* @copyright 2007-2012 PrestaShop SA * @version Release: $Revision: 15812 $ * @license http://opensource.org/licenses/osl-3.0.php Open Software License (OSL 3.0) * International Registered Trademark & Property of PrestaShop SA */ class AdminEmployees extends AdminTab { /** @var array profiles list */ private $profilesArray = array(); public function __construct() { global $cookie; $this->table = 'employee'; $this->className = 'Employee'; $this->lang = false; $this->edit = true; $this->delete = true; $this->_select = 'pl.`name` AS profile'; $this->_join = 'LEFT JOIN `'._DB_PREFIX_.'profile` p ON a.`id_profile` = p.`id_profile` LEFT JOIN `'._DB_PREFIX_.'profile_lang` pl ON (pl.`id_profile` = p.`id_profile` AND pl.`id_lang` = '.(int)($cookie->id_lang).')'; $profiles = Profile::getProfiles((int)($cookie->id_lang)); if (!$profiles) $this->_errors[] = Tools::displayError('No profile'); else foreach ($profiles AS $profile) $this->profilesArray[$profile['name']] = $profile['name']; $this->fieldsDisplay = array( 'id_employee' => array('title' => $this->l('ID'), 'align' => 'center', 'width' => 25), 'lastname' => array('title' => $this->l('Last name'), 'width' => 130), 'firstname' => array('title' => $this->l('First name'), 'width' => 130), 'email' => array('title' => $this->l('E-mail address'), 'width' => 180), 'profile' => array('title' => $this->l('Profile'), 'width' => 90, 'type' => 'select', 'select' => $this->profilesArray, 'filter_key' => 'pl!name'), 'active' => array('title' => $this->l('Can log in'), 'align' => 'center', 'active' => 'status', 'type' => 'bool')); $this->optionTitle = $this->l('Employees options'); $this->_fieldsOptions = array( 'PS_PASSWD_TIME_BACK' => array('title' => $this->l('Password regenerate:'), 'desc' => $this->l('Security minimum time to wait to regenerate a new password'), 'cast' => 'intval', 'size' => 5, 'type' => 'text', 'suffix' => ' '.$this->l('minutes')), 'PS_BO_ALLOW_EMPLOYEE_FORM_LANG' => array('title' => $this->l('Memorize form language:'), 'desc' => $this->l('Allow employees to save their own default form language'), 'cast' => 'intval', 'type' => 'select', 'identifier' => 'value', 'list' => array( '0' => array('value' => 0, 'name' => $this->l('No')), '1' => array('value' => 1, 'name' => $this->l('Yes')) )) ); parent::__construct(); } protected function _childValidation() { if (!($obj = $this->loadObject(true))) return false; $email = $this->getFieldValue($obj, 'email'); if (!Validate::isEmail($email)) $this->_errors[] = Tools::displayError('Invalid e-mail'); elseif (Employee::employeeExists($email) AND !Tools::getValue('id_employee')) $this->_errors[] = Tools::displayError('An account already exists for this e-mail address:').' '.$email; } public function displayForm($isMainTab = true) { global $currentIndex, $cookie, $employee; parent::displayForm(); if (!($obj = $this->loadObject(true))) return; $profiles = Profile::getProfiles((int)$cookie->id_lang); // If the current employee is not an Admin, don't make it possible to select the Admin profile if ($employee->id_profile != 1) foreach ($profiles as $i => $profile) if ($profile['id_profile'] == 1) { unset($profiles[$i]); break; } echo '
'.($obj->id ? '' : '').' '.((int)$this->tabAccess['view'] ? '' : '').'
'.$this->l('Employees').'
*
*
*

'.($obj->id ? $this->l('Leave blank if you do not want to change your password') : $this->l('Min. 8 characters; use only letters, numbers or').' -_').'

*
 
'; // Note : width= fix Firefox 4 display bug related to colorpicker librarie echo '

'.$this->l('Back office background will be displayed in this color. HTML colors only (e.g.,').' "lightblue", "#CC6600")

 
*
 
*
'; if ((int)$this->tabAccess['edit']) { echo '
 
getFieldValue($obj, 'bo_uimode') == 'hover' ? 'checked="checked" ' : '').'/> getFieldValue($obj, 'bo_uimode') == 'click' ? 'checked="checked" ' : '').'/>
 
getFieldValue($obj, 'bo_show_screencast') ? 'checked="checked" ' : '').'/> getFieldValue($obj, 'bo_show_screencast') ? 'checked="checked" ' : '').'/>

'.$this->l('Show the welcome video via the back office dashboard').'

getFieldValue($obj, 'active') ? 'checked="checked" ' : '').'/> getFieldValue($obj, 'active') ? 'checked="checked" ' : '').'/>

'.$this->l('Enable or disable this employee to log into the Back Office').'

*
'; } echo '
 
 
* '.$this->l('Required field').'
'; } public function postProcess() { global $cookie, $employee; /* PrestaShop demo mode */ if (_PS_MODE_DEMO_) { $this->_errors[] = Tools::displayError('This functionnality has been disabled.'); return; } /* PrestaShop demo mode*/ if (Tools::isSubmit('deleteemployee') OR Tools::isSubmit('status') OR Tools::isSubmit('statusemployee')) { if ($cookie->id_employee == Tools::getValue('id_employee')) { $this->_errors[] = Tools::displayError('You cannot disable or delete your own account.'); return false; } $edited_employee = new Employee(Tools::getValue('id_employee')); if ($edited_employee->isLastAdmin()) { $this->_errors[] = Tools::displayError('You cannot disable or delete the last administrator account.'); return false; } } elseif (Tools::isSubmit('submitAddemployee')) { $edited_employee = new Employee((int)Tools::getValue('id_employee')); // Employee is changing its own profile if (!(int)$this->tabAccess['edit']) $_POST['id_profile'] = $_GET['id_profile'] = $edited_employee->id_profile; // Employee tries to change profile to Admin without being Admin himself elseif ($_POST['id_profile'] == 1 && $employee->id_profile != 1) { $this->_errors[] = Tools::displayError('Only an Administrator can give the Administrator profile.'); return false; } if ($edited_employee->isLastAdmin()) { if (Tools::getValue('id_profile') != (int)_PS_ADMIN_PROFILE_) { $this->_errors[] = Tools::displayError('You should have at least one employee in the administrator group.'); return false; } if (Tools::getvalue('active') == 0) { $this->_errors[] = Tools::displayError('You cannot disable or delete the last administrator account.'); return false; } } } elseif (Tools::isSubmit('submitDelemployee')) { if (in_array($cookie->id_employee, $_POST['employeeBox'])) { $this->_errors[] = Tools::displayError('You cannot disable or delete your own account.'); return false; } if (in_array(Employee::getLastAdmin(true), $_POST['employeeBox'])) { $this->_errors[] = Tools::displayError('You cannot disable or delete the last administrator account.'); return false; } } return parent::postProcess(); } }