UWVA#26373 Bookmarks zichtbaarheid aansturen

svn path=/Website/trunk/; revision=24641
This commit is contained in:
Jos Groot Lipman
2015-03-31 12:41:14 +00:00
parent 934248df7e
commit c590e7f253
8 changed files with 26 additions and 10 deletions

View File

@@ -74,11 +74,16 @@ var showall = getQParamInt("showall", 0) == 1;
buttons = []; buttons = [];
buttons.push({ icon: "page_refresh.png", title: L("lcl_refresh"), action: "FcltMgr.reload()" }); buttons.push({ icon: "page_refresh.png", title: L("lcl_refresh"), action: "FcltMgr.reload()" });
if (authparams.PRSwritelevel < 9 && authparams.ALGwritelevel < 9) var authparamsPRSSYS = user.checkAutorisation("WEB_PRSSYS", true);
var hasPRSSYS = authparamsPRSSYS && authparamsPRSSYS.PRSwritelevel < 9 && authparamsPRSSYS.ALGwritelevel < 9;
if (hasPRSSYS)
{ {
var addurl = "appl/fac/fac_bookmark.asp"; var addurl = "appl/fac/fac_bookmark.asp";
buttons.push({ icon: "plus.png", title: L("lcl_add"), action: "FcltMgr.openDetail('" + addurl + "', '" + L("lcl_add") + "')" }); buttons.push({ icon: "plus.png", title: L("lcl_add"), action: "FcltMgr.openDetail('" + addurl + "', '" + L("lcl_add") + "')" });
} }
var flags = 2; // Zichtbaar voor FE
if (hasPRSSYS)
flags += 1; // of zichbaar PRSSSY
var sql = "SELECT fac_bookmark_id" var sql = "SELECT fac_bookmark_id"
+ " , fac_bookmark_path" + " , fac_bookmark_path"
@@ -88,6 +93,7 @@ var showall = getQParamInt("showall", 0) == 1;
+ " FROM fac_bookmark" + " FROM fac_bookmark"
+ " WHERE (fac_bookmark_expire IS NULL OR fac_bookmark_expire > SYSDATE)" + " WHERE (fac_bookmark_expire IS NULL OR fac_bookmark_expire > SYSDATE)"
+ " AND (fac_bookmark_query NOT LIKE 'session=%' OR fac_bookmark_query IS NULL)" + " AND (fac_bookmark_query NOT LIKE 'session=%' OR fac_bookmark_query IS NULL)"
+ " AND BITAND(fac_bookmark_flags, " + flags + ") <> 0"
+ " AND fac_bookmark_xmlnode IS NULL" // die zijn van ons zelf en worden niet geacht beheerd te worden. + " AND fac_bookmark_xmlnode IS NULL" // die zijn van ons zelf en worden niet geacht beheerd te worden.
+ " ORDER BY fac_bookmark_naam"; + " ORDER BY fac_bookmark_naam";
@@ -110,7 +116,8 @@ var showall = getQParamInt("showall", 0) == 1;
if (has_report_api) // dan is een deeplink mogelijk if (has_report_api) // dan is een deeplink mogelijk
rst.addColumn(new Column({caption: L("lcl_fac_bookmarkdeep"), content: fncolDeep})); rst.addColumn(new Column({caption: L("lcl_fac_bookmarkdeep"), content: fncolDeep}));
rst.addAction({ action: "bmk_show", caption: L("lcl_edit"), isDefault: true } ); if (authparamsPRSSYS && authparamsPRSSYS.PRSwritelevel < 9 && authparamsPRSSYS.ALGwritelevel < 9)
rst.addAction({ action: "bmk_show", caption: L("lcl_edit"), isDefault: true } );
var cnt = rst.processResultset(); var cnt = rst.processResultset();
%> %>

View File

@@ -21,8 +21,7 @@
FCLTHeader.Requires({ plugins: ["jQuery"] }) FCLTHeader.Requires({ plugins: ["jQuery"] })
// Autorisatie // Autorisatie
var authparamsPRSSYS = user.checkAutorisation("WEB_PRSSYS", true); var authparamsPRSSYS = user.checkAutorisation("WEB_PRSSYS");
user.auth_required_or_abort(authparamsPRSSYS.PRSwritelevel < 9 && authparamsPRSSYS.ALGwritelevel < 9);
var bkm_id = getQParam("bkm_id", ""); var bkm_id = getQParam("bkm_id", "");
var bkm_path ; var bkm_path ;

