Noalyss_User Class Reference

Data & function about connected users. More...

Collaboration diagram for Noalyss_User:

Public Member Functions
	__construct ($p_cn, $p_id=-1, $repository=null)
	Create an user , load an existing one or if p_id == -1 search for the connected user.
	__toString ()
	Admin ()
	synomym for isAdmin,
	audit ($action='AUDIT', $p_module="")
	can_add_action ($p_profile)
	Check if the current user can add an action in the profile given in parameter.
	can_connect ()
	check the password and user
	can_delete_action ($dtoc)
	Check if the profile of the user can write AND delete for this profile.
	can_print ($p_action, $p_js=0)
	Check if the user can print (in menu_ref p_type_display=p) otherwise warn and exit.
	can_read_action ($dtoc)
	Check if the profile of the user can write for this profile.
	can_read_repo ($p_repo)
	Check if the profile of the user can read for this repository.
	can_request ($p_action, $p_js=0)
	Check if the user can access otherwise warn and exit.
	can_write_action ($dtoc)
	Check if the profile of the user can write for this profile.
	can_write_repo ($p_repo)
	Check if the profile of the user can write for this repository.
	Check ($silent=false, $from='')
	Check if user is active and exists in therepository Automatically redirect, it doesn't check if a user can access a folder.
	check_action ($p_action_id)
	Check if an user is allowed to do an action.
	check_dossier ($p_dossier_id, $silent=false)
	check if an user can access a folder, if he cannot display a dialog box and exit
	check_jrn ($p_jrn)
	check the access of an user on a ledger
	check_module ($p_module)
	Check if an user can access a module, return 1 if yes, otherwise 0 record in audit log This function works only if user is connected to a Folder.
	check_otp ($code)
	check that the OTP code is the one on smartphone returns false if the given does not match the OTP
	check_print ($p_action)
	Check if the user can print (in menu_ref p_type_display=p) otherwise warn and exit.
	generate_otp ()
	generate OTP secret to store in AC_USER.USE_OTP_SECRET
	get_access_mode ()
	access_mode tells what mode must be used : pc or mobile
	get_authent_method ()
	retrieve authent_method
	get_available_folder ($p_filter="")
	Get all the available folders for the users, checked with the security.
	get_available_repository ($p_access='R')
	return array of available repository
	get_exercice ()
	Return the year of current Periode it is the parm_periode.p_exercice col if an error occurs return 0.
	get_first_week_day ()
	first day in calendar
	get_folder_access ($p_dossier=0)
	return the access to a folder,
	get_ledger ($p_type='ALL', $p_access=3, $all=TRUE)
	get all the available ledgers for the current user
	get_ledger_access ($p_ledger)
	check that a user is valid and the access to the folder
	get_ledger_sql ($p_type='ALL', $p_access=3)
	return an sql condition for filtering the permitted ledger
	get_limit_current_exercice ()
	return the first date and the last date of the current exercice for the current user
	get_otp_secret ()
	get_periode ()
	Get the default periode from the user's preferences.
	get_preference ()
	Get the default user's preferences.
	get_profile ()
	return the profile (p_id)
	get_readable_profile ()
	return array of readable action_profile
	get_repository ()
	get the repository
	get_status_security_action ()
	Check the security on ledger for the user , it returns 1 if the security on ledgers is enabled, otherwise 0.
	get_status_security_ledger ()
	Check the security on ledger for the user , it returns 1 if the security on ledgers is enabled, otherwise 0.
	get_vat_code_preference ()
	Get preference , either the user see the numeric id for VAT or its code, if the preference doesn't exist by default , 0 is saved in ACCOUNT_REPOSITORY.
	get_writable_profile ()
	return array of writable action_profile
	getActive ()
	getAdmin ()
	getDb ()
	getEmail ()
	getFirstName ()
	getId ()
	getLogin ()
	getName ()
	getPassword ()
	getValid ()
	input_otp ($uuid="", $url="")
	FORM to enter the 6 digit enter by OTP.
	insert ()
	insert_default_global_pref ($p_type="", $p_value="")
	insert default pref if no parameter are given insert all the existing parameter otherwise only the requested
	is_double_identified ()
	check is the double authentication has been successful
	is_local_admin ($p_dossier=-1)
	Check if an user is an local administrator.
	isAdmin ()
	Check if an user is an admin and check also his password.
	load ()
	load_global_pref ()
	Get the global preferences from user_global_pref in the account_repository db.
	password_to_session ()
	store the password in session
	save ()
	save_email ($p_email)
	Save the password from PREFERENCE MODULE.
	save_global_preference ($key, $value)
	Save the preference , the scope is global, the settings are saved into account_repository.
	save_password ($p_pass1, $p_pass2)
	Save the password of the current user.
	save_profile ($p_id)
	send_code_otp ()
	send a code to the user and save the expected code + UUID in a table OTP_SEND_SECRET
	send_link_otp ($base_url=null)
	send an email with link to the user
	set_access_mode ($access_mode)
	access_mode tells what mode must be used : pc or mobile
	set_authent_method ($authent_method)
	set_folder_access ($db_id, $priv)
	save the access of a folder
	set_identified ()
	set_otp_secret ($otp_secret)
	set_periode ($p_periode)
	Set the selected periode in the user's preferences.
	set_repository (Database $repository)
	set the repository
	set_session_var ()
	put user_login into Postgres config (session), it can be used for tracking users activities
	set_status_security_action ($p_value)
	Set the flag in the table user_active_security.
	set_status_security_ledger ($p_value)
	Set the flag in the table user_active_security.
	setActive ($active)
	setAdmin ($admin)
	setDb ($db)
	setEmail ($email)
	setFirstName ($first_name)
	setId (int $id)
	setLogin (string $login)
	setName ($name)
	setPassword ($password)
	setValid (int $valid)
	show_dossier ($p_filtre="")
	Show all the available folder for the users at the login page.
	sql_readable_profile ()
	Compute the SQL string for the readable profile, the subselect for p_id , example p_id in $g_user->sql_readable_profile.
	sql_writable_profile ()
	Compute the SQL string for the writable profile, the subselect for p_id , example p_id in $g_user->sql_writable_profile.
	update_global_pref ($p_type, $p_value="")
	update default pref if value is not given then use the default value

Static Public Member Functions
static	audit_admin ($p_module, $db_repository=null)
	Audit action from the administration menu.
static	clean_session ()
	clean the sessions
static	get_list ($p_dossier, $db_repository=null)
	return an array with all the active users who can access $p_dossier including the global admin.
static	grant_admin_access ($p_login, $p_dossier, $db_repository=null)
	Grant access to folder, grant administrator profile , all the ledgers and all the action.
static	remove_inexistant_user ($p_dossier, $db_repository=null)
	cleansing : remove inexistant user
static	revoke_access ($p_login, $p_dossier, $db_repository=null)
	Remove a user and all his privileges So it cannot connect anymore and all his privileges are removed from the dossier.

Data Fields
	$access_mode
	MOBILE or PC depending if when connecting $login contains @mobile.
	$active
	1 active , 0 disables
	$admin
	is or is not admin
	$authent_method
	authentication method use for this user
	$db
	database connx to the folder NOT repository
	$email
	user's email
	$first_name
	$id
	in account_repository , ac_users.use_id
	$lang
	user's language
	$last_name
	user's last_name
	$login
	login lower case
	$name
	$password
	md5 of the password
	$theme
	user's CSS Theme
	$valid
	is or is not valid

Private Member Functions
	connect_user ()
	connect the user and set the $_SESSION variables if not set thanks the $_REQUEST
	set_default_periode ()

Private Attributes
	$otp_secret
	string use as secret for OTP
	$repository
	account_repository (\Database )

Detailed Description

Data & function about connected users.

Definition at line 34 of file noalyss_user.class.php.

Constructor & Destructor Documentation

__construct()

Noalyss_User::__construct	(		$p_cn,
			$p_id = -1,
			$repository = null )

Create an user , load an existing one or if p_id == -1 search for the connected user.

To have an empty user, give a p_id smaller than -1 or zero.

Parameters

$p_cn	DatabaseCore connection
$p_id	if -1 then load the current user, > 0 load the user , = 0 (or < -1 ) means an empty user
$repository	( \Database default null) database to repository, if null is given the database will be defined in config.inc.php

Definition at line 64 of file noalyss_user.class.php.

    {
        $this->db=$p_cn;
        if ( $repository == null ) {
            $this->repository=new Database(0);
        } else {
            $this->repository=$repository;
        }
        
        // if p_id is not set then check the connected user
        if ($p_id==-1)
        {
            $this->connect_user();
            $this->set_session_var();
        }
        else // if p_id is set get data of another user
        {
            $this->id=$p_id;
            $this->load();
        }
    }

References $p_id, $repository, connect_user(), db, load(), and set_session_var().

Here is the call graph for this function:

Member Function Documentation

__toString()

Noalyss_User::__toString

(

)

Definition at line 113 of file noalyss_user.class.php.

                                : string
    {
        return "User ".print_r($this,true);
    }

Admin()

Noalyss_User::Admin

(

)

synomym for isAdmin,

Deprecated

Definition at line 710 of file noalyss_user.class.php.

                    :int
    {
        return $this->isAdmin();
    }

audit()

Noalyss_User::audit	(		$action = 'AUDIT',
			$p_module = "" )

Definition at line 1432 of file noalyss_user.class.php.

    {
        global $audit;
        $http=new \HttpInput();
        if ($audit)
        {
            if ($p_module==""&&isset($_REQUEST['ac']))
            {
                $p_module=$_REQUEST['ac'];
            }
            $dossier=$http->request("gDossier","string",0);
            if ( $dossier != 0)
                $p_module.=" dossier : ".$dossier;
            
            $sql="insert into audit_connect (ac_user,ac_ip,ac_module,ac_url,ac_state) values ($1,$2,$3,$4,$5)";
 
            $this->repository->exec_sql($sql,
                    array(
                        $_SESSION[SESSION_KEY.'g_user'],
                        $_SERVER["REMOTE_ADDR"],
                        $p_module,
                        $_SERVER['REQUEST_URI'],
                        $action));
        }
    }

audit_admin()

static Noalyss_User::audit_admin ( $p_module, $db_repository = null )

static

Audit action from the administration menu.

