mirror of
https://github.com/itflow-org/itflow
synced 2026-07-26 10:17:15 +00:00
250 lines
12 KiB
PHP
250 lines
12 KiB
PHP
<?php
|
|
|
|
require_once '../../../includes/modal_header.php';
|
|
|
|
$user_id = intval($_GET['id']);
|
|
|
|
$sql = mysqli_query($mysqli, "SELECT * FROM users
|
|
LEFT JOIN user_settings ON users.user_id = user_settings.user_id
|
|
WHERE users.user_id = $user_id LIMIT 1"
|
|
);
|
|
|
|
$row = mysqli_fetch_assoc($sql);
|
|
$user_name = escapeHtml($row['user_name']);
|
|
$user_email = escapeHtml($row['user_email']);
|
|
$user_avatar = escapeHtml($row['user_avatar']);
|
|
$user_token = escapeHtml($row['user_token']);
|
|
$user_config_force_mfa = intval($row['user_config_force_mfa']);
|
|
$user_role_id = intval($row['user_role_id']);
|
|
$user_initials = escapeHtml(initials($user_name));
|
|
|
|
// Get User Client Access Permissions (allow + deny)
|
|
$user_client_access_sql = mysqli_query($mysqli,"SELECT client_id, permission_type FROM user_client_permissions WHERE user_id = $user_id");
|
|
$client_allow_array = []; // allow
|
|
$client_deny_array = []; // deny
|
|
while ($row = mysqli_fetch_assoc($user_client_access_sql)) {
|
|
if ($row['permission_type'] === 'deny') {
|
|
$client_deny_array[] = intval($row['client_id']);
|
|
} else {
|
|
$client_allow_array[] = intval($row['client_id']);
|
|
}
|
|
}
|
|
|
|
ob_start();
|
|
|
|
?>
|
|
|
|
<div class="modal-header bg-dark">
|
|
<h5 class="modal-title"><i class="fas fa-fw fa-user-edit mr-2"></i>Editing user:
|
|
<strong><?php echo $user_name; ?></strong></h5>
|
|
<button type="button" class="close text-white" data-dismiss="modal">
|
|
<span>×</span>
|
|
</button>
|
|
</div>
|
|
<form action="post.php" method="post" enctype="multipart/form-data" autocomplete="off">
|
|
<input type="hidden" name="csrf_token" value="<?php echo $_SESSION['csrf_token'] ?>">
|
|
<input type="hidden" name="user_id" value="<?php echo $user_id; ?>">
|
|
<div class="modal-body">
|
|
|
|
<ul class="nav nav-pills nav-justified mb-3">
|
|
<li class="nav-item">
|
|
<a class="nav-link active" data-toggle="pill" href="#pills-user-details<?php echo $user_id; ?>">Details</a>
|
|
</li>
|
|
<li class="nav-item">
|
|
<a class="nav-link" data-toggle="pill" href="#pills-user-access<?php echo $user_id; ?>">Restrict Access</a>
|
|
</li>
|
|
</ul>
|
|
|
|
<hr>
|
|
|
|
<div class="tab-content">
|
|
|
|
<div class="tab-pane fade show active" id="pills-user-details<?php echo $user_id; ?>">
|
|
|
|
<center class="mb-3">
|
|
<?php if (!empty($user_avatar)) { ?>
|
|
<img class="img-fluid" src="<?php echo "../uploads/users/$user_id/$user_avatar"; ?>">
|
|
<?php } else { ?>
|
|
<span class="fa-stack fa-4x">
|
|
<i class="fa fa-circle fa-stack-2x text-secondary"></i>
|
|
<span class="fa fa-stack-1x text-white"><?php echo $user_initials; ?></span>
|
|
</span>
|
|
<?php } ?>
|
|
</center>
|
|
|
|
<div class="form-group">
|
|
<label>Name <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-user"></i></span>
|
|
</div>
|
|
<input type="text" class="form-control" name="name" placeholder="Full Name" maxlength="200"
|
|
value="<?php echo $user_name; ?>" required>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Email <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-envelope"></i></span>
|
|
</div>
|
|
<input type="email" class="form-control" name="email" placeholder="Email Address" maxlength="200"
|
|
value="<?php echo $user_email; ?>" required>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>New Password</label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-lock"></i></span>
|
|
</div>
|
|
<input type="password" class="form-control" data-toggle="password" name="new_password" id="password"
|
|
placeholder="Leave Blank For No Password Change" autocomplete="new-password">
|
|
<div class="input-group-append">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-eye"></i></span>
|
|
</div>
|
|
<div class="input-group-append">
|
|
<span class="btn btn-default"><i class="fa fa-fw fa-question" onclick="generatePassword()"></i></span>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Role <strong class="text-danger">*</strong></label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-user-shield"></i></span>
|
|
</div>
|
|
<select class="form-control select2" name="role" required>
|
|
<?php
|
|
$sql_user_roles = mysqli_query($mysqli, "SELECT * FROM user_roles WHERE role_archived_at IS NULL");
|
|
while ($row = mysqli_fetch_assoc($sql_user_roles)) {
|
|
$role_id = intval($row['role_id']);
|
|
$role_name = escapeHtml($row['role_name']);
|
|
|
|
?>
|
|
<option <?php if ($role_id == $user_role_id) {echo "selected";} ?> value="<?php echo $role_id; ?>"><?php echo $role_name; ?></option>