View File

@@ -20,8 +20,7 @@
FCLTHeader.Requires({ plugins:["jQuery"] }); FCLTHeader.Requires({ plugins:["jQuery"] });
// Autorisatie // Autorisatie
var authparamsPRSSYS = user.checkAutorisation("WEB_PRSSYS", true); var authparamsPRSSYS = user.checkAutorisation("WEB_PRSSYS");
user.auth_required_or_abort(authparamsPRSSYS.PRSwritelevel < 9 && authparamsPRSSYS.ALGwritelevel < 9);
var bkm_id = getFParam("bkm_id", ""); var bkm_id = getFParam("bkm_id", "");
var path = getFParam("path"); var path = getFParam("path");
@@ -35,7 +34,8 @@ var fields = [ { dbs: "fac_bookmark_naam", typ: "varchar", frm: "naam",
{ dbs: "fac_bookmark_query", typ: "varchar", frm: "query", len: 1000 }, { dbs: "fac_bookmark_query", typ: "varchar", frm: "query", len: 1000 },
{ dbs: "prs_perslid_key_auth", typ: "key", frm: "prskey_auth" }, { dbs: "prs_perslid_key_auth", typ: "key", frm: "prskey_auth" },
{ dbs: "fac_bookmark_unauth_url", typ: "varchar", frm: "unauth_url", len: 1000 }, { dbs: "fac_bookmark_unauth_url", typ: "varchar", frm: "unauth_url", len: 1000 },
{ dbs: "fac_bookmark_refreshtime", typ: "number", frm: "refresh"} { dbs: "fac_bookmark_refreshtime", typ: "number", frm: "refresh"},
{ dbs: "fac_bookmark_flags", typ: "number", val: 1+4} // Zichtbaar/wijzigbaar PRSSYS
]; ];
var warning = ""; var warning = "";

View File

@@ -9,6 +9,8 @@
Context: Handmatig? Context: Handmatig?
Note: Welbeschouwd is dit gewoon een url-shortener Note: Welbeschouwd is dit gewoon een url-shortener
http://sgf12/Facilitor5iWork/?bm=J448UIrR43 http://sgf12/Facilitor5iWork/?bm=J448UIrR43
JGL: volgens mij is dit bestand anno maart 2015 niet in gebruik?
*/ */
%> %>
@@ -41,13 +43,15 @@
} }
var bookmark_id = shared.random(16); var bookmark_id = shared.random(16);
var sql = "INSERT INTO fac_bookmark" var sql = "INSERT INTO fac_bookmark"
+ " (fac_bookmark_id, fac_bookmark_path, fac_bookmark_query, fac_bookmark_naam, prs_perslid_key)" + " (fac_bookmark_id, fac_bookmark_path, fac_bookmark_query, fac_bookmark_naam, prs_perslid_key, fac_bookmark_flags)"
+ " VALUES ("+safe.quoted_sql(bookmark_id) + " VALUES ("+safe.quoted_sql(bookmark_id)
+", "+safe.quoted_sql(path)+", " +", "+safe.quoted_sql(path)+", "
+safe.quoted_sql(query) +safe.quoted_sql(query)
+", " +", "
+safe.quoted_sql(naam) +safe.quoted_sql(naam)
+", " + user_key + ")"; +", " + user_key
+", 1+4" // zichtbaar en wijzigbaar PRSSYS
+ ")";
Oracle.Execute(sql); Oracle.Execute(sql);
} }
%> %>
@@ -56,7 +60,6 @@
<script language="javascript"> <script language="javascript">
function bm_submit() function bm_submit()
{ {
document.activeElement.blur(); // trigger laatste onChanges
if (!validateForm("u2")) if (!validateForm("u2"))
return false; return false;
document.forms.u2.submit(); document.forms.u2.submit();