Connect to the repository of the domain defined in config.inc.php

Parameters

$p_module	description of the action
$db_repository	( \Database default null) database to repository, if null is given the database will be defined in config.inc.php

Definition at line 1413 of file noalyss_user.class.php.

    {
        // connect to the repository
        if ( $db_repository == null ) {
            $repo_cnx=new Database(0);
        } else {
            $repo_cnx=$db_repository;
        }
        $sql="insert into audit_connect (ac_user,ac_ip,ac_module,ac_url,ac_state) values ($1,$2,$3,$4,$5)";
 
        $repo_cnx->exec_sql($sql,
                array(
                    $_SESSION[SESSION_KEY.'g_user'],
                    $_SERVER["REMOTE_ADDR"],
                    $p_module,
                    $_SERVER['REQUEST_URI'],
                    'ADMIN'));
    }

can_add_action()

Noalyss_User::can_add_action

(

$p_profile

)

Check if the current user can add an action in the profile given in parameter.

Parameters

type

$p_profile

profile.p_id = action_gestion.ag_dest

Returns

boolean

Definition at line 1553 of file noalyss_user.class.php.

    {
 
        $r=$this->db->get_value(' select count(*) 
                from user_sec_action_profile
                where p_granted=$2
                and p_id=$1', array($this->get_profile(), $p_profile));
        if ($r==0)
        {
            return false;
        }
        return true;
    }

References from, and p_id.

can_connect()

Noalyss_User::can_connect

(

)

check the password and user

Definition at line 120 of file noalyss_user.class.php.

    {
       
       $can_connect=$this->repository->get_value("select count(*) from ac_users 
                                   where use_active=1 and
                                   use_login=$1 and use_pass=$2",
               [$this->login,$this->password]);
       return $can_connect;
    }

Referenced by Check().

can_delete_action()

Noalyss_User::can_delete_action

(

$dtoc

)

Check if the profile of the user can write AND delete for this profile.

Parameters

$dtoc

action_gestion.ag_id

Returns

true if he can write otherwise false

Definition at line 1591 of file noalyss_user.class.php.

    {
        if ($this->Admin()==1)
            return TRUE;
        if ($this->get_status_security_action()==0)
            return TRUE;
        $profile=$this->get_profile();
        $r=$this->db->get_value(" select count(*) from action_gestion where ag_id=$1 and ag_dest in
                                (select p_granted from user_sec_action_profile where ua_right='W' and p_id=$2) ", array($dtoc, $profile));
        if ($r==0)
            return FALSE;
        return true;
    }

can_print()

Noalyss_User::can_print	(		$p_action,
			$p_js = 0 )

Check if the user can print (in menu_ref p_type_display=p) otherwise warn and exit.

Parameters

$p_action

requested action

Returns

nothing the program exits automatically

Definition at line 1111 of file noalyss_user.class.php.

    {
        if ($this->check_print($p_action)==0)
        {
            $this->audit('FAIL');
            if ($p_js==1)
            {
                echo create_script("alert_box(content[59])");
            }
            else
            {
                echo '<div class="redcontent">';
                echo '<h2 class="error">',
                htmlspecialchars(_("Cette action ne vous est pas autorisée Contactez votre responsable")),
                '</h2>';
                echo '</div>';
            }
            exit(-1);
        }
    }

References h2().

Here is the call graph for this function:

can_read_action()

Noalyss_User::can_read_action

(

$dtoc

)

Check if the profile of the user can write for this profile.

Parameters

$dtoc

action_gestion.ag_id

Returns

true if he can write otherwise false

Definition at line 1610 of file noalyss_user.class.php.

    {
        if ($this->Admin()==1)
            return true;
        $profile=$this->get_profile();
        $r=$this->db->get_value(" select count(*) from action_gestion where ag_id=$1 and (ag_dest in
                                (select p_granted from user_sec_action_profile where p_id=$2) or ag_owner=$3)",
                array($dtoc, $profile, $this->login));
        if ($r==0)
            return false;
        return true;
    }

can_read_repo()

Noalyss_User::can_read_repo

(

$p_repo

)

Check if the profile of the user can read for this repository.

Parameters

$p_repo

stock_repository.r_id

Returns

true if he read write otherwise false

Definition at line 1649 of file noalyss_user.class.php.

    {
        if ($this->Admin()==1)
            return true;
        $profile=$this->get_profile();
        $r=$this->db->get_value("select count(*)
                from profile_sec_repository
                where
                r_id=$1
                and p_id =$2
               ", array($p_repo, $profile));
        if ($r==0)
            return false;
        return true;
    }

can_request()

Noalyss_User::can_request	(		$p_action,
			$p_js = 0 )

Check if the user can access otherwise warn and exit.

Parameters

$p_action	requested action
$p_js	= 1 javascript, or 0 just a text or 2 to log it silently

Returns

nothing the program exits automatically

Definition at line 1061 of file noalyss_user.class.php.

    {
        if ($this->check_action($p_action)==0)
        {
            $this->audit('FAIL');
            if ($p_js==1)
            {
                echo create_script("alert_box(content[59])");
            }
            elseif ($p_js==2)
            {
                record_log(_("Access invalid").$p_action);
            }
            else
            {
                echo '<h2 class="error">',
                htmlspecialchars(_("Cette action ne vous est pas autorisée Contactez votre responsable")),
                '</h2>';
                echo '</div>';
            }
            exit(-1);
        }
    }

References h2().

Here is the call graph for this function:

can_write_action()

Noalyss_User::can_write_action

(

$dtoc

)

Check if the profile of the user can write for this profile.

Parameters

$dtoc

action_gestion.ag_id

Returns

true if he can write otherwise false

Definition at line 1572 of file noalyss_user.class.php.

    {
        if ($this->Admin()==1)
            return TRUE;
        if ($this->get_status_security_action()==0)
            return TRUE;
        $profile=$this->get_profile();
        $r=$this->db->get_value(" select count(*) from action_gestion where ag_id=$1 and ag_dest in
                                (select p_granted from user_sec_action_profile where ua_right in ('W','O') and p_id=$2) ", array($dtoc, $profile));
        if ($r==0)
            return FALSE;
        return true;
    }

can_write_repo()

Noalyss_User::can_write_repo

(

$p_repo

)

Check if the profile of the user can write for this repository.

Parameters

$p_repo

stock_repository.r_id

Returns

true if he can write otherwise false

Definition at line 1628 of file noalyss_user.class.php.

    {
        if ($this->Admin()==1)
            return true;
        $profile=$this->get_profile();
        $r=$this->db->get_value("select count(*)
                from profile_sec_repository
                where
                r_id=$1
                and p_id =$2
                and ur_right='W'", array($p_repo, $profile));
        if ($r==0)
            return false;
        return true;
    }

Check()

Noalyss_User::Check	(		$silent = false,
			$from = '' )

Check if user is active and exists in therepository Automatically redirect, it doesn't check if a user can access a folder.

Parameters

$silent

false, echo an error message and exit, true : exit without warning default is false

++

Definition at line 475 of file noalyss_user.class.php.

    {
 
        $res=0;
        $pass5=$this->password;
 
        $sql="select ac_users.use_login,ac_users.use_active, ac_users.use_pass,
             use_admin,use_first_name,use_name
             from ac_users
             where ac_users.use_id=$1 
             and ac_users.use_active=1
             and ac_users.use_pass=$2";
        $ret=$this->repository->exec_sql($sql, array($this->id, $pass5));
        $res=Database::num_row($ret);
        if ($res>0)
        {
            $r=Database::fetch_array($ret, 0);
            $_SESSION[SESSION_KEY.'use_admin']=$r['use_admin'];
            $_SESSION[SESSION_KEY.'use_name']=$r['use_name'];
            $_SESSION[SESSION_KEY.'use_first_name']=$r['use_first_name'];
            $_SESSION[SESSION_KEY.'isValid']=1;
 
            $this->admin=$_SESSION[SESSION_KEY.'use_admin'];
            $this->name=$_SESSION[SESSION_KEY.'use_name'];
            $this->first_name=$_SESSION[SESSION_KEY.'use_first_name'];
            $this->load_global_pref();
        }
        $sql="insert into audit_connect (ac_user,ac_ip,ac_module,ac_url,ac_state) values ($1,$2,$3,$4,$5)";
 
        if ($res==0 || $this->can_connect() == 0)
        {
            $this->repository->exec_sql($sql,
                    array($_SESSION[SESSION_KEY.'g_user'], $_SERVER["REMOTE_ADDR"],
                        $from, $_SERVER['REQUEST_URI'], 'FAIL'));
            if (!$silent)
            {
                echo '<script> alert(\''._('Utilisateur ou mot de passe incorrect').'\')</script>';
                redirect('index.html');
            }
            $this->valid=0;
            session_unset();
            exit-1;
        }
        else
        {
            if ($from=='LOGIN' || $from=='PORTAL') 
            {
                $this->repository->exec_sql($sql,
                        array($_SESSION[SESSION_KEY.'g_user'], $_SERVER["REMOTE_ADDR"], $from,
                            $_SERVER['REQUEST_URI'], 'SUCCESS'));
            }
            $this->valid=1;
        }
 
        return $ret;
    }

References $from, $r, $res, $ret, $sql, can_connect(), DatabaseCore\fetch_array(), if, load_global_pref(), name, and DatabaseCore\num_row().

Here is the call graph for this function:

check_action()

Noalyss_User::check_action

(

$p_action_id

)

Check if an user is allowed to do an action.

Parameters

p_action_id

Returns

• 0 no priv

• 1 priv granted

  See also

  constant.security.php

Definition at line 884 of file noalyss_user.class.php.

