3 # script to edit a member's flags
4 # Written by Steve Tonnesen
5 # July 26, 2002 (my birthday!)
11 use C4::Auth qw(:DEFAULT :EditPermissions);
14 use C4::Members::Attributes qw(GetBorrowerAttributes);
15 #use C4::Acquisitions;
17 use Koha::Patron::Categories;
25 my $flagsrequired = { permissions => 1 };
26 my $member=$input->param('member');
27 my $patron = Koha::Patrons->find( $member );
29 print $input->redirect("/cgi-bin/koha/circ/circulation.pl?borrowernumber=$member");
33 my $category_type = $patron->category->category_type;
34 my $bor = $patron->unblessed;
35 if( $category_type eq 'S' ) { # FIXME Is this really needed?
36 $flagsrequired->{'staffaccess'} = 1;
38 my ($template, $loggedinuser, $cookie) = get_template_and_user({
39 template_name => "members/member-flags.tt",
43 flagsrequired => $flagsrequired,
47 my $userenv = C4::Context->userenv;
48 if ( $userenv and $userenv->{number} ) { # Allow DB user to create a superlibrarian patron
49 my $logged_in_user = Koha::Patrons->find( $loggedinuser ) or die "Not logged in";
50 output_and_exit_if_error( $input, $cookie, $template, { module => 'members', logged_in_user => $logged_in_user, current_patron => $patron } );
54 $member2{'borrowernumber'}=$member;
56 if ($input->param('newflags')) {
58 die "Wrong CSRF token"
59 unless Koha::Token->new->check_csrf({
60 session_id => scalar $input->cookie('CGISESSID'),
61 token => scalar $input->param('csrf_token'),
65 my $dbh=C4::Context->dbh();
67 my @perms = $input->multi_param('flag');
68 my %all_module_perms = ();
70 foreach my $perm (@perms) {
72 $all_module_perms{$perm} = 1;
74 my ($module, $sub_perm) = split /:/, $perm, 2;
75 push @{ $sub_perms{$module} }, $sub_perm;
81 my $sth=$dbh->prepare("SELECT bit,flag FROM userflags ORDER BY bit");
83 while (my ($bit, $flag) = $sth->fetchrow_array) {
84 if (exists $all_module_perms{$flag}) {
85 $module_flags += 2**$bit;
89 $sth = $dbh->prepare("UPDATE borrowers SET flags=? WHERE borrowernumber=?");
90 $sth->execute($module_flags, $member);
92 # deal with subpermissions
93 $sth = $dbh->prepare("DELETE FROM user_permissions WHERE borrowernumber = ?");
94 $sth->execute($member);
95 $sth = $dbh->prepare("INSERT INTO user_permissions (borrowernumber, module_bit, code)
99 foreach my $module (keys %sub_perms) {
100 next if exists $all_module_perms{$module};
101 foreach my $sub_perm (@{ $sub_perms{$module} }) {
102 $sth->execute($member, $sub_perm, $module);
106 print $input->redirect("/cgi-bin/koha/members/moremember.pl?borrowernumber=$member");
109 my $flags = C4::Members::patronflags( $bor );
111 my $dbh = C4::Context->dbh();
112 # FIXME This needs to be improved to avoid doing the same query
113 my $sth = $dbh->prepare("select bit,flag from userflags");
115 while ( my ( $bit, $flag ) = $sth->fetchrow ) {
116 if ( $bor->{flags} && $bor->{flags} & 2**$bit ) {
117 $accessflags->{$flag} = 1;
121 my $all_perms = get_all_subpermissions();
122 my $user_perms = get_user_subpermissions($bor->{'userid'});
123 $sth = $dbh->prepare("SELECT bit, flag FROM userflags ORDER BY bit");
127 while (my ($bit, $flag) = $sth->fetchrow) {
129 if ($accessflags->{$flag}) {
133 my %row = ( bit => $bit,
138 my @sub_perm_loop = ();
139 my $expand_parent = 0;
141 if (exists $all_perms->{$flag}) {
143 foreach my $sub_perm (sort keys %{ $all_perms->{$flag} }) {
144 push @sub_perm_loop, {
145 id => "${flag}_$sub_perm",
146 perm => "$flag:$sub_perm",
153 if (exists $user_perms->{$flag}) {
155 # put selected ones first
156 foreach my $sub_perm (sort keys %{ $user_perms->{$flag} }) {
157 push @sub_perm_loop, {
158 id => "${flag}_$sub_perm",
159 perm => "$flag:$sub_perm",
165 # then ones not selected
166 if (exists $all_perms->{$flag}) {
167 foreach my $sub_perm (sort keys %{ $all_perms->{$flag} }) {
168 push @sub_perm_loop, {
169 id => "${flag}_$sub_perm",
170 perm => "$flag:$sub_perm",
173 } unless exists $user_perms->{$flag} and exists $user_perms->{$flag}->{$sub_perm};
177 $row{expand} = $expand_parent;
178 if ($#sub_perm_loop > -1) {
179 $row{sub_perm_loop} = \@sub_perm_loop;
184 if ( $category_type eq 'C') {
185 my $patron_categories = Koha::Patron::Categories->search_limited({ category_type => 'A' }, {order_by => ['categorycode']});
186 $template->param( 'CATCODE_MULTI' => 1) if $patron_categories->count > 1;
187 $template->param( 'catcode' => $patron_categories->next->categorycode ) if $patron_categories->count == 1;
190 $template->param( adultborrower => 1 ) if ( $category_type =~ /^(A|I)$/ );
192 if (C4::Context->preference('ExtendedPatronAttributes')) {
193 my $attributes = GetBorrowerAttributes($bor->{'borrowernumber'});
195 ExtendedPatronAttributes => 1,
196 extendedattributes => $attributes
204 Koha::Token->new->generate_csrf( { session_id => scalar $input->cookie('CGISESSID'), } ),
207 output_html_with_http_headers $input, $cookie, $template->output;