View File

@@ -32,6 +32,7 @@
+ " fac_bookmark_naam, " + " fac_bookmark_naam, "
+ " fac_bookmark_path, " + " fac_bookmark_path, "
+ " fac_bookmark_query, " + " fac_bookmark_query, "
+ " fac_bookmark_flags, "
+ " fac_bookmark_expire ) " + " fac_bookmark_expire ) "
+ " VALUES ( " + " VALUES ( "
+ safe.quoted_sql(bookmarkId) + ", " + safe.quoted_sql(bookmarkId) + ", "
@@ -39,6 +40,7 @@
+ " 'PRS QR code indentificatie', " + " 'PRS QR code indentificatie', "
+ " 'appl/prs/prs_perslid_qr_confirm.asp', " // via de root + " 'appl/prs/prs_perslid_qr_confirm.asp', " // via de root
+ safe.quoted_sql("user_key=" + user_key) + ", " // is straks beschermd met HMAC + safe.quoted_sql("user_key=" + user_key) + ", " // is straks beschermd met HMAC
+ "0," // Zelfs onzichtbaar voor PRSSYS
+ " sysdate+("+S("qr_auth_expire")+"/24/60) )" + " sysdate+("+S("qr_auth_expire")+"/24/60) )"
Oracle.Execute(sql); Oracle.Execute(sql);

View File

@@ -110,6 +110,7 @@ sql = "INSERT INTO fac_bookmark ( "
+ " fac_bookmark_naam, " + " fac_bookmark_naam, "
+ " fac_bookmark_path, " + " fac_bookmark_path, "
+ " fac_bookmark_query, " + " fac_bookmark_query, "
+ " fac_bookmark_flags, "
+ " fac_bookmark_expire ) " + " fac_bookmark_expire ) "
+ " VALUES ( " + " VALUES ( "
+ safe.quoted_sql(bookmarkId) + ", " + safe.quoted_sql(bookmarkId) + ", "
@@ -117,6 +118,7 @@ sql = "INSERT INTO fac_bookmark ( "
+ " 'Self-registration', " + " 'Self-registration', "
+ " 'appl/prs/self_register_confirm.asp', " + " 'appl/prs/self_register_confirm.asp', "
+ safe.quoted_sql("user_key=" + prs_key) + ", " // is straks beschermd met HMAC + safe.quoted_sql("user_key=" + prs_key) + ", " // is straks beschermd met HMAC
+ "0," // Zelfs onzichtbaar voor PRSSYS
+ " sysdate+("+S("self_register_expire")+"/24/60) )" + " sysdate+("+S("self_register_expire")+"/24/60) )"
Oracle.Execute(sql); Oracle.Execute(sql);

View File

@@ -37,6 +37,7 @@ var sql = "INSERT INTO fac_bookmark"
+safe.quoted_sql(query) +safe.quoted_sql(query)
+", " +", "
+safe.quoted_sql(naam) +safe.quoted_sql(naam)
+ "1+2," // Zichtbaar voor PRSSYS en gewone gebruikers
+", " + user_key + ")"; +", " + user_key + ")";
Oracle.Execute(sql); Oracle.Execute(sql);

View File

@@ -74,6 +74,7 @@ else
+ " fac_bookmark_naam, " + " fac_bookmark_naam, "
+ " fac_bookmark_path, " + " fac_bookmark_path, "
+ " fac_bookmark_query, " + " fac_bookmark_query, "
+ " fac_bookmark_flags, "
+ " fac_bookmark_expire ) " + " fac_bookmark_expire ) "
+ " VALUES ( " + " VALUES ( "
+ safe.quoted_sql(bookmarkId) + ", " + safe.quoted_sql(bookmarkId) + ", "
@@ -81,6 +82,7 @@ else
+ " 'PRS password reset', " + " 'PRS password reset', "
+ safe.quoted_sql(url) + "," + safe.quoted_sql(url) + ","
+ safe.quoted_sql("user_key=" + perslid_key) + ", " // is straks beschermd met HMAC + safe.quoted_sql("user_key=" + perslid_key) + ", " // is straks beschermd met HMAC
+ "0," // Zelfs onzichtbaar voor PRSSYS
+ expire + " )" // Tot middernacht + expire + " )" // Tot middernacht
Oracle.Execute(sql); Oracle.Execute(sql);