    {
        /*  save it into the log */
        global $audit;
        if ($this->Admin()==1)
            return 1;
        if ($this->is_local_admin(dossier::id())==1)
            return 1;
        if ($this->get_status_security_action()==0)
            return 1;
        $Res=$this->db->exec_sql(
                "select * from user_sec_act where ua_login=$1 and ua_act_id=$2", array($this->login, $p_action_id));
        $Count=Database::num_row($Res);
        if ($Count==0)
        {
            if (isset($audit)&&$audit==true)
            {
                
                $sql="insert into audit_connect (ac_user,ac_ip,ac_module,ac_url,ac_state) values ($1,$2,$3,$4,$5)";
                $this->repository->exec_sql($sql,
                        array($_SESSION[SESSION_KEY.'g_user'], $_SERVER["REMOTE_ADDR"], $p_action_id, $_SERVER['REQUEST_URI'],
                            'FAIL'));
            }
            return 0;
        }
        if ($Count==1)
            return 1;
        echo_error(_("Action invalide"));
        record_log("User:check_action".sprintf("login %s ua_act_id %s", $this->login, $p_action_id));
        exit();
    }

check_dossier()

Noalyss_User::check_dossier	(		$p_dossier_id,
			$silent = false )

check if an user can access a folder, if he cannot display a dialog box and exit

Parameters

the	folder if
$silent	false, echo an error message and exit, true : exit without warning default is false

Returns

• L for administrator (local and global)
• X no access
• R regular user

Definition at line 1253 of file noalyss_user.class.php.

    {
        $this->Admin();
        if ($this->admin==1||$this->is_local_admin($p_dossier_id)==1)
            return 'L';
        
 
        $dossier=$this->repository->get_value("select 'R' from jnt_use_dos where dos_id=$1 and use_id=$2",
                array($p_dossier_id, $this->id));
        $dossier=($dossier=='')?'X':$dossier;
        if ($dossier=='X')
        {
            $this->audit('FAIL', "Access folder ");
            if (!$silent)
            {
                alert(_('Dossier non accessible'));
                exit();
            }
        }
        return $dossier;
    }

check_jrn()

Noalyss_User::check_jrn

(

$p_jrn

)

check the access of an user on a ledger

Parameters

$p_jrn

the ledger id

Returns

• O only predefined operation
• W write
• R read only
• X no access

Definition at line 1237 of file noalyss_user.class.php.

    {
        return $this->get_ledger_access($p_jrn);
    }

check_module()

Noalyss_User::check_module

(

$p_module

)

Check if an user can access a module, return 1 if yes, otherwise 0 record in audit log This function works only if user is connected to a Folder.

Parameters

string

$p_module

menu_ref.me_code

Returns

0 for FORBIDDEN, 1 for GRANTED

Definition at line 855 of file noalyss_user.class.php.

    {
        if ( $this->access_mode == "PC") {
 
            $acc=$this->db->get_value("select count(*) from v_all_menu where p_id = $1
                    and me_code=$2", array($this->get_profile(), $p_module));
        } elseif ($this->access_mode=="MOBILE") {
            $acc=$this->db->get_value("select count(*) from profile_mobile where p_id=$1 and me_code=$2",
                    array($this->get_profile(), $p_module));
        } else {
            throw new Exception("USER:823:ACCESS_MODE INCONNU");
        }
        if ($acc==0)
        {
            $this->audit("FAIL", $p_module);
            return 0;
        }
        $this->audit("SUCCESS", $p_module);
        return 1;
    }

check_otp()

Noalyss_User::check_otp

(

$code

)

check that the OTP code is the one on smartphone returns false if the given does not match the OTP

Definition at line 2161 of file noalyss_user.class.php.

    {
        $otp=new \Noalyss\OTP();
        
        if ( $otp->compute_code($this->otp_secret) == $code ) {
            return true;
        }
        return false;
    }

References $code.

check_print()

Noalyss_User::check_print

(

$p_action

)

Check if the user can print (in menu_ref p_type_display=p) otherwise warn and exit.

Parameters

$p_action

requested action

Returns

nothing the program exits automatically

Definition at line 1091 of file noalyss_user.class.php.

    {
        global $audit;
        $this->audit('AUDIT', $p_action);
        if ($this->Admin()==1)
            return 1;
 
        $res=$this->db->get_value("select count(*) from profile_menu
                        join profile_user using (p_id)
                        where user_name=$1 and me_code=$2 ", array($this->login, $p_action));
        return $res;
    }

clean_session()

static Noalyss_User::clean_session ( )

static

clean the sessions

Definition at line 1923 of file noalyss_user.class.php.

    {
 
        $aSession=$_SESSION;
        foreach($aSession as $key => $value) {
            if(DEBUGNOALYSS>1) { echo "[$key]=>[$value]";}
            
            if ( strpos($key,SESSION_KEY) === 0) {
                unset($_SESSION[$key]);
               if(DEBUGNOALYSS>1) { echo "=> [$key] cleaned";}
            }
        }
    }

References $value.

connect_user()

Noalyss_User::connect_user ( )

private

connect the user and set the $_SESSION variables if not set thanks the $_REQUEST

Definition at line 132 of file noalyss_user.class.php.

    {
        if (!isset($_SESSION[SESSION_KEY.'g_user']))
        {
            $http=new \HttpInput();
            $user_login=$http->request("p_user", "string", "");
            $user_password=$http->request("p_pass", "string", "");
            
            if ($user_login!=""&&$user_password!="")
            {
                $_SESSION[SESSION_KEY."g_user"]=$user_login;
                $_SESSION[SESSION_KEY."g_pass"]=md5($user_password);
            }
            else
            {
                echo '<h2 class="error">'._('Session expirée<br>Utilisateur déconnecté').'</h2>';
                redirect('index.php', 1);
                exit();
            }
 
 
            if (strpos($user_login, '@mobile')!=false)
            {
                $this->access_mode='MOBILE';
                $this->login=str_ireplace("@mobile", "", $user_login);
            }
            else
            {
                $this->access_mode='PC';
                $this->login=strtolower($user_login);
            }
            
            $_SESSION[SESSION_KEY."access_mode"]=$this->access_mode;
            $_SESSION[SESSION_KEY.'g_user']=$this->login;
        }
        $this->login=$_SESSION[SESSION_KEY."g_user"];
        $this->password=$_SESSION[SESSION_KEY.'g_pass'];
        
        $this->id=-1;
        $this->lang=(isset($_SESSION[SESSION_KEY.'g_lang']))?$_SESSION[SESSION_KEY.'g_lang']:'fr_FR.utf8';
        $this->access_mode=$_SESSION[SESSION_KEY."access_mode"];
        
 
        // share user login with the repository
        $this->repository->exec_sql(sprintf("select set_config('noalyss.user_login','%s',false)",
            Database::escape_string($_SESSION[SESSION_KEY.'g_user'])));
        
        if ($this->can_connect() == 0 || $this->load()==-1  )
        {
           echo '<h2 class="error">'._('Utilisateur ou mot de passe incorrect').'</h2>';
           $sql="insert into audit_connect (ac_user,ac_ip,ac_module,ac_url,ac_state) values ($1,$2,$3,$4,$5)";
           $server_remote=$_SERVER['REMOTE_ADDR']?? "cmd-line";
           $request_uri=$_SERVER['REQUEST_URI']??"REQUEST-URI";
           
           $this->repository->exec_sql($sql,
                        array($_SESSION[SESSION_KEY.'g_user'],$server_remote, "DISCON",
                          $request_uri  , 'FAIL'));
           $this->clean_session();
           redirect('logout.php', 1);
           exit();
        }
 
        $this->load_global_pref();
 
        $_SESSION[SESSION_KEY.'g_lang']=$this->lang;
        $this->valid=(isset($_SESSION[SESSION_KEY.'isValid']))?1:0;
        if (isset($_SESSION[SESSION_KEY.'g_theme']))
        {
            $this->theme=$_SESSION[SESSION_KEY.'g_theme'];
        }
        $_SESSION[SESSION_KEY.'use_admin']=$this->admin;
        $_SESSION[SESSION_KEY.'use_name']=$this->name;
        $_SESSION[SESSION_KEY.'use_first_name']=$this->first_name;
    }

References if.

Referenced by __construct().

generate_otp()

Noalyss_User::generate_otp

(

)

generate OTP secret to store in AC_USER.USE_OTP_SECRET

Definition at line 1959 of file noalyss_user.class.php.

    {
       $otp=new \Noalyss\OTP();
       $this->otp_secret=$otp->build_secret();
    }

Referenced by save().

get_access_mode()

Noalyss_User::get_access_mode

(

)

access_mode tells what mode must be used : pc or mobile

Definition at line 210 of file noalyss_user.class.php.

    {
        return $this->access_mode;
    }

get_authent_method()

Noalyss_User::get_authent_method

(

)

retrieve authent_method

• 0 password
• 1 password + code by email
• 2 password + OTP from application

Definition at line 1970 of file noalyss_user.class.php.

                                         {
        return $this->authent_method;
    }

get_available_folder()

Noalyss_User::get_available_folder

(

$p_filter = ""

)

Get all the available folders for the users, checked with the security.

Parameters

$p_filter

Returns

array containing

• ac_dossier.dos_id
• ac_dossier.dos_name
• ac_dossier.dos_description

Definition at line 1367 of file noalyss_user.class.php.

    {
        $cn=$this->repository;
        $filter="";
        if ($this->admin==0)
        {
            // show only available folders
            // if user is not an admin
            $Res=$this->repository->exec_sql("select 
                                                distinct dos_id,dos_name,dos_description 
                            from ac_users
                                                                natural join jnt_use_dos
                                                                natural join  ac_dossier
                            where
                                                                use_login= $1
                                                                and use_active = 1
                                                                and ( dos_name ilike '%' || $2 || '%' or dos_description ilike '%' || $2 || '%' )
                            order by dos_name", array($this->login, $p_filter));
        }
        else
        {
            $Res=$this->repository->exec_sql("select 
                        distinct dos_id,dos_name,dos_description from ac_dossier
             where   
                   dos_name  ilike '%' || $1|| '%' or dos_description ilike '%' || $1 || '%' 
                          order by dos_name", array($p_filter));
        }
 
        $max=Database::num_row($Res);
        if ($max==0)
            return 0;
 
        for ($i=0; $i<$max; $i++)
        {
            $array[]=Database::fetch_array($Res, $i);
        }
        return $array;
    }

get_available_repository()

Noalyss_User::get_available_repository

(

$p_access = 'R'

)

return array of available repository

Parameters

$p_access

R for read W for write

Returns

an array

Definition at line 1155 of file noalyss_user.class.php.

