interface/usergroup/user_admin.php

   1 <?php
   2 // This program is free software; you can redistribute it and/or
   3 // modify it under the terms of the GNU General Public License
   4 // as published by the Free Software Foundation; either version 2
   5 // of the License, or (at your option) any later version.
   6 require_once("../globals.php");
   7 require_once("../../library/acl.inc");
   8 require_once("$srcdir/sql.inc");
   9 require_once("$srcdir/calendar.inc");
  10 require_once("$srcdir/formdata.inc.php");
  11 require_once("$srcdir/options.inc.php");
  12 require_once(dirname(__FILE__) . "/../../library/classes/WSProvider.class.php");
  13 require_once("$srcdir/erx_javascript.inc.php");
  14
  15 if (!$_GET["id"] || !acl_check('admin', 'users'))
  16   exit();
  17
  18 if ($_GET["mode"] == "update") {
  19   if ($_GET["username"]) {
  20     // $tqvar = addslashes(trim($_GET["username"]));
  21     $tqvar = trim(formData('username','G'));
  22     $user_data = mysql_fetch_array(sqlStatement("select * from users where id={$_GET["id"]}"));
  23     sqlStatement("update users set username='$tqvar' where id={$_GET["id"]}");
  24     sqlStatement("update groups set user='$tqvar' where user='". $user_data["username"]  ."'");
  25     //echo "query was: " ."update groups set user='$tqvar' where user='". $user_data["username"]  ."'" ;
  26   }
  27   if ($_GET["taxid"]) {
  28     $tqvar = formData('taxid','G');
  29     sqlStatement("update users set federaltaxid='$tqvar' where id={$_GET["id"]}");
  30   }
  31   if ($_GET["drugid"]) {
  32     $tqvar = formData('drugid','G');
  33     sqlStatement("update users set federaldrugid='$tqvar' where id={$_GET["id"]}");
  34   }
  35   if ($_GET["upin"]) {
  36     $tqvar = formData('upin','G');
  37     sqlStatement("update users set upin='$tqvar' where id={$_GET["id"]}");
  38   }
  39   if ($_GET["npi"]) {
  40     $tqvar = formData('npi','G');
  41     sqlStatement("update users set npi='$tqvar' where id={$_GET["id"]}");
  42   }
  43   if ($_GET["taxonomy"]) {
  44     $tqvar = formData('taxonomy','G');
  45     sqlStatement("update users set taxonomy = '$tqvar' where id= {$_GET["id"]}");
  46   }
  47   if ($_GET["lname"]) {
  48     $tqvar = formData('lname','G');
  49     sqlStatement("update users set lname='$tqvar' where id={$_GET["id"]}");
  50   }
  51   if ($_GET["job"]) {
  52     $tqvar = formData('job','G');
  53     sqlStatement("update users set specialty='$tqvar' where id={$_GET["id"]}");
  54   }
  55   if ($_GET["mname"]) {
  56           $tqvar = formData('mname','G');
  57           sqlStatement("update users set mname='$tqvar' where id={$_GET["id"]}");
  58   }
  59   if ($_GET["facility_id"]) {
  60           $tqvar = formData('facility_id','G');
  61           sqlStatement("update users set facility_id = '$tqvar' where id = {$_GET["id"]}");
  62           //(CHEMED) Update facility name when changing the id
  63           sqlStatement("UPDATE users, facility SET users.facility = facility.name WHERE facility.id = '$tqvar' AND users.id = {$_GET["id"]}");
  64           //END (CHEMED)
  65   }
  66   if ($GLOBALS['restrict_user_facility'] && $_GET["schedule_facility"]) {
  67           sqlStatement("delete from users_facility
  68             where tablename='users'
  69             and table_id={$_GET["id"]}
  70             and facility_id not in (" . implode(",", $_GET['schedule_facility']) . ")");
  71           foreach($_GET["schedule_facility"] as $tqvar) {
  72       sqlStatement("replace into users_facility set
  73                     facility_id = '$tqvar',
  74                     tablename='users',
  75                     table_id = {$_GET["id"]}");
  76     }
  77   }
  78   if ($_GET["fname"]) {
  79           $tqvar = formData('fname','G');
  80           sqlStatement("update users set fname='$tqvar' where id={$_GET["id"]}");
  81   }
  82   //(CHEMED) Calendar UI preference
  83   if ($_GET["cal_ui"]) {
  84           $tqvar = formData('cal_ui','G');
  85           sqlStatement("update users set cal_ui = '$tqvar' where id = {$_GET["id"]}");
  86
  87           // added by bgm to set this session variable if the current user has edited
  88           //   their own settings
  89           if ($_SESSION['authId'] == $_GET["id"]) {
  90             $_SESSION['cal_ui'] = $tqvar;
  91           }
  92   }
  93   //END (CHEMED) Calendar UI preference
  94
  95   if (isset($_GET['default_warehouse'])) {
  96     sqlStatement("UPDATE users SET default_warehouse = '" .
