1 <?php if ( ! defined('BASEPATH')) exit('No direct script access allowed');
  2 
  3 class Backend extends CI_Controller {
  4     public function __construct() {
  5         parent::__construct();
  6         $this->load->library('session');
  7         
  8         // Set user's selected language.        
  9         if ($this->session->userdata('language')) {
 10             $this->config->set_item('language', $this->session->userdata('language'));
 11             $this->lang->load('translations', $this->session->userdata('language'));
 12         } else {
 13             $this->lang->load('translations', $this->config->item('language')); // default
 14         }   
 15     }
 16     
 17     /**
 18      * Display the main backend page.
 19      * 
 20      * This method displays the main backend page. All users login permission can 
 21      * view this page which displays a calendar with the events of the selected 
 22      * provider or service. If a user has more priviledges he will see more menus  
 23      * at the top of the page.
 24      * 
 25      * @param string $appointment_hash If given, the appointment edit dialog will 
 26      * appear when the page loads.
 27      */
 28     public function index($appointment_hash = '') {
 29         $this->session->set_userdata('dest_url', $this->config->item('base_url') . '/backend');
 30         if (!$this->hasPrivileges(PRIV_APPOINTMENTS)) return;
 31         
 32         $this->load->model('appointments_model');
 33         $this->load->model('providers_model');
 34         $this->load->model('services_model');
 35         $this->load->model('customers_model');
 36         $this->load->model('settings_model');
 37         $this->load->model('roles_model');
 38         $this->load->model('user_model');
 39         $this->load->model('secretaries_model');
 40         
 41         $view['base_url'] = $this->config->item('base_url');
 42         $view['user_display_name'] = $this->user_model->get_user_display_name($this->session->userdata('user_id'));
 43         $view['active_menu'] = PRIV_APPOINTMENTS;
 44         $view['book_advance_timeout'] = $this->settings_model->get_setting('book_advance_timeout');
 45         $view['company_name'] = $this->settings_model->get_setting('company_name');
 46         $view['available_providers'] = $this->providers_model->get_available_providers();
 47         $view['available_services'] = $this->services_model->get_available_services();
 48         $view['customers'] = $this->customers_model->get_batch();
 49         $this->setUserData($view);
 50         
 51         if ($this->session->userdata('role_slug') == DB_SLUG_SECRETARY) {
 52             $secretary = $this->secretaries_model->get_row($this->session->userdata('user_id'));
 53             $view['secretary_providers'] = $secretary['providers'];
 54         } else {
 55             $view['secretary_providers'] = array();
 56         }
 57         
 58         
 59         $results = $this->appointments_model->get_batch(array('hash' => $appointment_hash));
 60         if ($appointment_hash != '' && count($results) > 0) {
 61             $appointment = $results[0];
 62             $appointment['customer'] = $this->customers_model->get_row($appointment['id_users_customer']);
 63             $view['edit_appointment'] = $appointment; // This will display the appointment edit dialog on page load.
 64         } else {
 65             $view['edit_appointment'] = NULL;
 66         }
 67         
 68         $this->load->view('backend/header', $view);
 69         $this->load->view('backend/calendar', $view);
 70         $this->load->view('backend/footer', $view);
 71     }
 72     
 73     /**
 74      * Display the backend customers page.
 75      * 
 76      * In this page the user can manage all the customer records of the system.
 77      */
 78     public function customers() {
 79         $this->session->set_userdata('dest_url', $this->config->item('base_url') . '/backend/customers');
 80         if (!$this->hasPrivileges(PRIV_CUSTOMERS)) return;
 81         
 82         $this->load->model('providers_model');
 83         $this->load->model('customers_model');
 84         $this->load->model('services_model');
 85         $this->load->model('settings_model');
 86         $this->load->model('user_model');
 87         
 88         $view['base_url'] = $this->config->item('base_url');
 89         $view['user_display_name'] = $this->user_model->get_user_display_name($this->session->userdata('user_id'));
 90         $view['active_menu'] = PRIV_CUSTOMERS;
 91         $view['company_name'] = $this->settings_model->get_setting('company_name');
 92         $view['customers'] = $this->customers_model->get_batch();
 93         $view['available_providers'] = $this->providers_model->get_available_providers();
 94         $view['available_services'] = $this->services_model->get_available_services();
 95         $this->setUserData($view);
 96         
 97         $this->load->view('backend/header', $view);
 98         $this->load->view('backend/customers', $view);
 99         $this->load->view('backend/footer', $view);
100     }
101     
102     /**
103      * Displays the backend services page. 