    {
        $profile=$this->get_profile();
        $r=array();
        if ($p_access=='R')
        {
            $r=$this->db->get_array("select distinct u.r_id,r_name
                from
                                        profile_sec_repository as u
                                        join stock_repository as s on(u.r_id=s.r_id)
                where
                p_id =$1
                and ur_right='W'
                                order by 2
                                ", array($profile));
        }
        if ($p_access=='W')
        {
            $r=$this->db->get_array("select distinct u.r_id,r_name
                from
                                        profile_sec_repository as u
                                        join stock_repository as s on(u.r_id=s.r_id)
                where
                p_id =$1 order by 2
               ", array($profile));
        }
        return $r;
    }

get_exercice()

Noalyss_User::get_exercice

(

)

Return the year of current Periode it is the parm_periode.p_exercice col if an error occurs return 0.

Definition at line 1040 of file noalyss_user.class.php.

    {
        $sql="select p_exercice from parm_periode where p_id=$1";
        $Ret=$this->db->exec_sql($sql,[$this->get_periode()]);
        if (Database::num_row($Ret)==1)
        {
            $r=Database::fetch_array($Ret, 0);
            return $r['p_exercice'];
        }
        else
            return 0;
    }

get_first_week_day()

Noalyss_User::get_first_week_day

(

)

first day in calendar

See also

IDate\set_firstDate(

Definition at line 1908 of file noalyss_user.class.php.

    {
        
        $result=$this->repository->get_value("select parameter_value from user_global_pref where parameter_type=$1 and user_id=$2 ",
                array("first_week_day", $this->login));
        if ($this->repository->count()==0)
        {
            $this->save_global_preference("first_week_day", 1);
            return 1;
        }
        return $result;
    }

References $result, and save_global_preference().

Here is the call graph for this function:

get_folder_access()

Noalyss_User::get_folder_access

(

$p_dossier = 0

)

return the access to a folder,

Parameters

$p_dossier

id if it is == 0 then we take the value from $_SESSION

Returns

the priv_priv

• X no access
• R has access (normal user)

Definition at line 541 of file noalyss_user.class.php.

    {
 
        if ($p_dossier==0)
            $p_dossier=dossier::id();
        if ($this->admin==1)
            return 'R';
 
        $sql="select 'R' from jnt_use_dos where use_id=$1 and dos_id=$2";
 
        $res=$this->repository->get_value($sql, array($this->id, $p_dossier));
 
        if ($this->repository->get_affected()==0)
            return 'X';
        return $res;
    }

get_ledger()

Noalyss_User::get_ledger	(		$p_type = 'ALL',
			$p_access = 3,
			$all = TRUE )

get all the available ledgers for the current user

Parameters

$p_type	= ALL or the type of the ledger (ACH,VEN,FIN,ODS)
$p_access	=3 for Read or WRITE, 2 write, 1 for readonly
(boolean)	$all if true show also inactive

Returns

a double array of available ledgers

[0] => [jrn_def_id]
[jrn_def_type]
[jrn_def_name]
[jrn_def_class_deb]
[jrn_def_class_cred]
[jrn_type_id]
[jrn_desc]
[uj_priv]

Definition at line 626 of file noalyss_user.class.php.

    {
        $p_type=strtoupper($p_type);
        if (!in_array($p_type, ["FIN", "ALL", "ODS", "VEN", 'ACH']))
        {
            record_log(sprintf("UGL1, p_type %s", $p_type));
            throw new Exception("UGL1"._("Type incorrecte"));
        }
        if ($all==TRUE)
        {
            $sql_enable="";
        }
        else
        {
            $sql_enable="and jrn_enable=1";
        }
        if ($this->admin!=1&&$this->is_local_admin()!=1&&$this->get_status_security_ledger()==1)
        {
            $sql_type=($p_type=='ALL')?'':"and jrn_def_type=upper('".sql_string($p_type)."')";
            switch ($p_access)
            {
                case 3:
                    $sql_access=" and uj_priv!= 'X' ";
                    break;
                case 2:
                    $sql_access=" and uj_priv = 'W' and jrn_enable=1 ";
                    break;
 
                case 1:
                    $sql_access=" and ( uj_priv = 'R' or uj_priv='W') ";
                    break;
            }
 
            $sql="select jrn_def_id,jrn_def_type,jrn_def_code,
                 jrn_def_name,jrn_def_class_deb,jrn_def_class_cred,jrn_type_id,jrn_desc,uj_priv,
                 jrn_deb_max_line,jrn_cred_max_line,jrn_def_description,jrn_enable
                 from jrn_def join jrn_type on jrn_def_type=jrn_type_id
                 join user_sec_jrn on uj_jrn_id=jrn_def_id
                 where
                 uj_login='".$this->login."'".
                    $sql_type.$sql_access.$sql_enable.
                    " order by jrn_Def_name";
        }
        else
        {
            $sql_type=($p_type=='ALL')?'  '.$sql_enable:"where jrn_def_type=upper('".sql_string($p_type)."')  ".$sql_enable;
            $sql="select jrn_def_id,jrn_def_type,jrn_def_code,jrn_def_name,jrn_def_class_deb,jrn_def_class_cred,jrn_deb_max_line,jrn_cred_max_line,
                 jrn_type_id,jrn_desc,'W' as uj_priv,jrn_def_description,jrn_enable
                 from jrn_def join jrn_type on jrn_def_type=jrn_type_id
                 $sql_type
                 order by jrn_Def_name";
        }
        $res=$this->db->exec_sql($sql);
        if (Database::num_row($res)==0)
            return null;
        $array=Database::fetch_all($res);
        return $array;
    }

References ALL.

get_ledger_access()

Noalyss_User::get_ledger_access

(

$p_ledger

)

check that a user is valid and the access to the folder

Parameters

$p_ledger

the ledger to check

Returns

the priv_priv

• O only predefined operation
• W write
• R read only
• X no access

Definition at line 595 of file noalyss_user.class.php.

    {
        if ($this->admin==1||
                $this->is_local_admin(dossier::id())==1||$this->get_status_security_ledger()==0)
            return 'W';
 
        $sql="select uj_priv from user_sec_jrn where uj_login=$1 and uj_jrn_id=$2";
        $res=$this->db->get_value($sql, array($this->login, $p_ledger));
 
        if ($res=='')
            $res='X';
        return $res;
    }

get_ledger_sql()

Noalyss_User::get_ledger_sql	(		$p_type = 'ALL',
			$p_access = 3 )

return an sql condition for filtering the permitted ledger

Parameters

$p_type	= ALL or the type of the ledger (ACH,VEN,FIN,ODS)
$p_access	=3 for READ or WRITE, 2 READ and write, 1 for readonly

Returns

sql condition like = jrn_def_id in (...)

Definition at line 692 of file noalyss_user.class.php.

    {
        $aLedger=$this->get_ledger($p_type, $p_access);
        if (empty($aLedger))
            return ' jrn_def_id < 0 ';
        $sql=" jrn_def_id in (";
        foreach ($aLedger as $row)
        {
            $sql.=$row['jrn_def_id'].',';
        }
        $sql.='-1)';
        return $sql;
    }

References ALL, and jrn_def_id.

get_limit_current_exercice()

Noalyss_User::get_limit_current_exercice

(

)

return the first date and the last date of the current exercice for the current user

Returns

and array ([0] => start_date,[1] => end_date)

Definition at line 1279 of file noalyss_user.class.php.

    {
        $current_exercice=$this->get_exercice();
        $periode=new Periode($this->db);
        list($per_start, $per_end)=$periode->get_limit($current_exercice);
        $start=$per_start->first_day();
        $end=$per_end->last_day();
        return array($start, $end);
    }

get_list()

static Noalyss_User::get_list ( $p_dossier, $db_repository = null )

static

return an array with all the active users who can access $p_dossier including the global admin.

The list concerns the user in the repository of the "domain" defined in config.inc.php

The user must be activated

Parameters

$p_dossier

dossier

Returns

an array of user's object array indices

• use_id (id )
• use_login (login of the user)
• use_name
• use_first_name

Parameters

$db_repository

( \Database default null) database to repository, if null is given the database will be defined in config.inc.php

Exceptions

throw

an exception if nobody can access

Definition at line 1202 of file noalyss_user.class.php.

    {
        $sql="select distinct use_id,use_login,use_first_name,use_name from ac_users
             left outer join  jnt_use_dos using (use_id)
             where
              (dos_id=$1 and use_active=1) or (use_active=1 and use_admin=1)
              order by use_login,use_name";
 
        // connect to the repository
        if ( $db_repository == null ) {
            $repo_cnx=new Database(0);
        } else {
            $repo_cnx=$db_repository;
        }
        $array=$repo_cnx->get_array($sql, array($p_dossier));
        if ($repo_cnx->size()==0)
        {
            throw new \Exception('noalyss_user.get_list error inaccessible folders',1186);
        }
        return $array;
    }

get_otp_secret()

Noalyss_User::get_otp_secret

(

)

Definition at line 1974 of file noalyss_user.class.php.

                                     {
        return $this->otp_secret;
    }

get_periode()

Noalyss_User::get_periode

(

)

Get the default periode from the user's preferences.

Returns

the default periode

Definition at line 782 of file noalyss_user.class.php.

    {
 
        $array=$this->get_preference();
        if (!isset($array['PERIODE']))
        {
            $this->set_default_periode();
            $array=$this->get_preference();
        }
        return $array['PERIODE'];
    }

get_preference()

Noalyss_User::get_preference

(

)

Get the default user's preferences.

Returns

array of (parameter_type => parameter_value)

Definition at line 824 of file noalyss_user.class.php.

    {
        $sql="select parameter_type,parameter_value from user_local_pref where user_id=$1";
        $Res=$this->db->exec_sql($sql, array($this->id));
        $l_array=array();
        for ($i=0; $i<Database::num_row($Res); $i++)
        {
            $row=Database::fetch_array($Res, $i);
            $type=$row['parameter_type'];
            $l_array[$type]=$row['parameter_value'];
        }
        $a_global_pref=$this->repository->get_array("select parameter_type,parameter_value from user_global_pref 
                                                                        where 
                                                                        upper(user_id) = upper($1)", [$this->login]);
        $nb_global=count($a_global_pref);
        for ($i=0; $i<$nb_global; $i++)
        {
            $idx=$a_global_pref[$i]['parameter_type'];
            $value=$a_global_pref[$i]['parameter_value'];
            $l_array[$idx]=$value;
        }
 
        return $l_array;
    }

get_profile()

Noalyss_User::get_profile

(

)

return the profile (p_id)

Returns

profile.p_id

Definition at line 1476 of file noalyss_user.class.php.

