/**
  * surveypermission::addusergroup()
  * Function responsible to add usergroup.
  * @param mixed $surveyid
  * @return void
  */
 function addusergroup($surveyid)
 {
     $aData['surveyid'] = $surveyid = sanitize_int($surveyid);
     $aViewUrls = array();
     $action = $_POST['action'];
     $clang = Yii::app()->lang;
     $imageurl = Yii::app()->getConfig('imageurl');
     $postusergroupid = !empty($_POST['ugid']) ? $_POST['ugid'] : false;
     if ($action == "addusergroupsurveysecurity") {
         $addsummary = "<div class=\"header\">" . $clang->gT("Add user group") . "</div>\n";
         $addsummary .= "<div class=\"messagebox ui-corner-all\" >\n";
         $result = Survey::model()->findAll('sid = :surveyid AND owner_id = :owner_id', array(':surveyid' => $surveyid, ':owner_id' => Yii::app()->session['loginID']));
         if (count($result) > 0 && in_array($postusergroupid, getSurveyUserGroupList('simpleugidarray', $surveyid)) || Yii::app()->session['USER_RIGHT_SUPERADMIN'] == 1) {
             if ($postusergroupid > 0) {
                 $result2 = User::model()->getCommonUID($surveyid, $postusergroupid);
                 //Checked
                 $result2 = $result2->readAll();
                 if (count($result2) > 0) {
                     foreach ($result2 as $row2) {
                         $uid_arr[] = $row2['uid'];
                         $isrresult = Survey_permissions::model()->insertSomeRecords(array('sid' => $surveyid, 'uid' => $row2['uid'], 'permission' => 'survey', 'read_p' => 1));
                         if (!$isrresult) {
                             break;
                         }
                     }
                     if ($isrresult) {
                         $addsummary .= "<div class=\"successheader\">" . $clang->gT("User group added.") . "</div>\n";
                         Yii::app()->session['uids'] = $uid_arr;
                         $addsummary .= "<br />" . CHtml::form(array("admin/surveypermission/sa/set/surveyid/{$surveyid}"), 'post') . "<input type='submit' value='" . $clang->gT("Set Survey Rights") . "' />" . "<input type='hidden' name='action' value='setusergroupsurveysecurity' />" . "<input type='hidden' name='ugid' value='{$postusergroupid}' />" . "</form>\n";
                     } else {
                         // Error while adding user to the database
                         $addsummary .= "<div class=\"warningheader\">" . $clang->gT("Failed to add user group.") . "</div>\n";
                         $addsummary .= "<br/><input type=\"submit\" onclick=\"window.open('" . $this->getController()->createUrl('admin/surveypermission/sa/view/surveyid/' . $surveyid) . "', '_top')\" value=\"" . $clang->gT("Continue") . "\"/>\n";
                     }
                 } else {
                     // no user to add
                     $addsummary .= "<div class=\"warningheader\">" . $clang->gT("Failed to add user group.") . "</div>\n";
                     $addsummary .= "<br/><input type=\"submit\" onclick=\"window.open('" . $this->getController()->createUrl('admin/surveypermission/sa/view/surveyid/' . $surveyid) . "', '_top')\" value=\"" . $clang->gT("Continue") . "\"/>\n";
                 }
             } else {
                 $addsummary .= "<div class=\"warningheader\">" . $clang->gT("Failed to add user.") . "</div>\n" . "<br />" . $clang->gT("No Username selected.") . "<br />\n";
                 $addsummary .= "<br/><input type=\"submit\" onclick=\"window.open('" . $this->getController()->createUrl('admin/surveypermission/sa/view/surveyid/' . $surveyid) . "', '_top')\" value=\"" . $clang->gT("Continue") . "\"/>\n";
             }
         } else {
             accessDenied();
         }
         $addsummary .= "</div>\n";
         $aViewUrls['output'] = $addsummary;
     }
     $this->_renderWrappedTemplate('authentication', $aViewUrls, $aData);
 }
Example #2
0
 /**
  * surveypermission::addusergroup()
  * Function responsible to add usergroup.
