PHP User::can_write_action Examples

Example #1

File: show_document.php Project: Kloadut/noalyss_ynh

if ($action == 'rm') {
    $json = '{"d_id":"-1"}';
    if ($g_user->check_action(RMDOC) == 1) {
        $doc = new Document($cn, $_REQUEST['d_id']);
        $doc->remove();
        $json = sprintf('{"d_id":"%s"}', $_REQUEST['d_id']);
    }
    header("Content-type: text/html; charset: utf8", true);
    print $json;
}
/* update the description of the document */
if ($action == "upd_doc") {
    if ($g_user->check_action(VIEWDOC) == 1) {
        $doc = new Document($cn, $_REQUEST['d_id']);
        $doc->get();
        if ($g_user->can_write_action($doc->ag_id)) {
            // retrieve the document
            $doc->update_description(strip_tags($_REQUEST['value']));
        }
    }
}
/* remove the operation from action_gestion_operation */
if ($action == 'rmop') {
    $json = '{"ago_id":"-1"}';
    $dt_id = $cn->get_value("select ag_id from action_gestion_operation where ago_id=\$1", array($_REQUEST['id']));
    if ($g_user->check_action(RMDOC) == 1 && $g_user->can_write_action($dt_id) == true) {
        $cn->exec_sql("delete from action_gestion_operation where ago_id=\$1", array($_REQUEST['id']));
        $json = sprintf('{"ago_id":"%s"}', $_REQUEST['id']);
    }
    header("Content-type: text/html; charset: utf8", true);
    print $json;