    {
        $profile=$this->db->get_value("select p_id from profile_user where
                                lower(user_name)=lower($1) ", array($this->login));
        return $profile;
    }

get_readable_profile()

Noalyss_User::get_readable_profile

(

)

return array of readable action_profile

Definition at line 1519 of file noalyss_user.class.php.

    {
       $value=$this->db->get_array("select p_granted from ".$this->sql_readable_profile()." as m") ;
       $aGranted=array_column($value,"p_granted");
       return $aGranted;
    }

get_repository()

Noalyss_User::get_repository

(

)

get the repository

Returns

Database

Definition at line 89 of file noalyss_user.class.php.

                                    :\Database {
        return $this->repository;
    }

References return.

get_status_security_action()

Noalyss_User::get_status_security_action

(

)

Check the security on ledger for the user , it returns 1 if the security on ledgers is enabled, otherwise 0.

Definition at line 1872 of file noalyss_user.class.php.

    {
        $security=$this->db->get_value("select us_action from user_active_security 
                where 
                us_login=$1", [$this->login]);
        $n_security=($security=="Y")?1:0;
        return $n_security;
    }

References db.

get_status_security_ledger()

Noalyss_User::get_status_security_ledger

(

)

Check the security on ledger for the user , it returns 1 if the security on ledgers is enabled, otherwise 0.

Definition at line 1836 of file noalyss_user.class.php.

    {
        $security=$this->db->get_value("select us_ledger from user_active_security 
                where 
                us_login=$1", [$this->login]);
        $n_security=($security=="Y")?1:0;
        return $n_security;
    }

References db.

get_vat_code_preference()

Noalyss_User::get_vat_code_preference

(

)

Get preference , either the user see the numeric id for VAT or its code, if the preference doesn't exist by default , 0 is saved in ACCOUNT_REPOSITORY.

See also

ITva_Popup\set_vat_code()

ITva_Popup

Definition at line 1943 of file noalyss_user.class.php.

                                      :int
    {
        
        
        $result=$this->repository->get_value("select parameter_value from user_global_pref where parameter_type=$1 and user_id=$2 ",
            array("vat_code", $this->login));
        if ($this->repository->count()==0)
        {
            $this->save_global_preference("vat_code", 0);
            return 0;
        }
        return $result;
    }

References $result, and save_global_preference().

Here is the call graph for this function:

get_writable_profile()

Noalyss_User::get_writable_profile

(

)

return array of writable action_profile

Definition at line 1509 of file noalyss_user.class.php.

    {
       $value=$this->db->get_array("select p_granted from ".$this->sql_writable_profile()." as m") ;
       $aGranted=array_column($value,"p_granted");
       return $aGranted;
    }

getActive()

Noalyss_User::getActive

(

)

Returns

mixed

Definition at line 323 of file noalyss_user.class.php.

    {
        return $this->active;
    }

getAdmin()

Noalyss_User::getAdmin

(

)

Returns

default|int|mixed|string|string[]|null

Definition at line 259 of file noalyss_user.class.php.

    {
        return $this->admin;
    }

References $admin.

getDb()

Noalyss_User::getDb

(

)

Returns

mixed

Definition at line 243 of file noalyss_user.class.php.

    {
        return $this->db;
    }

getEmail()

Noalyss_User::getEmail

(

)

Returns

mixed

Definition at line 371 of file noalyss_user.class.php.

    {
        return $this->email;
    }

Referenced by send_code_otp(), and send_link_otp().

getFirstName()

Noalyss_User::getFirstName

(

)

Returns

default|mixed|string|string[]|null

Definition at line 291 of file noalyss_user.class.php.

    {
        return $this->first_name;
    }

getId()

Noalyss_User::getId

(

)

Returns

int|mixed

Definition at line 227 of file noalyss_user.class.php.

                           : int
    {
        return $this->id;
    }

References $id.

getLogin()

Noalyss_User::getLogin

(

)

Returns

string

Definition at line 339 of file noalyss_user.class.php.

                              : string
    {
        return $this->login;
    }

getName()

Noalyss_User::getName

(

)

Returns

default|mixed|string|string[]|null

Definition at line 307 of file noalyss_user.class.php.

    {
        return $this->name;
    }

References $name.

getPassword()

Noalyss_User::getPassword

(

)

Returns

mixed

Definition at line 355 of file noalyss_user.class.php.

    {
        return $this->password;
    }

getValid()

Noalyss_User::getValid

(

)

Returns

int

Definition at line 275 of file noalyss_user.class.php.

                              : int
    {
        return $this->valid;
    }

References $valid.

grant_admin_access()

static Noalyss_User::grant_admin_access ( $p_login, $p_dossier, $db_repository = null )

static

Grant access to folder, grant administrator profile , all the ledgers and all the action.

Parameters

$p_login	(String) login
$p_dossier	(int) dossier id
$db_repository	( \Database default null) database to repository, if null is given the database will be defined in config.inc.php

Definition at line 1747 of file noalyss_user.class.php.

    {
       // connect to the repository
        if ( $db_repository == null ) {
            $repo_cnx=new Database(0);
        } else {
            $repo_cnx=$db_repository;
        }
        $user=$repo_cnx->get_array("select use_id,use_login
                                from ac_users
                                where use_login=$1", array($p_login));
 
        if (!$user)
            return false;
        $cn_dossier=new Database($p_dossier);
        // if not access to DB
        if (
                $repo_cnx->get_value("select count(*) from jnt_use_dos where use_id=$1 and dos_id=$2",
                        array($user[0]['use_id'], $p_dossier))==0
        )
        {
            $repo_cnx->exec_sql("insert into jnt_use_dos(use_id,dos_id) values ($1,$2)",
                    array($user[0]['use_id'], $p_dossier));
        }
        //------  Give him the admin menu
        if ($cn_dossier->get_value("select count(*) from profile_user where user_name=$1", array($user[0]['use_login']))==0)
        {
            $cn_dossier->exec_sql('insert into profile_user(user_name,p_id) values($1,1)', array($user[0]['use_login']));
        }
        // Grant all action + ledger to him
        $cn_dossier->exec_sql("delete from user_sec_act where ua_login=$1", array($p_login));
 
        $cn_dossier->exec_sql("insert into user_sec_act (ua_login,ua_act_id)"
                ." select $1 ,ac_id from action ", array($p_login));
 
        $cn_dossier->exec_sql("delete from user_sec_jrn where uj_login=$1", array($p_login));
        $cn_dossier->exec_sql("insert into user_sec_jrn(uj_login,uj_jrn_id,uj_priv)"
                ." select $1,jrn_def_id,'W' from jrn_def", array($p_login));
    }

References $user.

input_otp()

Noalyss_User::input_otp	(		$uuid = "",
			$url = "" )

FORM to enter the 6 digit enter by OTP.

Parameters

$uuid

(string UUID) UUID in the message, null if there is no message

Definition at line 2153 of file noalyss_user.class.php.

    {
      require_once NOALYSS_TEMPLATE."/noalyss_user-input_otp.php" ;
    }

References $url.

insert()

Noalyss_User::insert

(

)

Definition at line 455 of file noalyss_user.class.php.

    {
 
        $Sql="INSERT INTO ac_users(
                        use_first_name, use_name, use_login, use_active,  
                        use_admin, use_pass, use_email)
                            VALUES ($1, $2, $3, $4, $5, $6, $7) returning use_id";
 
        $this->id=$this->repository->get_value($Sql,
                array($this->first_name, $this->last_name, $this->login, 1, $this->admin, 
                    $this->password, $this->email));
    }

insert_default_global_pref()

Noalyss_User::insert_default_global_pref	(		$p_type = "",
			$p_value = "" )

insert default pref if no parameter are given insert all the existing parameter otherwise only the requested

Parameters

$p_type	parameter's type or nothing
$p_value	parameter value

Definition at line 973 of file noalyss_user.class.php.

    {
 
        $default_parameter=array("THEME"=>"classic",
            "PAGESIZE"=>"50",
            'TOPMENU'=>'TEXT',
            'LANG'=>'fr_FR.utf8',
            'csv_fieldsep'=>'0',
            'csv_decimal'=>'0',
            'csv_encoding'=>'utf8',
            'first_week_day'=>1
        );
        $sql="insert into user_global_pref(user_id,parameter_type,parameter_value)
             values ($1,$2,$3)";
        if ($p_type=="")
        {
            foreach ($default_parameter as $name=> $value)
            {
                $this->repository->exec_sql($sql, array($this->login, $name, $value));
            }
        }
        else
        {
            $value=($p_value=="")?$default_parameter[$p_type]:$p_value;
            if ( $this->repository->get_value("select count(*) from user_global_pref where user_id=$1 and parameter_type=$2",
                array($this->login,$p_type)) == 1)
            {
                $this->repository->exec_sql("update user_global_pref set parameter_value=$1 where user_id=$2 and parameter_type=$3",
                        array($value,$this->login,$p_type));
            } else {
                $this->repository->exec_sql($sql, array($this->login, $p_type, $value));
            }
        }
    }

is_double_identified()

Noalyss_User::is_double_identified

(

)

check is the double authentication has been successful

Returns

bool

Definition at line 1996 of file noalyss_user.class.php.

                                           {
        
        if ( $this->authent_method == 0 )
        {
            $_SESSION[SESSION_KEY."db_auth"]='ok';
            return true;
        }
        if ( ! isset($_SESSION[SESSION_KEY."db_auth"])) {
            return false;
        }
        if ($_SESSION[SESSION_KEY."db_auth"] == "ok") {
            return true;
        }
        return false;
    }

References if.

is_local_admin()

Noalyss_User::is_local_admin

(

$p_dossier = -1

)

Check if an user is an local administrator.

Deprecated

since version 6.7

Parameters

$p_dossier

: dossier_id

Returns

• 0 if no

• 1 if yes

Definition at line 1144 of file noalyss_user.class.php.

    {
        return 0;
    }

isAdmin()

Noalyss_User::isAdmin

(

)

Check if an user is an admin and check also his password.

Returns

1 for yes 0 for no

Definition at line 720 of file noalyss_user.class.php.