  97       formData('default_warehouse','G') .
  98       "' WHERE id = '" . formData('id','G') . "'");
  99   }
 100
 101   if (isset($_GET['irnpool'])) {
 102     sqlStatement("UPDATE users SET irnpool = '" .
 103       formData('irnpool','G') .
 104       "' WHERE id = '" . formData('id','G') . "'");
 105   }
 106
 107   if ($_GET["newauthPass"] && $_GET["newauthPass"] != "d41d8cd98f00b204e9800998ecf8427e") { // account for empty
 108     $tqvar = formData('newauthPass','G');
 109     sqlStatement("update users set password='$tqvar' where id={$_GET["id"]}");
 110   }
 111
 112   // for relay health single sign-on
 113   if ($_GET["ssi_relayhealth"]) {
 114     $tqvar = formData('ssi_relayhealth','G');
 115     sqlStatement("update users set ssi_relayhealth = '$tqvar' where id = {$_GET["id"]}");
 116   }
 117
 118   $tqvar  = $_GET["authorized"] ? 1 : 0;
 119   $actvar = $_GET["active"]     ? 1 : 0;
 120   $calvar = $_GET["calendar"]   ? 1 : 0;
 121
 122   sqlStatement("UPDATE users SET authorized = $tqvar, active = $actvar, " .
 123     "calendar = $calvar, see_auth = '" . $_GET['see_auth'] . "' WHERE " .
 124     "id = {$_GET["id"]}");
 125
 126   if ($_GET["comments"]) {
 127     $tqvar = formData('comments','G');
 128     sqlStatement("update users set info = '$tqvar' where id = {$_GET["id"]}");
 129   }
 130
 131   if (isset($phpgacl_location) && acl_check('admin', 'acl')) {
 132     // Set the access control group of user
 133     $user_data = mysql_fetch_array(sqlStatement("select username from users where id={$_GET["id"]}"));
 134     set_user_aro($_GET['access_group'], $user_data["username"],
 135       formData('fname','G'), formData('mname','G'), formData('lname','G'));
 136   }
 137
 138   $ws = new WSProvider($_GET['id']);
 139
 140   /*Dont move usergroup_admin (1).php just close window
 141   // On a successful update, return to the users list.
 142   include("usergroup_admin.php");
 143   exit(0);
 144   */    echo '
 145 <script type="text/javascript">
 146 <!--
 147 parent.$.fn.fancybox.close();
 148 //-->
 149 </script>
 150
 151         ';
 152 }
 153
 154 $res = sqlStatement("select * from users where id=?",array($_GET["id"]));
 155 for ($iter = 0;$row = sqlFetchArray($res);$iter++)
 156                 $result[$iter] = $row;
 157 $iter = $result[0];
 158
 159 ///
 160 if (isset($_POST["mode"])) {
 161         echo '
 162 <script type="text/javascript">
 163 <!--
 164 parent.$.fn.fancybox.close();
 165 //-->
 166 </script>
 167
 168         ';
 169 }
 170 ///
 171
 172 ?>
 173
 174 <html>
 175 <head>
 176
 177 <link rel="stylesheet" href="<?php echo $css_header; ?>" type="text/css">
 178 <script type="text/javascript" src="../../library/dialog.js"></script>
 179 <script type="text/javascript" src="../../library/js/jquery.1.3.2.js"></script>
 180 <script type="text/javascript" src="../../library/js/common.js"></script>
 181 <script type="text/javascript" src="../../library/js/crypt/jsbn.js"></script>
 182 <script type="text/javascript" src="../../library/js/crypt/rsa.js"></script>
 183
 184 <script src="checkpwd_validation.js" type="text/javascript"></script>
 185
 186 <script language="JavaScript">
 187 function checkChange()
 188 {
 189   alert("<?php echo addslashes(xl('If you change e-RX Role for ePrescription, it may affect the ePrescription workflow. If you face any difficulty, contact your ePrescription vendor.'));?>");
 190 }
 191 function submitform() {
 192         top.restoreSession();
 193         var flag=0;
 194         function trimAll(sString)
 195         {
 196                 while (sString.substring(0,1) == ' ')
 197                 {
 198                         sString = sString.substring(1, sString.length);
 199                 }
