index.php 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352
  1. <?php
  2. include($_SERVER['DOCUMENT_ROOT'] . "/Authorization/script/php/permission/check_right.php");
  3. ?>
  4. <!doctype html>
  5. <html class="fixed sidebar-left-collapsed">
  6. <head>
  7. <!-- Basic -->
  8. <meta charset="UTF-8">
  9. <title>帳號權限管理系統</title>
  10. <meta name="keywords" content="HTML5 Admin Template" />
  11. <meta name="description" content="JSOFT Admin - Responsive HTML5 Template">
  12. <meta name="author" content="JSOFT.net">
  13. <!-- Mobile Metas -->
  14. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
  15. <!-- Web Fonts -->
  16. <link href="http://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800|Shadows+Into+Light" rel="stylesheet" type="text/css">
  17. <!-- Vendor CSS -->
  18. <link rel="stylesheet" href="assets/vendor/bootstrap/css/bootstrap.css" />
  19. <link rel="stylesheet" href="assets/vendor/font-awesome/css/font-awesome.css" />
  20. <link rel="stylesheet" href="assets/vendor/magnific-popup/magnific-popup.css" />
  21. <link rel="stylesheet" href="assets/vendor/bootstrap-datepicker/css/datepicker3.css" />
  22. <!-- Specific Page Vendor CSS -->
  23. <link rel="stylesheet" href="assets/vendor/select2/select2.css" />
  24. <link rel="stylesheet" href="assets/vendor/jquery-datatables-bs3/assets/css/datatables.css" />
  25. <!-- Theme CSS -->
  26. <link rel="stylesheet" href="assets/stylesheets/theme.css" />
  27. <!-- Skin CSS -->
  28. <link rel="stylesheet" href="assets/stylesheets/skins/default.css" />
  29. <!-- Theme Custom CSS -->
  30. <link rel="stylesheet" href="assets/stylesheets/theme-custom.css">
  31. <!-- Role Custom CSS -->
  32. <link rel="stylesheet" href="assets/stylesheets/role.css" />
  33. <!-- Head Libs -->
  34. <script src="assets/vendor/modernizr/modernizr.js"></script>
  35. <script src="assets/vendor/jquery/jquery.js"></script>
  36. <!-- Icon -->
  37. <link rel="shortcut icon" href="assets/images/favicon.ico" />
  38. <!-- vue3 -->
  39. <script src="https://unpkg.com/vue@next"></script>
  40. <script src="./script/js/global.js"></script>
  41. <style>
  42. td {
  43. font-size: 20px;
  44. color: black;
  45. }
  46. select {
  47. font-size: 12px;
  48. color: black;
  49. }
  50. .right {
  51. position: absolute;
  52. right: 8px;
  53. }
  54. </style>
  55. <script type="application/javascript">
  56. var userName = '<?php echo $_SESSION['name']; ?>';
  57. var pageHeader = '帳號權限管理系統';
  58. var role = '<?php echo ($groupName); ?>';
  59. var roles;
  60. var users;
  61. var groups;
  62. var groupDropdown;
  63. var checkManager = 0;
  64. var test;
  65. function getDeptUser() {
  66. $.ajax({
  67. url: "./script/php/API/get_dept_user.php",
  68. type: "POST",
  69. dataType: "json"
  70. }).done(function(result) {
  71. roles = result.permissions;
  72. users = result.users;
  73. users.forEach(function(data) {
  74. let btn = getPermissions(data.GroupID, data.GroupName, data.UserID);
  75. $('#table-data').append(`<tr>
  76. <td>${data.UserID}</td>
  77. <td>${data.Account}</td>
  78. <td>${data.UserName}</td>
  79. <td>${data.DepartmentID}</td>
  80. <td id="${data.UserID}">
  81. <div class="btn-group">
  82. <button type="button" class="mb-xs mt-xs mr-xs btn btn-default dropdown-toggle" data-toggle="dropdown">新增身分 <span class="caret"></span></button>
  83. <ul class="dropdown-menu" role="menu" style="cursor: default;">
  84. ${groupDropdown}
  85. </ul>
  86. </div>
  87. ${btn}
  88. </td>
  89. </tr>`);
  90. });
  91. }).error(function(error) {
  92. console.log(error);
  93. }).complete(function(e) {