  * @param mixed $surveyid
  * @return void
  */
 function addusergroup($surveyid)
 {
     $aData['surveyid'] = $surveyid = sanitize_int($surveyid);
     $aViewUrls = array();
     $action = $_POST['action'];
     $imageurl = Yii::app()->getConfig('imageurl');
     $postusergroupid = !empty($_POST['ugid']) ? $_POST['ugid'] : false;
     if ($action == "addusergroupsurveysecurity") {
         //////////////////
         $addsummary = "<div id='edit-permission' class='side-body " . getSideBodyClass(false) . "'>";
         $addsummary .= '<div class="row"><div class="col-lg-12 content-right">';
         $result = Survey::model()->findAll('sid = :surveyid AND owner_id = :owner_id', array(':surveyid' => $surveyid, ':owner_id' => Yii::app()->session['loginID']));
         if (Permission::model()->hasSurveyPermission($surveyid, 'surveysecurity', 'create') && in_array($postusergroupid, getSurveyUserGroupList('simpleugidarray', $surveyid))) {
             if ($postusergroupid > 0) {
                 $result2 = User::model()->getCommonUID($surveyid, $postusergroupid);
                 //Checked
                 $result2 = $result2->readAll();
                 if (count($result2) > 0) {
                     foreach ($result2 as $row2) {
                         $uid_arr[] = $row2['uid'];
                         $isrresult = Permission::model()->insertSomeRecords(array('entity_id' => $surveyid, 'entity' => 'survey', 'uid' => $row2['uid'], 'permission' => 'survey', 'read_p' => 1));
                         if (!$isrresult) {
                             break;
                         }
                     }
                     if ($isrresult) {
                         $addsummary .= "<div class=\"jumbotron message-box\">\n";
                         $addsummary .= "<h2>" . gT("Add user group") . "</h2>\n";
                         $addsummary .= "<p class='lead'>" . gT("User group added.") . "</p>\n";
                         $addsummary .= "<p>";
                         Yii::app()->session['uids'] = $uid_arr;
                         $addsummary .= "<br />" . CHtml::form(array("admin/surveypermission/sa/set/surveyid/{$surveyid}"), 'post') . "<input class='btn btn-default'  type='submit' value='" . gT("Set Survey Rights") . "' />" . "<input type='hidden' name='action' value='setusergroupsurveysecurity' />" . "<input type='hidden' name='ugid' value='{$postusergroupid}' />" . "</form></p>\n";
                     } else {
                         // Error while adding user to the database
                         $addsummary .= "<div class=\"jumbotron message-box message-box\">\n";
                         $addsummary .= "<h2>" . gT("Add user group") . "</h2>\n";
                         $addsummary .= "<p class='lead'>" . gT("Failed to add user group.") . "</p>\n";
                         $addsummary .= "<p>";
                         $addsummary .= "<br/><input class='btn btn-default'  type=\"submit\" onclick=\"window.open('" . $this->getController()->createUrl('admin/surveypermission/sa/view/surveyid/' . $surveyid) . "', '_top')\" value=\"" . gT("Continue") . "\"/>\n";
                         $addsummary .= "</p>";
                     }
                 } else {
                     // no user to add
                     $addsummary .= "<div class=\"jumbotron message-box message-box\">\n";
                     $addsummary .= "<h2>" . gT("Add user group") . "</h2>\n";
                     $addsummary .= "<p class='lead'>" . gT("Failed to add user group.") . "</p>\n";
                     $addsummary .= "<p>";
                     $addsummary .= "<br/><input class='btn btn-default'  type=\"submit\" onclick=\"window.open('" . $this->getController()->createUrl('admin/surveypermission/sa/view/surveyid/' . $surveyid) . "', '_top')\" value=\"" . gT("Continue") . "\"/>\n";
                     $addsummary .= "</p>";
                 }
             } else {
                 $addsummary .= "<div class=\"jumbotron message-box message-box\">\n";
                 $addsummary .= "<h2>" . gT("Add user group") . "</h2>\n";
                 $addsummary .= "<p class='lead'>" . gT("Failed to add user group.") . "</p>\n";
                 $addsummary .= "<p>" . gT("No Username selected.") . "</p>\n";
                 $addsummary .= "<p>";
                 $addsummary .= "<br/><input class='btn btn-default'  type=\"submit\" onclick=\"window.open('" . $this->getController()->createUrl('admin/surveypermission/sa/view/surveyid/' . $surveyid) . "', '_top')\" value=\"" . gT("Continue") . "\"/>\n";
                 $addsummary .= "</p>";
             }
         } else {
             $this->getController()->error('Access denied');
         }
         $addsummary .= "</div>\n";
         $addsummary .= '</div></div></div>';
         $aViewUrls['output'] = $addsummary;
     }
     $aData['sidemenu']['state'] = false;
     $surveyinfo = Survey::model()->findByPk($surveyid)->surveyinfo;
     $aData['title_bar']['title'] = $surveyinfo['surveyls_title'] . "(" . gT("ID") . ":" . $surveyid . ")";
     $this->_renderWrappedTemplate('authentication', $aViewUrls, $aData);
 }