 200                 while (sString.substring(sString.length-1, sString.length) == ' ')
 201                 {
 202                         sString = sString.substring(0,sString.length-1);
 203                 }
 204                 return sString;
 205         }
 206         if(trimAll(document.getElementById('fname').value) == ""){
 207                 alert("<?php xl('Required field missing: Please enter the First name','e');?>");
 208                 document.getElementById('fname').style.backgroundColor="red";
 209                 document.getElementById('fname').focus();
 210                 return false;
 211         }
 212         if(trimAll(document.getElementById('lname').value) == ""){
 213                 alert("<?php xl('Required field missing: Please enter the Last name','e');?>");
 214                 document.getElementById('lname').style.backgroundColor="red";
 215                 document.getElementById('lname').focus();
 216                 return false;
 217         }
 218         if(document.forms[0].clearPass.value!="")
 219         {
 220                 //Checking for the strong password if the 'secure password' feature is enabled
 221                 if(document.forms[0].secure_pwd.value == 1)
 222                 {
 223                     var pwdresult = passwordvalidate(document.forms[0].clearPass.value);
 224                     if(pwdresult == 0) {
 225                             flag=1;
 226                             alert("<?php echo xl('The password must be at least eight characters, and should'); echo '\n'; echo xl('contain at least three of the four following items:'); echo '\n'; echo xl('A number'); echo '\n'; echo xl('A lowercase letter'); echo '\n'; echo xl('An uppercase letter'); echo '\n'; echo xl('A special character');echo '('; echo xl('not a letter or number'); echo ').'; echo '\n'; echo xl('For example:'); echo ' healthCare@09'; ?>");
 227                             return false;
 228                     }
 229                 }
 230
 231         }//If pwd null ends here
 232         //Request to reset the user password if the user was deactived once the password expired.
 233         if((document.forms[0].pwd_expires.value != 0) && (document.forms[0].clearPass.value == "")) {
 234                 if((document.forms[0].user_type.value != "Emergency Login") && (document.forms[0].pre_active.value == 0) && (document.forms[0].active.checked == 1) && (document.forms[0].grace_time.value != "") && (document.forms[0].current_date.value) > (document.forms[0].grace_time.value))
 235                 {
 236                         flag=1;
 237                         document.getElementById('error_message').innerHTML="<?php xl('Please reset the password.','e') ?>";
 238                 }
 239         }
 240
 241   if (document.forms[0].access_group_id) {
 242     var sel = getSelected(document.forms[0].access_group_id.options);
 243     for (var item in sel) {
 244       if (sel[item].value == "Emergency Login") {
 245         document.forms[0].check_acl.value = 1;
 246       }
 247     }
 248   }
 249
 250           <?php if($GLOBALS['erx_enable']){ ?>
 251         alertMsg='';
 252         f=document.forms[0];
 253         for(i=0;i<f.length;i++){
 254           if(f[i].type=='text' && f[i].value)
 255           {
 256             if(f[i].name == 'fname' || f[i].name == 'mname' || f[i].name == 'lname')
 257             {
 258               alertMsg += checkLength(f[i].name,f[i].value,35);
 259               alertMsg += checkUsername(f[i].name,f[i].value);
 260             }
 261             else if(f[i].name == 'taxid')
 262             {
 263               alertMsg += checkLength(f[i].name,f[i].value,10);
 264               alertMsg += checkFederalEin(f[i].name,f[i].value);