  94. $('#datatable').DataTable({
  95. bProcessing: true,
  96. responsive: true,
  97. "searching": true,
  98. "pageLength": 10,
  99. "language": {
  100. "processing": "處理中...",
  101. "loadingRecords": "載入中...",
  102. "lengthMenu": "顯示 _MENU_ 項結果",
  103. "zeroRecords": "沒有符合的結果或是沒有資料",
  104. "info": "顯示第 _START_ 至 _END_ 項結果,共 _TOTAL_ 項",
  105. "infoEmpty": "顯示第 0 至 0 項結果,共 0 項",
  106. "infoFiltered": "(從 _MAX_ 項結果中過濾)",
  107. "infoPostFix": "",
  108. "search": "",
  109. "paginate": {
  110. "first": '<i class="fa fa-step-backward"></i>',
  111. "previous": '<i class="fa fa-backward"></i>',
  112. "next": '<i class="fa fa-forward"></i>',
  113. "last": '<i class="fa fa-step-forward"></i>'
  114. },
  115. "aria": {
  116. "sortAscending": ": 升冪排列",
  117. "sortDescending": ": 降冪排列"
  118. }
  119. },
  120. });
  121. $('body .dropdown-toggle').dropdown();
  122. $("body").on('click', '.groupDropdown', function(e) {
  123. let groupName = $(this).text();
  124. let groupID = $(this).attr('groupID');
  125. let userAccount = $(this).closest("td").attr('id');
  126. $(this).closest("td").append(addPermission(groupID, groupName, userAccount));
  127. })
  128. });
  129. }
  130. function getGroup() {
  131. $.ajax({
  132. url: "./script/php/API/get_group.php",
  133. type: "POST",
  134. dataType: "json"
  135. }).done(function(result) {
  136. groups = result;
  137. groupDropdown = '';
  138. groups.forEach(function(group) {
  139. groupDropdown += `<li class="li-${group.GroupID}"><a groupID="${group.GroupID}" class="groupDropdown" >${group.GroupName}</a></li>`;
  140. });
  141. }).error(function(error) {
  142. console.log(error);
  143. });
  144. }
  145. function getPermissions(groupIDs, groupNames, userID) {
  146. var result = "";
  147. groupIDs.forEach(function(groupID, index) {
  148. result += `<button id="btn-${userID}-${groupID}" onclick="delPermission('${userID}','${groupID}');" class="btn btn-${groupID}">${groupNames[index]}</button> `;
  149. if (groupID == 'Manager') {
  150. checkManager++;
  151. }
  152. });
  153. return result;
  154. }
  155. function addPermission(groupID, groupName, userID) {
  156. var result = "";
  157. user = users.find(user => user.UserID == userID);
  158. if (!user.GroupName.includes(role)) {
  159. addPermissionDB(user.UserID, groupID);
  160. result += `<button id="btn-${userID}-${groupID}" onclick="delPermission('${userID}','${groupID}');" class="btn btn-${groupID}">${groupName}</button> `;
  161. user.GroupName.push(groupName);
  162. user.GroupID.push(groupID);
  163. return result;
  164. } else {
  165. return result;
  166. }
  167. }
  168. function addPermissionDB(userID, groupID) {
  169. $.ajax({
  170. url: "./script/php/API/insert_role.php",
  171. type: "POST",
  172. dataType: "text",
  173. data: {
  174. UserID: userID,
  175. GroupID: groupID,
  176. }
  177. }).done(function(result) {
  178. if (result == 'success' && groupID == 'Manager') {
  179. checkManager++;
  180. alert('身分新增成功!');
  181. } else if(result == 'success'){
  182. alert('身分新增成功!');
  183. }else {
  184. console.log(result);
  185. }
  186. }).error(function(error) {
  187. console.log(error);
  188. });
  189. }
  190. function delPermission(userID, groupID) {
  191. if (groupID != 'User' && groupID != 'Guest') {
  192. if (groupID == 'Manager') {
  193. if (checkManager > 1) {
  194. delPermissionDB(userID, groupID);
  195. $(`#btn-${userID}-${groupID}`).remove();
  196. } else {
  197. alert('部門至少要有一名管理員!');
  198. }
  199. } else {
  200. delPermissionDB(userID, groupID);
  201. $(`#btn-${userID}-${groupID}`).remove();
