1: <?php if ( ! defined('BASEPATH')) exit('No direct script access allowed');
  2: 
  3: class Backend extends CI_Controller {
  4:     public function __construct() {
  5:         parent::__construct();
  6:         $this->load->library('session');
  7:     }
  8:     
  9:     /**
 10:      * Display the main backend page.
 11:      * 
 12:      * This method displays the main backend page. All users login permission can 
 13:      * view this page which displays a calendar with the events of the selected 
 14:      * provider or service. If a user has more priviledges he will see more menus  
 15:      * at the top of the page.
 16:      * 
 17:      * @param string $appointment_hash If given, the appointment edit dialog will 
 18:      * appear when the page loads.
 19:      */
 20:     public function index($appointment_hash = '') {
 21:         $this->session->set_userdata('dest_url', $this->config->item('base_url') . 'backend');
 22:         if (!$this->hasPrivileges(PRIV_APPOINTMENTS)) return;
 23:         
 24:         $this->load->model('appointments_model');
 25:         $this->load->model('providers_model');
 26:         $this->load->model('services_model');
 27:         $this->load->model('customers_model');
 28:         $this->load->model('settings_model');
 29:         $this->load->model('roles_model');
 30:         $this->load->model('user_model');
 31:         $this->load->model('secretaries_model');
 32:         
 33:         $view['base_url'] = $this->config->item('base_url');
 34:         $view['user_display_name'] = $this->user_model->get_user_display_name($this->session->userdata('user_id'));
 35:         $view['active_menu'] = PRIV_APPOINTMENTS;
 36:         $view['book_advance_timeout'] = $this->settings_model->get_setting('book_advance_timeout');
 37:         $view['company_name'] = $this->settings_model->get_setting('company_name');
 38:         $view['available_providers'] = $this->providers_model->get_available_providers();
 39:         $view['available_services'] = $this->services_model->get_available_services();
 40:         $view['customers'] = $this->customers_model->get_batch();
 41:         $this->setUserData($view);
 42:         
 43:         if ($this->session->userdata('role_slug') == DB_SLUG_SECRETARY) {
 44:             $secretary = $this->secretaries_model->get_row($this->session->userdata('user_id'));
 45:             $view['secretary_providers'] = $secretary['providers'];
 46:         } else {
 47:             $view['secretary_providers'] = array();
 48:         }
 49:         
 50:         if ($appointment_hash != '') {
 51:             $results = $this->appointments_model->get_batch(array('hash' => $appointment_hash));
 52:             $appointment = $results[0];
 53:             $appointment['customer'] = $this->customers_model->get_row($appointment['id_users_customer']);
 54:             $view['edit_appointment'] = $appointment; // This will display the appointment edit dialog on page load.
 55:         } else {
 56:             $view['edit_appointment'] = NULL;
 57:         }
 58:         
 59:         $this->load->view('backend/header', $view);
 60:         $this->load->view('backend/calendar', $view);
 61:         $this->load->view('backend/footer', $view);
 62:     }
 63:     
 64:     /**
 65:      * Display the backend customers page.
 66:      * 
 67:      * In this page the user can manage all the customer records of the system.
 68:      */
 69:     public function customers() {
 70:         $this->session->set_userdata('dest_url', $this->config->item('base_url') . 'backend/customers');
 71:         if (!$this->hasPrivileges(PRIV_CUSTOMERS)) return;
 72:         
 73:         $this->load->model('providers_model');
 74:         $this->load->model('customers_model');
 75:         $this->load->model('services_model');
 76:         $this->load->model('settings_model');
 77:         $this->load->model('user_model');
 78:         
 79:         $view['base_url'] = $this->config->item('base_url');
 80:         $view['user_display_name'] = $this->user_model->get_user_display_name($this->session->userdata('user_id'));
 81:         $view['active_menu'] = PRIV_CUSTOMERS;
 82:         $view['company_name'] = $this->settings_model->get_setting('company_name');
 83:         $view['customers'] = $this->customers_model->get_batch();
 84:         $view['available_providers'] = $this->providers_model->get_available_providers();
 85:         $view['available_services'] = $this->services_model->get_available_services();
 86:         $this->setUserData($view);
 87:         
 88:         $this->load->view('backend/header', $view);
 89:         $this->load->view('backend/customers', $view);
 90:         $this->load->view('backend/footer', $view);
 91:     }
 92:     
 93:     /**
 94:      * Displays the backend services page. 
 95:      * 
 96:      * Here the admin user will be able to organize and create the services 
 97:      * that the user will be able to book appointments in frontend. 
 98:      * 
 99:      * NOTICE: The services that each provider is able to service is managed 
100:      * from the backend services page. 
101:      */
102:     public function services() {
103:         $this->session->set_userdata('dest_url', $this->config->item('base_url') . 'backend/services');
104:         if (!$this->hasPrivileges(PRIV_SERVICES)) return;
105:         
106:         $this->load->model('customers_model');
107:         $this->load->model('services_model');
108:         $this->load->model('settings_model');
109:         $this->load->model('user_model');
110:         
111:         $view['base_url'] = $this->config->item('base_url');
112:         $view['user_display_name'] = $this->user_model->get_user_display_name($this->session->userdata('user_id'));
113:         $view['active_menu'] = PRIV_SERVICES;
114:         $view['company_name'] = $this->settings_model->get_setting('company_name');
115:         $view['services'] = $this->services_model->get_batch();
116:         $view['categories'] = $this->services_model->get_all_categories();
117:         $this->setUserData($view);
118:         
119:         $this->load->view('backend/header', $view);
120:         $this->load->view('backend/services', $view);
121:         $this->load->view('backend/footer', $view);
122:     }
123:     
124:     /**
125:      * Display the backend users page.