 265             }
 266             else if(f[i].name == 'state_license_number')
 267             {
 268               alertMsg += checkLength(f[i].name,f[i].value,10);
 269               alertMsg += checkStateLicenseNumber(f[i].name,f[i].value);
 270             }
 271             else if(f[i].name == 'npi')
 272             {
 273               alertMsg += checkLength(f[i].name,f[i].value,10);
 274               alertMsg += checkTaxNpiDea(f[i].name,f[i].value);
 275             }
 276             else if(f[i].name == 'drugid')
 277             {
 278               alertMsg += checkLength(f[i].name,f[i].value,30);
 279               alertMsg += checkAlphaNumeric(f[i].name,f[i].value);
 280             }
 281           }
 282         }
 283         if(alertMsg)
 284         {
 285           alert(alertMsg);
 286           return false;
 287         }
 288         <?php } ?>
 289         if(flag == 0){
 290                 if($("[name='adminPass']").val().length>0)
 291                     {
 292                         $.ajax({
 293                             url: '<?php echo $webroot; ?>/library/ajax/rsa_request.php',
 294                             async: false,
 295                             success: function(public_key)
 296                             {
 297                                 var key = RSA.getPublicKey(public_key);
 298                                 $("input[name='userPass']").val(RSA.encrypt($("input[name='adminPass']").val(), key));
 299                                 $("input[name='newauthPass']").val(RSA.encrypt($("input[name='clearPass']").val(), key));
 300                                 $("input[name='pk']").val(public_key);
 301                                 $('input[name="adminPass"]').val('');
 302                                 $('input[name="clearPass"]').val('');
 303                                 document.forms[0].submit();
 304                                 parent.$.fn.fancybox.close();
 305                             }
 306
 307                         });
 308
 309                     }
 310                     else
 311                     {
 312                         document.forms[0].submit();
 313                         parent.$.fn.fancybox.close();
 314                     }
 315         }
 316 }
 317 //Getting the list of selected item in ACL
 318 function getSelected(opt) {
 319          var selected = new Array();
 320             var index = 0;
 321             for (var intLoop = 0; intLoop < opt.length; intLoop++) {
 322                if ((opt[intLoop].selected) ||
 323                    (opt[intLoop].checked)) {
 324                   index = selected.length;
 325                   selected[index] = new Object;
 326                   selected[index].value = opt[intLoop].value;
 327                   selected[index].index = intLoop;
 328                }
 329             }
 330             return selected;
 331          }
 332
 333 function authorized_clicked() {
 334  var f = document.forms[0];
 335  f.calendar.disabled = !f.authorized.checked;
 336  f.calendar.checked  =  f.authorized.checked;
 337 }
 338
 339 </script>
 340
 341 </head>
 342 <body class="body_top">
 343 <table><tr><td>
 344 <span class="title"><?php xl('Edit User','e'); ?></span>&nbsp;
 345 </td><td>
 346     <a class="css_button" name='form_save' id='form_save' href='#' onclick='return submitform()'> <span><?php xl('Save','e');?></span> </a>
 347         <a class="css_button" id='cancel' href='#'><span><?php xl('Cancel','e');?></span></a>
 348 </td></tr>
 349 </table>
 350 <br>
 351 <FORM NAME="user_form" METHOD="GET" ACTION="usergroup_admin.php" target="_parent" onsubmit='return top.restoreSession()'>
 352