                      :int
    {
        $this->admin=0;
        $pass5=$this->password;
        $sql="select count(*) from ac_users where use_login=$1
             and use_active=1 and use_admin=1 and use_pass=$2 ";
 
        $this->admin=$this->repository->get_value($sql, array($this->login,$pass5));
        return $this->admin;
    }

load()

Noalyss_User::load

(

)

Definition at line 390 of file noalyss_user.class.php.

                   :int
    {
        /* if this->id == -1, it is unknown so we have to retrieve it from
          the database thanks it login */
        if ($this->id<0)
        {
            $sql_cond="   where lower(use_login)=lower($1)";
            $sql_array=array($this->login);
        }
        else
        {
            $sql_cond="   where use_id=$1";
            $sql_array=array($this->id);
        }
        $sql="select use_id,
                            use_first_name,
                            use_name,
                            use_login,
                            use_active,
                            use_admin,
                            use_pass,
                            use_email,
                            use_auth_method,
                            use_otp_secret
                        from ac_users ";
        $Res=$this->repository->exec_sql($sql.$sql_cond, $sql_array);
        if (($Max=Database::num_row($Res))==0)
            return -1;
        $row=Database::fetch_array($Res, 0);
        $this->id=$row['use_id'];
        $this->first_name=$row['use_first_name'];
        $this->last_name=$row['use_name'];
        $this->name=$row['use_name'];
        $this->active=$row['use_active'];
        $this->login=strtolower($row['use_login']);
        $this->admin=$row['use_admin'];
        $this->password=$row['use_pass'];
        $this->email=$row['use_email'];
        $this->authent_method=$row['use_auth_method'];
        $this->otp_secret=$row['use_otp_secret'];
        return $this->id;
    }

References $id, $Max, $Res, $row, $sql, $sql_array, DatabaseCore\fetch_array(), name, and DatabaseCore\num_row().

Referenced by __construct().

Here is the call graph for this function:

load_global_pref()

Noalyss_User::load_global_pref

(

)

Get the global preferences from user_global_pref in the account_repository db.

Note

set $SESSION[g_variable]

Definition at line 922 of file noalyss_user.class.php.

    {
        // Load everything in an array
        $Res=$this->repository->exec_sql("select parameter_type,parameter_value from
                            user_global_pref
                            where user_id=$1", [$this->login]);
        $Max=Database::num_row($Res);
        if ($Max==0)
        {
            $this->insert_default_global_pref();
            $this->load_global_pref();
            return;
        }
        // Load value into array
        $line=array();
        for ($i=0; $i<$Max; $i++)
        {
            $row=Database::fetch_array($Res, $i);
            $type=$row['parameter_type'];
            $line[$type]=$row['parameter_value'];
        }
        // save array into g_ variable
        $array_pref=array('g_theme'=>'THEME',
            'g_pagesize'=>'PAGESIZE',
            'g_topmenu'=>'TOPMENU',
            'g_lang'=>'LANG',
            'csv_fieldsep'=>'csv_fieldsep',
            'csv_decimal'=>'csv_decimal',
            'csv_encoding'=>'csv_encoding',
            'first_week_day'=>'first_week_day');
 
        foreach ($array_pref as $name=> $parameter)
        {
            if (!isset($line[$parameter]))
            {
                $this->insert_default_global_pref($parameter);
                $this->load_global_pref();
                return;
            }
            $_SESSION[SESSION_KEY.$name]=$line[$parameter];
        }
    }

Referenced by Check().

password_to_session()

Noalyss_User::password_to_session

(

)

store the password in session

Definition at line 1667 of file noalyss_user.class.php.

    {
          $_SESSION[SESSION_KEY.'g_pass']=$this->getPassword();
    }

remove_inexistant_user()

static Noalyss_User::remove_inexistant_user ( $p_dossier, $db_repository = null )

static

cleansing : remove inexistant user

Parameters

$p_dossier	(int) dossier id
$db_repository	( \Database default null) database to repository, if null is given the database will be defined in config.inc.php

Returns

bool : true if success , false if no change

Definition at line 1793 of file noalyss_user.class.php.

    {
        // connect to the repository
        if ( $db_repository == null ) {
            $cnx_repo=new Database(0);
        } else {
            $cnx_repo=$db_repository;
        }
        $name=$cnx_repo->format_name($p_dossier, 'dos');
        if ($cnx_repo->exist_database($name)==0)
            return false;
        $cnx_dossier=new Database($p_dossier);
        if ($cnx_dossier->exist_table('profile_user'))
            $a_user=$cnx_dossier->get_array('select user_name from profile_user');
        else
            return false;
 
        if (!$a_user)
            return;
        $nb=count($a_user);
        for ($i=0; $i<$nb; $i++)
        {
            if ($cnx_repo->get_value('select count(*) from ac_users where use_login=$1', array($a_user[$i]['user_name']))==0)
            {
                if ($cnx_dossier->exist_table('user_sec_jrn'))
                    $cnx_dossier->exec_sql("delete from user_sec_jrn where uj_login=$1", array($a_user[$i]['user_name']));
                $cnx_dossier->exec_sql("delete from profile_user where user_name=$1", array($a_user[$i]['user_name']));
                if ($cnx_dossier->exist_table('user_sec_act'))
                    $cnx_dossier->exec_sql("delete from user_sec_act where ua_login=$1", array($a_user[$i]['user_name']));
                if ($cnx_dossier->exist_table('user_sec_jrn'))
                    $cnx_dossier->exec_sql("delete from user_sec_jrn where uj_login=$1", array($a_user[$i]['user_name']));
                if ($cnx_dossier->exist_table('user_active_security'))
                    $cnx_dossier->exec_sql("delete from user_active_security where us_login=$1",
                            array($a_user[$i]['user_name']));
            }
        }
        return true;
    }

References $i, $name, and $nb.

revoke_access()

static Noalyss_User::revoke_access ( $p_login, $p_dossier, $db_repository = null )

static

Remove a user and all his privileges So it cannot connect anymore and all his privileges are removed from the dossier.

Parameters

$p_login	(String) login
$p_dossier	(int) dossier id
$db_repository	( \Database default null) database to repository, if null is given the database will be defined in config.inc.php

Definition at line 1716 of file noalyss_user.class.php.

    {
        // connect to the repository
        if ( $db_repository == null ) {
            $repo_cnx=new Database(0);
        } else {
            $repo_cnx=$db_repository;
        }
 
        // Retrieve the user
        $user=$repo_cnx->get_array('select use_id,use_login from ac_users where use_login=$1', array($p_login));
        if (!$user)
            return false;
 
        // remove him from jnt_use_dos
        $repo_cnx->exec_sql("delete from jnt_use_dos WHERE use_id=$1 and dos_id=$2",
                array($user[0]['use_id'], $p_dossier));
 
        // Remove user from user's dossier
        $cn_dossier=new Database($p_dossier);
        $cn_dossier->exec_sql("delete from profile_user where user_name=$1", array($p_login));
        $cn_dossier->exec_sql("delete from user_sec_act where ua_login=$1", array($p_login));
    }

References from.

save()

Noalyss_User::save

(

)

Definition at line 433 of file noalyss_user.class.php.

    {
        if ( $this->authent_method  != 0 && $this->otp_secret == null) {
            $this->generate_otp();
        }
        $Sql="update ac_users set use_first_name=$1, use_name=$2
             ,use_active=$3,use_admin=$4,use_pass=$5 ,use_email = $7 
             , use_auth_method=$8,use_otp_secret=$9
                where use_id=$6";
        $Res=$this->repository->exec_sql($Sql,
                array($this->first_name //1
                , $this->last_name // 2
                , $this->active //3 
                , $this->admin //4 
                , $this->password //5 
                , $this->id //6 
                , $this->email //7 
                , $this->authent_method //8
                , $this->otp_secret //9
                ));
    }

References $Res, and generate_otp().

Here is the call graph for this function:

save_email()

Noalyss_User::save_email

(

$p_email

)

Save the password from PREFERENCE MODULE.

Parameters

type

$p_email

Definition at line 1700 of file noalyss_user.class.php.

    {
        $this->repository->exec_sql("update ac_users set use_email=$1 where use_login=$2",
                array($p_email, $_SESSION[SESSION_KEY.'g_user']));
    }

save_global_preference()

Noalyss_User::save_global_preference	(		$key,
			$value )

Save the preference , the scope is global, the settings are saved into account_repository.

Parameters

$key	THEME, LANG , PAGESIZE
$value	value of the key

Definition at line 801 of file noalyss_user.class.php.

    {
        $count=$this->repository->get_value("select count(*)
            from
            user_global_pref
            where
            parameter_type=$1 and user_id=$2", array($key, $this->login));
        if ($count==1)
        {
            $this->repository->exec_sql("update user_global_pref set parameter_value=$1
                where parameter_type=$2 and user_id=$3", array($value, $key, $this->login));
        }
        elseif ($count==0)
        {
            $this->repository->exec_sql("insert into user_global_pref(user_id,parameter_type,parameter_value)
                values($1,$2,$3)", array($this->login, $key, $value));
        }
    }

Referenced by get_first_week_day(), and get_vat_code_preference().

save_password()

Noalyss_User::save_password	(		$p_pass1,
			$p_pass2 )

Save the password of the current user.

Parameters

string	$p_pass1	password (clear)
string	$p_pass2	for confirming password (clear)

See also

check_password_strength()

Returns

true : password successfully changed otherwise false

Definition at line 1678 of file noalyss_user.class.php.

    {
        if ($p_pass1==$p_pass2 && count(check_password_strength($p_pass1)['msg'])==0)
        {
            
            $l_pass=md5($p_pass1);
            $this->setPassword($l_pass);
            $this->repository->exec_sql("update ac_users set use_pass=$1 where use_login=$2",
                    array($l_pass, $this->login));
            return true;
        }
        else
        {
            
            return false;
        }
    }

save_profile()

Noalyss_User::save_profile

(

$p_id

)

Definition at line 1458 of file noalyss_user.class.php.