  202. }
  203. }else{
  204. alert('身分最低為一般用戶!請勿刪除!');
  205. }
  206. }
  207. function delPermissionDB(userID, groupID) {
  208. $.ajax({
  209. url: "./script/php/API/delete_role.php",
  210. type: "POST",
  211. dataType: "text",
  212. data: {
  213. UserID: userID,
  214. GroupID: groupID,
  215. }
  216. }).done(function(result) {
  217. if (result == 'success' && groupID == 'Manager') {
  218. checkManager--;
  219. alert('身分刪除成功!');
  220. } else if(result == 'success'){
  221. alert('身分刪除成功!');
  222. }else {
  223. console.log(result);
  224. }
  225. }).error(function(error) {
  226. console.log(error);
  227. });
  228. }
  229. </script>
  230. </head>
  231. <body>
  232. <section class="body">
  233. <!-- start: header -->
  234. <header-menu></header-menu>
  235. <!-- end: header -->
  236. <div class="inner-wrapper">
  237. <!-- start: sidebar -->
  238. <side-bar-hide></side-bar-hide>
  239. <!-- end: sidebar -->
  240. <section role="main" class="content-body" id="contentBody">
  241. <header class="page-header">
  242. <h2>{{pageHeader}}</h2>
  243. </header>
  244. <!-- <role-block v-for="item in roles" v-bind:tbodyId='item.id' v-bind:title='item.title' v-bind:tableId='item.idd'></role-block> -->
  245. <section class="panel">
  246. <header class="panel-heading">
  247. <div class="panel-actions">
  248. <a href="#" class="fa fa-caret-down"></a>
  249. <a href="#" class="fa fa-times"></a>
  250. </div>
  251. <h2 id="testID" class="panel-title">所有系統</h2>
  252. </header>
  253. <div class="panel-body">
  254. <table class="table table-bordered table-striped mb-none" id="datatable">
  255. <thead>
  256. <tr>
  257. <th>員工編號</th>
  258. <th>使用者帳號</th>
  259. <th>使用者名稱</th>
  260. <th>所屬部門</th>
  261. <th>使用者權限(點擊以刪除權限)</th>
  262. </tr>
  263. </thead>
  264. <tbody id="table-data">
  265. </tbody>
  266. </table>
  267. </div>
  268. </section>
  269. </div>
  270. </section>
  271. <script>
  272. vm.mount('.body');
  273. getGroup();
  274. getDeptUser();
  275. $(function() {
  276. });
  277. </script>
  278. <!-- Vendor -->
  279. <script src="assets/vendor/jquery-browser-mobile/jquery.browser.mobile.js"></script>
  280. <script src="assets/vendor/bootstrap/js/bootstrap.js"></script>
  281. <script src="assets/vendor/nanoscroller/nanoscroller.js"></script>
  282. <script src="assets/vendor/bootstrap-datepicker/js/bootstrap-datepicker.js"></script>
  283. <script src="assets/vendor/magnific-popup/magnific-popup.js"></script>
  284. <script src="assets/vendor/jquery-placeholder/jquery.placeholder.js"></script>
  285. <!-- Specific Page Vendor -->
  286. <script src="assets/vendor/select2/select2.js"></script>
  287. <script src="assets/vendor/jquery-datatables/media/js/jquery.dataTables.js"></script>
  288. <script src="assets/vendor/jquery-datatables/extras/TableTools/js/dataTables.tableTools.min.js"></script>
  289. <script src="assets/vendor/jquery-datatables-bs3/assets/js/datatables.js"></script>
  290. <!-- Theme Base, Components and Settings -->
  291. <script src="assets/javascripts/theme.js"></script>
  292. <!-- Theme Custom -->
  293. <script src="assets/javascripts/theme.custom.js"></script>
  294. <!-- Theme Initialization Files -->
  295. <script src="assets/javascripts/theme.init.js"></script>
  296. <!-- Examples -->
  297. <script src="assets/javascripts/tables/examples.datatables.default.js"></script>
  298. <script src="assets/javascripts/tables/examples.datatables.row.with.details.js"></script>
  299. <script src="assets/javascripts/tables/examples.datatables.tabletools.js"></script>
  300. </section>
  301. </body>
  302. </html>