 353 <input type=hidden name="pwd_expires" value="<?php echo $GLOBALS['password_expiration_days']; ?>" >
 354 <input type=hidden name="pre_active" value="<?php echo $iter["active"]; ?>" >
 355 <input type=hidden name="exp_date" value="<?php echo $iter["pwd_expiration_date"]; ?>" >
 356 <input type=hidden name="get_admin_id" value="<?php echo $GLOBALS['Emergency_Login_email']; ?>" >
 357 <input type=hidden name="admin_id" value="<?php echo $GLOBALS['Emergency_Login_email_id']; ?>" >
 358 <input type=hidden name="check_acl" value="">
 359 <?php
 360 //Calculating the grace time
 361 $current_date = date("Y-m-d");
 362 $password_exp=$iter["pwd_expiration_date"];
 363 if($password_exp != "0000-00-00")
 364   {
 365     $grace_time1 = date("Y-m-d", strtotime($password_exp . "+".$GLOBALS['password_grace_time'] ."days"));
 366   }
 367 ?>
 368 <input type=hidden name="current_date" value="<?php echo strtotime($current_date); ?>" >
 369 <input type=hidden name="grace_time" value="<?php echo strtotime($grace_time1); ?>" >
 370 <!--  Get the list ACL for the user -->
 371 <?php
 372 $acl_name=acl_get_group_titles($iter["username"]);
 373 $bg_name='';
 374 $bg_count=count($acl_name);
 375    for($i=0;$i<$bg_count;$i++){
 376       if($acl_name[$i] == "Emergency Login")
 377        $bg_name=$acl_name[$i];
 378       }
 379 ?>
 380 <input type=hidden name="user_type" value="<?php echo $bg_name; ?>" >
 381
 382 <TABLE border=0 cellpadding=0 cellspacing=0>
 383 <TR>
 384     <TD style="width:180px;"><span class=text><?php xl('Username','e'); ?>: </span></TD>
 385     <TD style="width:270px;"><input type=entry name=username style="width:150px;" value="<?php echo $iter["username"]; ?>" disabled></td>
 386     <TD style="width:200px;"><span class=text><?php xl('Your Password','e'); ?>: </span></TD>
 387     <TD class='text' style="width:280px;"><input type='password' name=adminPass style="width:150px;"  value="" autocomplete='off'><font class="mandatory">*</font></TD>
 388 </TR>
 389 <TR>
 390     <TD style="width:180px;"><span class=text></span></TD>
 391     <TD style="width:270px;"></td>
 392     <TD style="width:200px;"><span class=text><?php xl('User\'s New Password','e'); ?>: </span></TD>
 393     <TD class='text' style="width:280px;">    <input type=text name=clearPass style="width:150px;"  value=""><font class="mandatory">*</font></td>
 394 </TR>
 395
 396
 397 <TR height="30" style="valign:middle;">
 398 <td><span class="text">&nbsp;</span></td><td>&nbsp;</td>
 399 <td colspan="2"><span class=text><?php xl('Provider','e'); ?>:
 400  <input type="checkbox" name="authorized" onclick="authorized_clicked()"<?php
 401   if ($iter["authorized"]) echo " checked"; ?> />
 402  &nbsp;&nbsp;<span class='text'><?php xl('Calendar','e'); ?>:
 403  <input type="checkbox" name="calendar"<?php
 404   if ($iter["calendar"]) echo " checked";
 405   if (!$iter["authorized"]) echo " disabled"; ?> />
 406  &nbsp;&nbsp;<span class='text'><?php xl('Active','e'); ?>:
 407  <input type="checkbox" name="active"<?php if ($iter["active"]) echo " checked"; ?> />
 408 </TD>
 409 </TR>
 410
 411 <TR>
 412 <TD><span class=text><?php xl('First Name','e'); ?>: </span></TD>
 413 <TD><input type=entry name=fname id=fname style="width:150px;" value="<?php echo $iter["fname"]; ?>"><span class="mandatory">&nbsp;*</span></td>
 414 <td><span class=text><?php xl('Middle Name','e'); ?>: </span></TD><td><input type=entry name=mname style="width:150px;"  value="<?php echo $iter["mname"]; ?>"></td>
 415 </TR>
 416
 417 <TR>
 418 <td><span class=text><?php xl('Last Name','e'); ?>: </span></td><td><input type=entry name=lname id=lname style="width:150px;"  value="<?php echo $iter["lname"]; ?>"><span class="mandatory">&nbsp;*</span></td>
