<?php
-# function mask_fields($list)
-# {
-# $ret = array();
-#
-# foreach ($list as $field => $data)
-# $ret[] = $field;
-#
-# return $ret;
-# }
+function check_edit($name)
+{
+ $sql = sprintf("SELECT sys_mask.id,edit FROM sys_mask "
+ . "JOIN sys_group_mask ON sys_mask.id = sys_group_mask.mask "
+ . "WHERE gid = %d AND fname = '%s' "
+ . "ORDER BY edit DESC LIMIT 1",
+ $_SESSION['sys']['group'], pg_escape_string($name));
+
+ $sth = pg_query($sql);
+
+ if ($sth === false) return false;
+
+ $row = pg_fetch_assoc($sth);
+ if ($row === false) return false;
+
+ if ($row['edit'] == '0')
+ return false;
+
+ return true;
+}
function build_form($name, $mask)
{
global $jscode;
$ret = array();
- $jscode[] = 'Rico.writeDebugMsg = function(msg, resetFlag) {};';
-
$opts = array("click: gridDrillDown",
"menuEvent: 'contextmenu'",
"highlightElem: 'menuRow'");
function build_mask($name, $mask)
{
- $grid = build_grid($name, $mask);
+ global $jscode;
+ $jscode[] = 'Rico.writeDebugMsg = function(msg, resetFlag) {};';
+
+ if (array_key_exists('list', $mask))
+ $grid = build_grid($name, $mask);
+ else
+ $grid = array();
+
$status = array('<span id="status"></span><br>');
if (array_key_exists('details', $mask))
else
$select = array();
- if (array_key_exists('edit', $mask))
+ if (array_key_exists('edit', $mask) && check_edit($name))
$edit = build_form($name, $mask);
else
$edit = array();
$head = array();
$head[] = sprintf('<h3>%s</h3>', $title);
- $head[] = '<div class="right">';
+
+ if (array_key_exists('html', $mask) &&
+ !array_key_exists('details', $mask) &&
+ !array_key_exists('select', $mask) &&
+ !array_key_exists('edit', $mask))
+ return array_merge($head, array($mask['html']),$status);
return array_merge($head,
+ array('<div class="right">'),
$grid,
array('</div>','<div class="left">'),
$details,
$jsfiles[] = 'lib/functions.js';
$jsfiles[] = 'lib/rico/rico.js';
- if (array_key_exists('table',$mask) && array_key_exists('list',$mask))
+ if (array_key_exists('table',$mask))
$ret = build_mask($name, $mask);
return sprintf('<span id="source" style="display: none;">%s</span>', $_GET['mask'])