
311 SET branchcode = ?, module = ?, name = ?, is_html = ?, title = ?, content = ?, lang = ?
312 WHERE branchcode = ? AND module = ? AND code = ? AND message_transport_type = ?
314 undef,
315 $branchcode || '', $module, $name, $is_html || 0, $title, $content, $lang,
316 $branchcode, $oldmodule, $code, $mtt
318 } else {
319 $dbh->do(
320 q{INSERT INTO letter (branchcode,module,code,name,is_html,title,content,message_transport_type, lang) VALUES (?,?,?,?,?,?,?,?,?)},
321 undef,
322 $branchcode || '', $module, $code, $name, $is_html || 0, $title, $content, $mtt, $lang
326 # set up default display
327 default_display($branchcode);
328 return 1;
331 sub delete_confirm {
332 my ($branchcode, $module, $code) = @_;
333 my $dbh = C4::Context->dbh;
334 my $letter = C4::Letters::getletter($module, $code, $branchcode);
335 my @values = values %$letter;
336 $template->param(
337 letter => $letter,
339 return;
342 sub delete_confirmed {
343 my ($branchcode, $module, $code, $mtt, $lang) = @_;
344 C4::Letters::DelLetter(
346 branchcode => $branchcode || '',
347 module => $module,
348 code => $code,
349 mtt => $mtt,
350 lang => $lang,
353 # setup default display for screen
354 default_display($branchcode);
355 return;
358 sub retrieve_letters {
359 my ($branchcode, $searchstring) = @_;
361 $branchcode = $my_branch if $branchcode && $my_branch;
363 my $dbh = C4::Context->dbh;
364 my ($sql, @where, @args);
365 $sql = "SELECT branchcode, module, code, name, branchname
366 FROM letter
367 LEFT OUTER JOIN branches USING (branchcode)
369 if ($searchstring && $searchstring=~m/(\S+)/) {
370 $searchstring = $1 . q{%};
371 push @where, 'code LIKE ?';
372 push @args, $searchstring;
374 elsif ($branchcode) {
375 push @where, 'branchcode = ?';
376 push @args, $branchcode || '';
378 elsif ($my_branch) {
379 push @where, "(branchcode = ? OR branchcode = '')";
380 push @args, $my_branch;
383 $sql .= " WHERE ".join(" AND ", @where) if @where;
384 $sql .= " GROUP BY branchcode,module,code";
385 $sql .= " ORDER BY module, code, branchcode";
387 return $dbh->selectall_arrayref($sql, { Slice => {} }, @args);
390 sub default_display {
391 my ($branchcode, $searchfield) = @_;
393 unless ( defined $branchcode ) {
394 if ( C4::Context->preference('DefaultToLoggedInLibraryNoticesSlips') ) {
395 $branchcode = C4::Context::mybranch();
399 if ( $searchfield ) {
400 $template->param( search => 1 );
402 my $results = retrieve_letters($branchcode,$searchfield);
404 my $loop_data = [];
405 my $protected_letters = protected_letters();
406 foreach my $row (@{$results}) {
407 $row->{protected} = !$row->{branchcode} && $protected_letters->{ $row->{code} };
408 push @{$loop_data}, $row;
412 $template->param(
413 letter => $loop_data,
414 branchcode => $branchcode,
418 sub add_fields {
419 my @tables = @_;
420 my @fields = ();
422 for my $table (@tables) {
423 push @fields, get_columns_for($table);
426 return @fields;
429 sub get_columns_for {
430 my $table = shift;
431 # FIXME untranslatable
432 my %column_map = (
433 aqbooksellers => '---BOOKSELLERS---',
434 aqorders => '---ORDERS---',
435 serial => '---SERIALS---',
436 reserves => '---HOLDS---',
437 suggestions => '---SUGGESTIONS---',
439 my @fields = ();
440 if (exists $column_map{$table} ) {
441 push @fields, {
442 value => q{},
443 text => $column_map{$table} ,
446 else {
447 my $tlabel = '---' . uc $table;
448 $tlabel.= '---';
449 push @fields, {
450 value => q{},
451 text => $tlabel,
455 my $sql = "SHOW COLUMNS FROM $table";# TODO not db agnostic
456 my $table_prefix = $table . q|.|;
457 my $rows = C4::Context->dbh->selectall_arrayref($sql, { Slice => {} });
458 for my $row (@{$rows}) {
459 next if $row->{'Field'} eq 'timestamp'; # this is really an irrelevant field and there may be other common fields that should be excluded from the list
460 push @fields, {
461 value => $table_prefix . $row->{Field},
462 text => $table_prefix . $row->{Field},
465 if ($table eq 'borrowers') {
466 if ( my $attributes = C4::Members::Attributes::GetAttributes() ) {
467 foreach (@$attributes) {
468 push @fields, {
469 value => "borrower-attribute:$_",
470 text => "attribute:$_",
475 return @fields;