 419 <td><span class=text><?php xl('Default Facility','e'); ?>: </span></td><td><select name=facility_id style="width:150px;" >
 420 <?php
 421 $fres = sqlStatement("select * from facility where service_location != 0 order by name");
 422 if ($fres) {
 423 for ($iter2 = 0; $frow = sqlFetchArray($fres); $iter2++)
 424                 $result[$iter2] = $frow;
 425 foreach($result as $iter2) {
 426 ?>
 427   <option value="<?php echo $iter2['id']; ?>" <?php if ($iter['facility_id'] == $iter2['id']) echo "selected"; ?>><?php echo htmlspecialchars($iter2['name']); ?></option>
 428 <?php
 429 }
 430 }
 431 ?>
 432 </select></td>
 433 </tr>
 434
 435 <?php if ($GLOBALS['restrict_user_facility']) { ?>
 436 <tr>
 437  <td colspan=2>&nbsp;</td>
 438  <td><span class=text><?php xl('Schedule Facilities:', 'e');?></td>
 439  <td>
 440   <select name="schedule_facility[]" multiple style="width:150px;" >
 441 <?php
 442   $userFacilities = getUserFacilities($_GET['id']);
 443   $ufid = array();
 444   foreach($userFacilities as $uf)
 445     $ufid[] = $uf['id'];
 446   $fres = sqlStatement("select * from facility where service_location != 0 order by name");
 447   if ($fres) {
 448     while($frow = sqlFetchArray($fres)):
 449 ?>
 450    <option <?php echo in_array($frow['id'], $ufid) || $frow['id'] == $iter['facility_id'] ? "selected" : null ?>
 451       value="<?php echo $frow['id'] ?>"><?php echo htmlspecialchars($frow['name']) ?></option>
 452 <?php
 453   endwhile;
 454 }
 455 ?>
 456   </select>
 457  </td>
 458 </tr>
 459 <?php } ?>
 460
 461 <TR>
 462 <TD><span class=text><?php xl('Federal Tax ID','e'); ?>: </span></TD><TD><input type=text name=taxid style="width:150px;"  value="<?php echo $iter["federaltaxid"]?>"></td>
 463 <TD><span class=text><?php xl('Federal Drug ID','e'); ?>: </span></TD><TD><input type=text name=drugid style="width:150px;"  value="<?php echo $iter["federaldrugid"]?>"></td>
 464 </TR>
 465
 466 <tr>
 467 <td><span class="text"><?php xl('UPIN','e'); ?>: </span></td><td><input type="text" name="upin" style="width:150px;" value="<?php echo $iter["upin"]?>"></td>
 468 <td class='text'><?php xl('See Authorizations','e'); ?>: </td>
 469 <td><select name="see_auth" style="width:150px;" >
 470 <?php
 471  foreach (array(1 => xl('None'), 2 => xl('Only Mine'), 3 => xl('All')) as $key => $value)
 472  {
 473   echo " <option value='$key'";
 474   if ($key == $iter['see_auth']) echo " selected";
 475   echo ">$value</option>\n";
 476  }
 477 ?>
 478 </select></td>
 479 </tr>
 480
 481 <tr>
 482 <td><span class="text"><?php xl('NPI','e'); ?>: </span></td><td><input type="text" name="npi" style="width:150px;"  value="<?php echo $iter["npi"]?>"></td>
 483 <td><span class="text"><?php xl('Job Description','e'); ?>: </span></td><td><input type="text" name="job" style="width:150px;"  value="<?php echo $iter["specialty"]?>"></td>
 484 </tr>
 485
 486 <?php if (!empty($GLOBALS['ssi']['rh'])) { ?>
 487 <tr>
 488 <td><span class="text"><?php xl('Relay Health ID', 'e'); ?>: </span></td>
 489 <td><input type="password" name="ssi_relayhealth" style="width:150px;"  value="<?php echo $iter["ssi_relayhealth"]; ?>"></td>
 490 </tr>
 491 <?php } ?>
 492
 493 <!-- (CHEMED) Calendar UI preference -->
 494 <tr>
 495 <td><span class="text"><?php xl('Taxonomy','e'); ?>: </span></td>
 496 <td><input type="text" name="taxonomy" style="width:150px;"  value="<?php echo $iter["taxonomy"]?>"></td>
 497 <td><span class="text"><?php xl('Calendar UI','e'); ?>: </span></td><td><select name="cal_ui" style="width:150px;" >
 498 <?php
 499  foreach (array(3 => xl('Outlook'), 1 => xl('Original'), 2 => xl('Fancy')) as $key => $value)
 500  {
 501   echo " <option value='$key'";
 502   if ($key == $iter['cal_ui']) echo " selected";