104      * 
105      * Here the admin user will be able to organize and create the services 
106      * that the user will be able to book appointments in frontend. 
107      * 
108      * NOTICE: The services that each provider is able to service is managed 
109      * from the backend services page. 
110      */
111     public function services() {
112         $this->session->set_userdata('dest_url', $this->config->item('base_url') . '/backend/services');
113         if (!$this->hasPrivileges(PRIV_SERVICES)) return;
114         
115         $this->load->model('customers_model');
116         $this->load->model('services_model');
117         $this->load->model('settings_model');
118         $this->load->model('user_model');
119         
120         $view['base_url'] = $this->config->item('base_url');
121         $view['user_display_name'] = $this->user_model->get_user_display_name($this->session->userdata('user_id'));
122         $view['active_menu'] = PRIV_SERVICES;
123         $view['company_name'] = $this->settings_model->get_setting('company_name');
124         $view['services'] = $this->services_model->get_batch();
125         $view['categories'] = $this->services_model->get_all_categories();
126         $this->setUserData($view);
127         
128         $this->load->view('backend/header', $view);
129         $this->load->view('backend/services', $view);
130         $this->load->view('backend/footer', $view);
131     }
132     
133     /**
134      * Display the backend users page.
135      * 
136      * In this page the admin user will be able to manage the system users. 
137      * By this, we mean the provider, secretary and admin users. This is also
138      * the page where the admin defines which service can each provider provide.
139      */
140     public function users() {
141         $this->session->set_userdata('dest_url', $this->config->item('base_url') . '/backend/users');
142         if (!$this->hasPrivileges(PRIV_USERS)) return;
143         
144         $this->load->model('providers_model');
145         $this->load->model('secretaries_model');
146         $this->load->model('admins_model');
147         $this->load->model('services_model');
148         $this->load->model('settings_model');
149         $this->load->model('user_model');
150         
151         $view['base_url'] = $this->config->item('base_url');
152         $view['user_display_name'] = $this->user_model->get_user_display_name($this->session->userdata('user_id'));
153         $view['active_menu'] = PRIV_USERS;
154         $view['company_name'] = $this->settings_model->get_setting('company_name');
155         $view['admins'] = $this->admins_model->get_batch();
156         $view['providers'] = $this->providers_model->get_batch();
157         $view['secretaries'] = $this->secretaries_model->get_batch();
158         $view['services'] = $this->services_model->get_batch(); 
159         $view['working_plan'] = $this->settings_model->get_setting('company_working_plan');
160         $this->setUserData($view);
161         
162         $this->load->view('backend/header', $view);
163         $this->load->view('backend/users', $view);
164         $this->load->view('backend/footer', $view);
165     }
166     
167     /**
168      * Display the user/system settings.
169      * 
170      * This page will display the user settings (name, password etc). If current user is
171      * an administrator, then he will be able to make change to the current Easy!Appointment 
172      * installation (core settings like company name, book timeout etc). 