126:      * 
127:      * In this page the admin user will be able to manage the system users. 
128:      * By this, we mean the provider, secretary and admin users. This is also
129:      * the page where the admin defines which service can each provider provide.
130:      */
131:     public function users() {
132:         $this->session->set_userdata('dest_url', $this->config->item('base_url') . 'backend/users');
133:         if (!$this->hasPrivileges(PRIV_USERS)) return;
134:         
135:         $this->load->model('providers_model');
136:         $this->load->model('secretaries_model');
137:         $this->load->model('admins_model');
138:         $this->load->model('services_model');
139:         $this->load->model('settings_model');
140:         $this->load->model('user_model');
141:         
142:         $view['base_url'] = $this->config->item('base_url');
143:         $view['user_display_name'] = $this->user_model->get_user_display_name($this->session->userdata('user_id'));
144:         $view['active_menu'] = PRIV_USERS;
145:         $view['company_name'] = $this->settings_model->get_setting('company_name');
146:         $view['admins'] = $this->admins_model->get_batch();
147:         $view['providers'] = $this->providers_model->get_batch();
148:         $view['secretaries'] = $this->secretaries_model->get_batch();
149:         $view['services'] = $this->services_model->get_batch(); 
150:         $view['working_plan'] = $this->settings_model->get_setting('company_working_plan');
151:         $this->setUserData($view);
152:         
153:         $this->load->view('backend/header', $view);
154:         $this->load->view('backend/users', $view);
155:         $this->load->view('backend/footer', $view);
156:     }
157:     
158:     /**
159:      * Display the user/system settings.
160:      * 
161:      * This page will display the user settings (name, password etc). If current user is
162:      * an administrator, then he will be able to make change to the current Easy!Appointment 
163:      * installation (core settings like company name, book timeout etc). 
164:      */
165:     public function settings() {
166:         $this->session->set_userdata('dest_url', $this->config->item('base_url') . 'backend/settings');
167:         if (!$this->hasPrivileges(PRIV_SYSTEM_SETTINGS, FALSE)
168:                 && !$this->hasPrivileges(PRIV_USER_SETTINGS)) return;
169:         
170:         $this->load->model('settings_model');
171:         $this->load->model('user_model');
172:         
173:         $this->load->library('session');        
174:         $user_id = $this->session->userdata('user_id'); 
175:         
176:         $view['base_url'] = $this->config->item('base_url');
177:         $view['user_display_name'] = $this->user_model->get_user_display_name($user_id);
178:         $view['active_menu'] = PRIV_SYSTEM_SETTINGS;
179:         $view['company_name'] = $this->settings_model->get_setting('company_name');
180:         $view['role_slug'] = $this->session->userdata('role_slug');
181:         $view['system_settings'] = $this->settings_model->get_settings();
182:         $view['user_settings'] = $this->user_model->get_settings($user_id);
183:         $this->setUserData($view);
184:         
185:         $this->load->view('backend/header', $view);
186:         $this->load->view('backend/settings', $view);
187:         $this->load->view('backend/footer', $view);
188:     }
189:     
190:     /**
191:      * Check whether current user is logged in and has the required privileges to 
192:      * view a page. 
193:      * 
194:      * The backend page requires different privileges from the users to display pages. Not all
195:      * pages are avaiable to all users. For example secretaries should not be able to edit the
196:      * system users.
197:      * 
198:      * @see Constant Definition In application/config/constants.php
199:      * 
200:      * @param string $page This argument must match the roles field names of each section 
201:      * (eg "appointments", "users" ...).
202:      * @param bool $redirect (OPTIONAL - TRUE) If the user has not the required privileges
203:      * (either not logged in or insufficient role privileges) then the user will be redirected  
204:      * to another page. Set this argument to FALSE when using ajax.
205:      * @return bool Returns whether the user has the required privileges to view the page or
206:      * not. If the user is not logged in then he will be prompted to log in. If he hasn't the
207:      * required privileges then an info message will be displayed.
208:      */
209:     private function hasPrivileges($page, $redirect = TRUE) {       
210:         // Check if user is logged in.
211:         $user_id = $this->session->userdata('user_id');
212:         if ($user_id == FALSE) { // User not logged in, display the login view.
213:             if ($redirect) {
214:                 header('Location: ' . $this->config->item('base_url') . 'user/login');
215:             }
216:             return FALSE;
217:         }
218:         
219:         // Check if the user has the required privileges for viewing the selected page.
220:         $role_slug = $this->session->userdata('role_slug');
221:         $role_priv = $this->db->get_where('ea_roles', array('slug' => $role_slug))->row_array();
222:         if ($role_priv[$page] < PRIV_VIEW) { // User does not have the permission to view the page.
223:              if ($redirect) {
224:                 header('Location: ' . $this->config->item('base_url') . 'user/no_privileges');
225:             }
226:             return FALSE;
227:         }
228:         
229:         return TRUE;
230:     }
231:     
232:     /**
233:      * Set the user data in order to be available at the view and js code.
234:      * 
235:      * @param array $view Contains the view data. 
236:      */
237:     public function setUserData(&$view) {
238:         $this->load->model('roles_model');
239:         
240:         // Get privileges
241:         $view['user_id'] = $this->session->userdata('user_id');
242:         $view['user_email'] = $this->session->userdata('user_email');
243:         $view['role_slug'] = $this->session->userdata('role_slug');
244:         $view['privileges'] = $this->roles_model->get_privileges($this->session->userdata('role_slug'));
245:     }
246: }
247: 
248: /* End of file backend.php */
249: /* Location: ./application/controllers/backend.php */