 503   echo ">$value</option>\n";
 504  }
 505 ?>
 506 </select></td>
 507 </tr>
 508 <!-- END (CHEMED) Calendar UI preference -->
 509
 510 <tr>
 511 <td><span class="text"><?php xl('State License Number','e'); ?>: </span></td>
 512 <td><input type="text" name="state_license_number" style="width:150px;"  value="<?php echo $iter["state_license_number"]?>"></td>
 513 <td class='text'><?php xl('NewCrop eRX Role','e'); ?>:</td>
 514 <td>
 515   <?php echo generate_select_list("erxrole", "newcrop_erx_role", $iter['newcrop_user_role'],'','--Select Role--','','','',array('style'=>'width:150px')); ?>
 516 </td>
 517 </tr>
 518
 519 <?php if ($GLOBALS['inhouse_pharmacy']) { ?>
 520 <tr>
 521  <td class="text"><?php xl('Default Warehouse','e'); ?>: </td>
 522  <td class='text'>
 523 <?php
 524 echo generate_select_list('default_warehouse', 'warehouse',
 525   $iter['default_warehouse'], '');
 526 ?>
 527  </td>
 528  <td class="text"><?php xl('Invoice Refno Pool','e'); ?>: </td>
 529  <td class='text'>
 530 <?php
 531 echo generate_select_list('irnpool', 'irnpool', $iter['irnpool'],
 532   xl('Invoice reference number pool, if used'));
 533 ?>
 534  </td>
 535 </tr>
 536 <?php } ?>
 537
 538 <?php
 539  // Collect the access control group of user
 540  if (isset($phpgacl_location) && acl_check('admin', 'acl')) {
 541 ?>
 542   <tr>
 543   <td class='text'><?php xl('Access Control','e'); ?>:</td>
 544   <td><select id="access_group_id" name="access_group[]" multiple style="width:150px;" >
 545   <?php
 546    $list_acl_groups = acl_get_group_title_list();
 547    $username_acl_groups = acl_get_group_titles($iter["username"]);
 548    foreach ($list_acl_groups as $value) {
 549     if (($username_acl_groups) && in_array($value,$username_acl_groups)) {
 550      // Modified 6-2009 by BM - Translate group name if applicable
 551      echo " <option value='$value' selected>" . xl_gacl_group($value) . "</option>\n";
 552     }
 553     else {
 554      // Modified 6-2009 by BM - Translate group name if applicable
 555      echo " <option value='$value'>" . xl_gacl_group($value) . "</option>\n";
 556     }
 557    }
 558   ?>
 559   </select></td>
 560   <td><span class=text><?php xl('Additional Info','e'); ?>:</span></td>
 561   <td><textarea style="width:150px;" name="comments" wrap=auto rows=4 cols=25><?php echo $iter["info"];?></textarea></td>
 562
 563   </tr>
 564   <tr height="20" valign="bottom">
 565   <td colspan="4" class="text">
 566   <font class="mandatory">*</font> <?php xl('You must enter your own password to change user passwords. Leave blank to keep password unchanged.','e'); ?>
 567 <!--
 568 Display red alert if entered password matched one of last three passwords/Display red alert if user password was expired and the user was inactivated previously
 569 -->
 570   <div class="redtext" id="error_message">&nbsp;</div>
 571   </td>
 572   </tr>
 573 <?php
 574  }
 575 ?>
 576 </table>
 577
 578 <INPUT TYPE="HIDDEN" NAME="id" VALUE="<?php echo $_GET["id"]; ?>">
 579 <INPUT TYPE="HIDDEN" NAME="mode" VALUE="update">
 580 <INPUT TYPE="HIDDEN" NAME="privatemode" VALUE="user_admin">
 581 <INPUT TYPE="HIDDEN" NAME="userPass" VALUE="">
 582 <INPUT TYPE="HIDDEN" NAME="newauthPass" VALUE="">
 583 <INPUT TYPE="HIDDEN" NAME="pk" VALUE="">
 584
 585 <INPUT TYPE="HIDDEN" NAME="secure_pwd" VALUE="<?php echo $GLOBALS['secure_password']; ?>">
 586 </FORM>
 587 <script language="JavaScript">
 588 $(document).ready(function(){
 589     $("#cancel").click(function() {
 590                   parent.$.fn.fancybox.close();
 591          });
 592
 593 });
 594 </script>
 595 </BODY>
 596
 597 </HTML>
 598
 599 <?php
 600 //  d41d8cd98f00b204e9800998ecf8427e == blank
 601 ?>