173      */
174     public function settings() {
175         $this->session->set_userdata('dest_url', $this->config->item('base_url') . '/backend/settings');
176         if (!$this->hasPrivileges(PRIV_SYSTEM_SETTINGS, FALSE)
177                 && !$this->hasPrivileges(PRIV_USER_SETTINGS)) return;
178         
179         $this->load->model('settings_model');
180         $this->load->model('user_model');
181         
182         $this->load->library('session');        
183         $user_id = $this->session->userdata('user_id'); 
184         
185         $view['base_url'] = $this->config->item('base_url');
186         $view['user_display_name'] = $this->user_model->get_user_display_name($user_id);
187         $view['active_menu'] = PRIV_SYSTEM_SETTINGS;
188         $view['company_name'] = $this->settings_model->get_setting('company_name');
189         $view['role_slug'] = $this->session->userdata('role_slug');
190         $view['system_settings'] = $this->settings_model->get_settings();
191         $view['user_settings'] = $this->user_model->get_settings($user_id);
192         $this->setUserData($view);
193         
194         $this->load->view('backend/header', $view);
195         $this->load->view('backend/settings', $view);
196         $this->load->view('backend/footer', $view);
197     }
198     
199     /**
200      * Check whether current user is logged in and has the required privileges to 
201      * view a page. 
202      * 
203      * The backend page requires different privileges from the users to display pages. Not all
204      * pages are avaiable to all users. For example secretaries should not be able to edit the
205      * system users.
206      * 
207      * @see Constant Definition In application/config/constants.php
208      * 
209      * @param string $page This argument must match the roles field names of each section 
210      * (eg "appointments", "users" ...).
211      * @param bool $redirect (OPTIONAL - TRUE) If the user has not the required privileges
212      * (either not logged in or insufficient role privileges) then the user will be redirected  
213      * to another page. Set this argument to FALSE when using ajax.
214      * @return bool Returns whether the user has the required privileges to view the page or
215      * not. If the user is not logged in then he will be prompted to log in. If he hasn't the
216      * required privileges then an info message will be displayed.
217      */
218     private function hasPrivileges($page, $redirect = TRUE) {       
219         // Check if user is logged in.
220         $user_id = $this->session->userdata('user_id');
221         if ($user_id == FALSE) { // User not logged in, display the login view.
222             if ($redirect) {
223                 header('Location: ' . $this->config->item('base_url') . '/user/login');
224             }
225             return FALSE;
226         }
227         
228         // Check if the user has the required privileges for viewing the selected page.
229         $role_slug = $this->session->userdata('role_slug');
230         $role_priv = $this->db->get_where('ea_roles', array('slug' => $role_slug))->row_array();
231         if ($role_priv[$page] < PRIV_VIEW) { // User does not have the permission to view the page.
232              if ($redirect) {
233                 header('Location: ' . $this->config->item('base_url') . '/user/no_privileges');
234             }
235             return FALSE;
236         }
237         
238         return TRUE;
239     }
240     
241     /**
242      * Set the user data in order to be available at the view and js code.
243      * 
244      * @param array $view Contains the view data. 
245      */
246     public function setUserData(&$view) {
247         $this->load->model('roles_model');
248         
249         // Get privileges
250         $view['user_id'] = $this->session->userdata('user_id');
251         $view['user_email'] = $this->session->userdata('user_email');
252         $view['role_slug'] = $this->session->userdata('role_slug');
253         $view['privileges'] = $this->roles_model->get_privileges($this->session->userdata('role_slug'));
254     }
255 
256     /**
257      * This method will update the installation to the latest available 
258      * version in the server. IMPORTANT: The code files must exist in the
259      * server, this method will not fetch any new files but will update 
260      * the database schema.
261      *
262      * This method can be used either by loading the page in the browser
263      * or by an ajax request. But it will answer with json encoded data.
264      */
265     public function update() {
266         try {
267             if (!$this->hasPrivileges(PRIV_SYSTEM_SETTINGS, TRUE)) 
268                 throw new Exception('You do not have the required privileges for this task!');
269 
270             $this->load->library('migration');
271 
272             if (!$this->migration->current()) 
273                 throw new Exception($this->migration->error_string());
274             
275             echo json_encode(AJAX_SUCCESS);
276 
277         } catch(Exception $exc) {
278             echo json_encode(array(
279                 'exceptions' => array(exceptionToJavaScript($exc))
280             ));
281         }       
282     }
283 }
284 
285 /* End of file backend.php */
286 /* Location: ./application/controllers/backend.php */

API documentation generated by ApiGen