    {
        $count=$this->db->get_value("select count(*) from profile_user where user_name=$1", array($this->login));
        if ($count==0)
        {
            $this->db->exec_sql("insert into profile_user(p_id,user_name)
                                                                values ($1,$2)", array($p_id, $this->login));
        }
        else
        {
            $this->db->exec_sql("update profile_user set p_id=$1 where user_name=$2", array($p_id, $this->login));
        }
    }

send_code_otp()

Noalyss_User::send_code_otp

(

)

send a code to the user and save the expected code + UUID in a table OTP_SEND_SECRET

Returns

bool false if fails true if succeeds

Exceptions

Exception

Definition at line 2017 of file noalyss_user.class.php.

    {
        if ( $this->authent_method !=1 ) { return false; }
        $mail=new \Sendmail();
        $mail->set_format("HTML");
        $mail->set_from(ADMIN_WEB);
        $mail->mailto($this->getEmail());
        $mail->set_subject(_("NOALYSS : votre code secret "));
        $noalyss_url=NOALYSS_URL;
        
        
        if ( strlen(trim($this->otp_secret??"")) == 0 )  {
            throw new \Exception("noalyss_user.send_code_otp:secret empty",1945);
        }
        $otp=new \Noalyss\OTP();
        $code=$otp->compute_code($this->otp_secret);
       $message="<p>Bonjour,
           <br>
           <br>
           <p>Voici votre code secret utilisable pendant 10 minutes pour NOALYSS : <b> $code</b>  .
               </p>
               
             <p>
   Merci d'utiliser NOALYSS
   <br/>
   <br/>
   <br/>
   
Cordialement,
   <br/>
   <br/>
 
Noalyss team
      </p>
 
    <p>
    <i> Si cet email est dans vos spams, ajoutez l'expéditeur dans votre carnet d'adresse</i>
    </p>
";
        try {
            $uuid= guidv4();
            // remove old for this user 
            $this->repository->exec_sql("delete from otp_send_secret where use_id=$1 and os_code is not null"
                    ,[$this->id]);
            // remove also old one 
            $this->repository->exec_sql("delete from otp_send_secret where os_valid_time < now()");
           $now=new \DateTime();
           $valid=new \DateTime();
           $valid->modify('+10 minutes');
           
           $otp_send_secret=new Otp_Send_Secret_SQL($this->repository);
           $otp_send_secret->set("use_id",$this->id)
                   ->set('os_request',$uuid)
                   ->set("os_code",$code)
                   ->set('os_valid_time',$valid->format('d.m.Y H:i:s'));
           $otp_send_secret->save();
            $mail->set_message($message);
            $mail->compose();
            $mail->send();
            return $uuid;
        } catch (Exception $ex) {
            \record_log ($ex);
            throw new \Exception("noalyss_user.send_code_otp",1963,$ex);
        }
    }

References $code, $ex, $mail, $message, $noalyss_url, $valid, _, getEmail(), guidv4(), and record_log().

Here is the call graph for this function:

send_link_otp()

Noalyss_User::send_link_otp

(

$base_url = null

)

send an email with link to the user

Parameters

$base_url

(string) http url to scan the QRCode, the url in the mail will be {$base_url}/index.php?otp={$uuid}

save in DB first

Definition at line 2087 of file noalyss_user.class.php.

                                           {
        $mail = new \Sendmail();
        $mail->set_format("HTML");
        $mail->set_from(ADMIN_WEB);
        $mail->mailto($this->getEmail());
        $mail->set_subject(_("NOALYSS : Double authentification lien pour 2FA: OTP"));
        $noalyss_url = $base_url??NOALYSS_URL;
        $uuid = guidv4();
        $valid_time=new \DateTime();
        $valid_time->add(new \DateInterval('PT12H'));
        $str_time=$valid_time->format('d-m-Y H:i');
        /**
         * save in DB first
         */
        $message = "<p>Bonjour,</p>
<p>
    Afin de pouvoir utiliser la double authentification avec 2FA: OTP, pourriez-vous
    suivre ce lien et scanner le QRCode avec votre application android freeOTP ou Google Authenticator.
  </p>             
    <p>Ce lien expirera le <b>{$str_time}</b>.
        <br>
        <br>
        <br>
        
   <a href=\"{$noalyss_url}/index.php?otp={$uuid}\">{$noalyss_url}/index.php?otp={$uuid}</a>
        </p>
   
   <p>
   
   Merci d'utiliser NOALYSS
   </p>
   
<p>
Bien cordialement,
</p>
   <p>
               <i> Si cet email est dans vos spams, ajoutez l'expéditeur dans votre carnet d'adresse</i>
               </p>
";
        try {
            
            // remove old for this user 
            $this->repository->exec_sql("delete from otp_send_secret where use_id=$1 and os_code is null"
                    ,[$this->id]);
            // remove also old one 
            $this->repository->exec_sql("delete from otp_send_secret where os_valid_time < now()");
           
            $otp_send_secret_sql = new \Otp_Send_Secret_SQL($this->repository);
            $otp_send_secret_sql->set('use_id', $this->id)
                    ->set('os_valid_time',$valid_time->format('d-m-Y H:i'))
                    ->set('os_request', $uuid);
            
            $otp_send_secret_sql->save();
            $mail->set_message($message);
            $mail->compose();
            $mail->send();
            return $uuid;
        } catch (Exception $ex) {
            \record_log($ex);
            throw new \Exception("noalyss_user.send_link_otp",1998,$ex);
        }
    }

References $ex, $mail, $message, $noalyss_url, _, getEmail(), guidv4(), and record_log().

Here is the call graph for this function:

set_access_mode()

Noalyss_User::set_access_mode

(

$access_mode

)

access_mode tells what mode must be used : pc or mobile

Definition at line 218 of file noalyss_user.class.php.

                                                 : object
    {
        $this->access_mode=$access_mode;
        return $this;
    }

References $access_mode.

set_authent_method()

Noalyss_User::set_authent_method

(

$authent_method

)

Definition at line 1979 of file noalyss_user.class.php.

                                                        {
        $this->authent_method = $authent_method;
        return $this;
    }

References $authent_method.

set_default_periode()

Noalyss_User::set_default_periode ( )

private

Definition at line 744 of file noalyss_user.class.php.

    {
 
        /* get the first periode */
        $sql='select min(p_id) as pid '
                .' from parm_periode '
                .' where p_closed = false and p_start = (select min(p_start) from parm_periode)';
        $Res=$this->db->exec_sql($sql);
 
        $pid=Database::fetch_result($Res, 0, 0);
        /* if all the periode are closed, then we use the last closed period */
        if ($pid==null)
        {
            $sql='select min(p_id) as pid '
                    .'from parm_periode '
                    .'where p_start = (select max(p_start) from parm_periode)';
            $Res2=$this->db->exec_sql($sql);
            $pid=Database::fetch_result($Res2, 0, 0);
            if ($pid==null)
            {
                throw new Exception(_("Aucune période trouvéee !!!"));
            }
 
            $pid=Database::fetch_result($Res2, 0, 0);
        }
 
        $sql=sprintf("insert into user_local_pref (user_id,parameter_value,parameter_type)
                     values ('%s','%d','PERIODE')", $this->id, $pid);
        $Res=$this->db->exec_sql($sql);
    }

References from, and p_id.

set_folder_access()

Noalyss_User::set_folder_access	(		$db_id,
			$priv )

save the access of a folder

Parameters

$db_id	the dossier id
$priv	boolean, true then it is granted, false it is removed

Definition at line 563 of file noalyss_user.class.php.

    {
 
        if ($priv)
        {
            // the access is granted
            $jnt=$this->repository->get_value("select jnt_id from jnt_use_dos where dos_id=$1 and use_id=$2", array($db_id, $this->id));
 
            if ($this->repository->size()==0)
            {
 
                $Res=$this->repository->exec_sql("insert into jnt_use_dos(dos_id,use_id) values($1,$2)", array($db_id, $this->id));
            }
        }
        else
        {
            // Access is revoked
            $this->repository->exec_sql('delete from jnt_use_dos where use_id  = $1 and dos_id = $2 ', array($this->id, $db_id));
        }
    }

References from.

set_identified()

Noalyss_User::set_identified

(

)

Definition at line 1988 of file noalyss_user.class.php.

    {
         $_SESSION[SESSION_KEY."db_auth"]='ok';
    }

set_otp_secret()

Noalyss_User::set_otp_secret

(

$otp_secret

)

Definition at line 1984 of file noalyss_user.class.php.

                                                {
        $this->otp_secret = $otp_secret;
        return $this;
    }

References $otp_secret.

set_periode()

Noalyss_User::set_periode

(

$p_periode

)

Set the selected periode in the user's preferences.

Parameters

	$p_periode	periode
-	$p_user

Definition at line 738 of file noalyss_user.class.php.

    {
        $sql="update user_local_pref set parameter_value=$1 where user_id=$2 and parameter_type='PERIODE'";
        $Res=$this->db->exec_sql($sql, [$p_periode, $this->id]);
    }

set_repository()

Noalyss_User::set_repository

(

Database

$repository

)

set the repository

Returns

Database

Definition at line 96 of file noalyss_user.class.php.

                                                         {
        $this->repository = $repository;
        return $this;
    }

References $repository.

set_session_var()

Noalyss_User::set_session_var

(

)

put user_login into Postgres config (session), it can be used for tracking users activities

Returns

void

Definition at line 105 of file noalyss_user.class.php.

    {
        $this->db->exec_sql(sprintf("select set_config('noalyss.user_login','%s',false)",
            Database::escape_string($_SESSION[SESSION_KEY.'g_user'])));
        $this->repository->exec_sql(sprintf("select set_config('noalyss.user_login','%s',false)",
            Database::escape_string($_SESSION[SESSION_KEY.'g_user'])));
 
    }

References db, and DatabaseCore\escape_string().

Referenced by __construct().

Here is the call graph for this function:

set_status_security_action()

Noalyss_User::set_status_security_action

(

$p_value

)

Set the flag in the table user_active_security.

Parameters

int

$p_value

1==enable , 0 = disable @exceptions invalid value

Definition at line 1886 of file noalyss_user.class.php.