|
|
<?php } ?>
|
|
|
|
</select>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<label>Avatar</label>
|
|
<input type="file" class="form-control-file" accept="image/*" name="file">
|
|
</div>
|
|
|
|
<div class="form-group">
|
|
<div class="custom-control custom-checkbox">
|
|
<input class="custom-control-input" type="checkbox" id="forceMFACheckBox<?php echo $user_id; ?>" name="force_mfa" value="1" <?php if($user_config_force_mfa == 1){ echo "checked"; } ?>>
|
|
<label for="forceMFACheckBox<?php echo $user_id; ?>" class="custom-control-label">
|
|
Force MFA
|
|
</label>
|
|
</div>
|
|
</div>
|
|
|
|
<?php if (!empty($user_token)) { ?>
|
|
|
|
<div class="form-group">
|
|
<label>2FA</label>
|
|
<div class="input-group">
|
|
<div class="input-group-prepend">
|
|
<span class="input-group-text"><i class="fa fa-fw fa-id-card"></i></span>
|
|
</div>
|
|
<select class="form-control" name="2fa">
|
|
<option value="">Keep enabled</option>
|
|
<option value="disable">Disable</option>
|
|
</select>
|
|
</div>
|
|
</div>
|
|
|
|
<?php } ?>
|
|
</div>
|
|
|
|
<div class="tab-pane fade" id="pills-user-access<?php echo $user_id; ?>">
|
|
|
|
<div class="alert alert-info">
|
|
<strong>Allow</strong> restricts the user to the selected clients (no Allow = full access). <strong>Deny</strong> blocks a client regardless of Allow. Admin users are unaffected.
|
|
</div>
|
|
|
|
<div class="mb-2">
|
|
<small class="text-muted mr-2">Set all:</small>
|
|
<button type="button" class="btn btn-sm btn-outline-secondary" onclick="document.querySelectorAll('#accessTable<?php echo $user_id; ?> .perm-none').forEach(r => r.checked = true);">No Rule</button>
|
|
<button type="button" class="btn btn-sm btn-outline-success" onclick="document.querySelectorAll('#accessTable<?php echo $user_id; ?> .perm-allow').forEach(r => r.checked = true);">Allow</button>
|
|
<button type="button" class="btn btn-sm btn-outline-danger" onclick="document.querySelectorAll('#accessTable<?php echo $user_id; ?> .perm-deny').forEach(r => r.checked = true);">Deny</button>
|
|
</div>
|
|
|
|
<div class="table-responsive">
|
|
<table class="table table-sm table-hover mb-0" id="accessTable<?php echo $user_id; ?>">
|
|
<thead>
|
|
<tr>
|
|
<th>Client</th>
|
|
<th class="text-center" style="width: 90px;">No Rule</th>
|
|
<th class="text-center text-success" style="width: 90px;">Allow</th>
|
|
<th class="text-center text-danger" style="width: 90px;">Deny</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
|
|
<?php
|
|
$sql_client_select = mysqli_query($mysqli, "SELECT * FROM clients WHERE client_archived_at IS NULL ORDER BY client_name ASC");
|
|
while ($row = mysqli_fetch_assoc($sql_client_select)) {
|
|
$client_id_select = intval($row['client_id']);
|
|
$client_name_select = escapeHtml($row['client_name']);
|
|
$client_is_allow = in_array($client_id_select, $client_allow_array);
|
|
$client_is_deny = in_array($client_id_select, $client_deny_array);
|
|
?>
|
|
|
|
<tr>
|
|
<td class="align-middle"><?php echo $client_name_select; ?></td>
|
|
<td class="text-center align-middle">
|
|
<input type="radio" class="perm-none" name="client_permission[<?php echo $client_id_select; ?>]" value="" <?php if (!$client_is_allow && !$client_is_deny) { echo "checked"; } ?>>
|
|
</td>
|
|
<td class="text-center align-middle">
|
|
<input type="radio" class="perm-allow" name="client_permission[<?php echo $client_id_select; ?>]" value="allow" <?php if ($client_is_allow) { echo "checked"; } ?>>
|
|
</td>
|
|
<td class="text-center align-middle">
|
|
<input type="radio" class="perm-deny" name="client_permission[<?php echo $client_id_select; ?>]" value="deny" <?php if ($client_is_deny) { echo "checked"; } ?>>
|
|
</td>
|
|
</tr>
|
|
|
|
<?php } ?>
|
|
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
<div class="modal-footer">
|
|
<button type="submit" name="edit_user" class="btn btn-primary text-bold"><i class="fas fa-check mr-2"></i>Save</button>
|
|
<button type="button" class="btn btn-light" data-dismiss="modal"><i class="fas fa-times mr-2"></i>Cancel</button>
|
|
</div>
|
|
</form>
|
|
|
|
<script>
|
|
|
|
function generatePassword() {
|
|
// Send a GET request to ajax.php as ajax.php?get_readable_pass=true
|
|
jQuery.get(
|
|
"/agent/ajax.php", {
|
|
get_readable_pass: 'true'
|
|
},
|
|
function(data) {
|
|
//If we get a response from post.php, parse it as JSON
|
|
const password = JSON.parse(data);
|
|
document.getElementById("password").value = password;
|
|
}
|
|
);
|
|
}
|
|
|
|
</script>
|
|
|
|
<?php
|
|
require_once "../../../includes/modal_footer.php";
|