    {
        if ($p_value!=0&&$p_value!=1)
            throw new Exception(_("Valeur invalide"));
        $exist=$this->db->get_value("select count(*) from user_active_security where us_login=$1", [$this->login]);
        $flag=($p_value==1)?"Y":"N";
        if ($exist==0)
        {
            $this->db->exec_sql("insert into user_active_security (us_login,us_action,us_ledger) values ($1,$2,$3)",
                    [$this->login, $flag, 'Y']);
        }
        else
        {
            $this->db->exec_sql("update user_active_security set us_action=$1 where us_login = $2",
                    [$flag, $this->login]);
        }
    }

References $flag, _, and db.

set_status_security_ledger()

Noalyss_User::set_status_security_ledger

(

$p_value

)

Set the flag in the table user_active_security.

Parameters

int

$p_value

1==enable , 0 = disable @exceptions invalid value

Definition at line 1850 of file noalyss_user.class.php.

    {
        if ($p_value!=0&&$p_value!=1)
            throw new Exception(_("Valeur invalide"));
        $exist=$this->db->get_value("select count(*) from user_active_security where us_login=$1", [$this->login]);
        $flag=($p_value==1)?"Y":"N";
        if ($exist==0)
        {
            $this->db->exec_sql("insert into user_active_security (us_login,us_ledger,us_action) values ($1,$2,$3)",
                    [$this->login, $flag, 'Y']);
        }
        else
        {
            $this->db->exec_sql("update user_active_security set us_ledger=$1 where us_login = $2",
                    [$flag, $this->login]);
        }
    }

References $flag, _, and db.

setActive()

Noalyss_User::setActive

(

$active

)

Parameters

mixed

$active

Definition at line 331 of file noalyss_user.class.php.

                                      : void
    {
        $this->active=$active;
    }

References $active.

setAdmin()

Noalyss_User::setAdmin

(

$admin

)

Parameters

default | int | mixed | string | string[] | null

$admin

Definition at line 267 of file noalyss_user.class.php.

                                    : void
    {
        $this->admin=$admin;
    }

References $admin.

setDb()

Noalyss_User::setDb

(

$db

)

Parameters

mixed

$db

Definition at line 251 of file noalyss_user.class.php.

                              : void
    {
        $this->db=$db;
    }

References $db, and db.

setEmail()

Noalyss_User::setEmail

(

$email

)

Parameters

mixed

$email

Definition at line 379 of file noalyss_user.class.php.

                                    : void
    {
        $this->email=$email;
    }

References $email.

setFirstName()

Noalyss_User::setFirstName

(

$first_name

)

Parameters

default | mixed | string | string[] | null

$first_name

Definition at line 299 of file noalyss_user.class.php.

                                             : void
    {
        $this->first_name=$first_name;
    }

References $first_name.

setId()

Noalyss_User::setId

(

int

$id

)

Parameters

int | mixed

$id

Definition at line 235 of file noalyss_user.class.php.

                                  : void
    {
        $this->id=$id;
    }

References $id.

setLogin()

Noalyss_User::setLogin

(

string

$login

)

Parameters

string

$login

Definition at line 347 of file noalyss_user.class.php.

                                           : void
    {
        $this->login=$login;
    }

References $login.

setName()

Noalyss_User::setName

(

$name

)

Parameters

default | mixed | string | string[] | null

$name

Definition at line 315 of file noalyss_user.class.php.

                                  : void
    {
        $this->name=$name;
    }

References $name, and name.

setPassword()

Noalyss_User::setPassword

(

$password

)

Parameters

mixed

$password

Definition at line 363 of file noalyss_user.class.php.

                                          : void
    {
        $this->password=$password;
    }

References $password.

setValid()

Noalyss_User::setValid

(

int

$valid

)

Parameters

int

$valid

Definition at line 283 of file noalyss_user.class.php.

                                        : void
    {
        $this->valid=$valid;
    }

References $valid.

show_dossier()

Noalyss_User::show_dossier

(

$p_filtre = ""

)

Show all the available folder for the users at the login page.

For the special case 'E' go directly to extension and bypasse the dashboard

Parameters

$p_filtre

user

Returns

table in HTML

Definition at line 1298 of file noalyss_user.class.php.

    {
        $p_array=$this->get_available_folder($p_filtre);
 
        $result="";
 
        $result.="<TABLE id=\"folder\" class=\"result\">";
        $result.="<tr>";
        $result.="<th>";
        $result.=_("Id");
        $result.="</th>";
        $result.="<th>";
        $result.=_("Nom");
        $result.="</th>";
        $result.="<th>";
        $result.=_("Description");
        $result.="</th>";
        $result.="</tr>";
        if ($p_array==0)
        {
            $result.="<tr>";
            $result.='<td style="width:auto" colspan=3>';
            $result.=_("Aucun dossier disponible");
            $result.='</td>';
            $result.="</tr>";
            return $result;
        }
 
        for ($i=0; $i<sizeof($p_array); $i++)
        {
 
            $id=$p_array[$i]['dos_id'];
            $name=$p_array[$i]['dos_name'];
            $desc=$p_array[$i]['dos_description'];
            if ($i%2==0)
                $tr="odd";
            else
                $tr="even";
            $target="do.php?gDossier=$id";
 
            $result.="<TR class=\"$tr\">";
 
            $result.=td($id, ' class="num" ');
            $result.="<TD class=\"$tr\">";
            $result.="<A class=\"dossier\" HREF=\"$target\">";
            $result.="  <B>".h($name)."</B>";
            $result.="</A>";
            $result.="</TD>";
            $desc=($desc=="")?"<i>Aucune description</i>":h($desc);
            $desc="<A class=\"dossier\" HREF=\"$target\">$desc</A>";
            $result.="<TD class=\"$tr\" >".$desc;
            $result.="</TD>";
            $result.="</TR>";
        }
        $result.="</TABLE>";
        return $result;
    }

References style, and td().

Here is the call graph for this function:

sql_readable_profile()

Noalyss_User::sql_readable_profile

(

)

Compute the SQL string for the readable profile, the subselect for p_id , example p_id in $g_user->sql_readable_profile.

The administrator can read all the profiles

Returns

SQL string with the subselect for p_id

Definition at line 1532 of file noalyss_user.class.php.

    {
        if ($this->admin!=1)
        {
            $sql=" (select p_granted "
                    ."     from user_sec_action_profile "
                    ."     where ua_right in ('W','R','O') and p_id=".$this->get_profile().") ";
        }
        else
        {
            $sql="(select p_id p_granted from profile)";
        }
        return $sql;
    }

sql_writable_profile()

Noalyss_User::sql_writable_profile

(

)

Compute the SQL string for the writable profile, the subselect for p_id , example p_id in $g_user->sql_writable_profile.

The administrator can access all the profiles R = Read Only W = Write and delete O = write and not delete

Returns

SQL string with the subselect for p_id

Definition at line 1491 of file noalyss_user.class.php.

    {
        if ($this->admin!=1)
        {
            $sql=" (select p_granted "
                    ."     from user_sec_action_profile "
                    ."     where ua_right in ('W','O') and p_id=".$this->get_profile().") ";
        }
        else
        {
            $sql="(select p_id p_granted from profile)";
        }
        return $sql;
    }

update_global_pref()

Noalyss_User::update_global_pref	(		$p_type,
			$p_value = "" )

update default pref if value is not given then use the default value

Parameters

$p_type	parameter's type
$p_value	parameter's value value of the type

Definition at line 1015 of file noalyss_user.class.php.

    {
        $default_parameter=array("THEME"=>"classic",
            "PAGESIZE"=>"50",
            "LANG"=>'fr_FR.utf8',
            'TOPMENU'=>'SELECT',
            'csv_fieldsep'=>'0',
            'csv_decimal'=>'0',
            'csv_encoding'=>'utf8',
            'first_week_day'=>1
        );
        $Sql="update user_global_pref set parameter_value=$1
             where parameter_type=$2 and
             user_id=$3";
        $value=($p_value=="")?$default_parameter[$p_type]:$p_value;
        $this->repository->exec_sql($Sql, array($value, $p_type, $this->login));
    }

Field Documentation

$access_mode

Noalyss_User::$access_mode

MOBILE or PC depending if when connecting $login contains @mobile.

Definition at line 49 of file noalyss_user.class.php.

Referenced by set_access_mode().

$active

Noalyss_User::$active

1 active , 0 disables

Definition at line 45 of file noalyss_user.class.php.

Referenced by setActive().

$admin

Noalyss_User::$admin

is or is not admin

Definition at line 40 of file noalyss_user.class.php.

Referenced by setAdmin().

$authent_method

Noalyss_User::$authent_method

authentication method use for this user

Definition at line 52 of file noalyss_user.class.php.

Referenced by set_authent_method().

$db

Noalyss_User::$db

database connx to the folder NOT repository

Definition at line 39 of file noalyss_user.class.php.

Referenced by setDb().

$email

Noalyss_User::$email

user's email

Definition at line 48 of file noalyss_user.class.php.

Referenced by setEmail().

$first_name

Noalyss_User::$first_name

Definition at line 42 of file noalyss_user.class.php.

Referenced by setFirstName().

$id

Noalyss_User::$id

in account_repository , ac_users.use_id

Definition at line 37 of file noalyss_user.class.php.

Referenced by setId().

$lang

Noalyss_User::$lang

user's language

Definition at line 50 of file noalyss_user.class.php.

$last_name

Noalyss_User::$last_name

user's last_name

Definition at line 43 of file noalyss_user.class.php.

$login

Noalyss_User::$login

login lower case

Definition at line 46 of file noalyss_user.class.php.

Referenced by setLogin().

$name

Noalyss_User::$name

Definition at line 44 of file noalyss_user.class.php.

Referenced by remove_inexistant_user(), and setName().

$otp_secret

Noalyss_User::$otp_secret

private

string use as secret for OTP

Definition at line 53 of file noalyss_user.class.php.

Referenced by set_otp_secret().

$password

Noalyss_User::$password

md5 of the password

Definition at line 47 of file noalyss_user.class.php.

Referenced by setPassword().

$repository

Noalyss_User::$repository

private

account_repository (\Database )

Definition at line 54 of file noalyss_user.class.php.

Referenced by __construct(), and set_repository().

$theme

Noalyss_User::$theme

user's CSS Theme

Definition at line 51 of file noalyss_user.class.php.

$valid

Noalyss_User::$valid

is or is not valid

Definition at line 41 of file noalyss_user.class.php.

Referenced by send_code_otp(), and setValid().

---

The documentation for this class was generated from the following file:

• include/class/noalyss_user.class.php