index.php 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353
  1. <?php
  2. include($_SERVER['DOCUMENT_ROOT'] . "/Authorization/script/php/permission/check_right.php");
  3. ?>
  4. <!doctype html>
  5. <html class="fixed sidebar-left-collapsed">
  6. <head>
  7. <!-- Basic -->
  8. <meta charset="UTF-8">
  9. <title>帳號權限管理系統</title>
  10. <meta name="keywords" content="HTML5 Admin Template" />
  11. <meta name="description" content="JSOFT Admin - Responsive HTML5 Template">
  12. <meta name="author" content="JSOFT.net">
  13. <!-- Mobile Metas -->
  14. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" />
  15. <!-- Web Fonts -->
  16. <link href="http://fonts.googleapis.com/css?family=Open+Sans:300,400,600,700,800|Shadows+Into+Light" rel="stylesheet" type="text/css">
  17. <!-- Vendor CSS -->
  18. <link rel="stylesheet" href="assets/vendor/bootstrap/css/bootstrap.css" />
  19. <link rel="stylesheet" href="assets/vendor/font-awesome/css/font-awesome.css" />
  20. <link rel="stylesheet" href="assets/vendor/magnific-popup/magnific-popup.css" />
  21. <link rel="stylesheet" href="assets/vendor/bootstrap-datepicker/css/datepicker3.css" />
  22. <!-- Specific Page Vendor CSS -->
  23. <link rel="stylesheet" href="assets/vendor/select2/select2.css" />
  24. <link rel="stylesheet" href="assets/vendor/jquery-datatables-bs3/assets/css/datatables.css" />
  25. <!-- Theme CSS -->
  26. <link rel="stylesheet" href="assets/stylesheets/theme.css" />
  27. <!-- Skin CSS -->
  28. <link rel="stylesheet" href="assets/stylesheets/skins/default.css" />
  29. <!-- Theme Custom CSS -->
  30. <link rel="stylesheet" href="assets/stylesheets/theme-custom.css">
  31. <!-- Role Custom CSS -->
  32. <link rel="stylesheet" href="assets/stylesheets/role.css" />
  33. <!-- Head Libs -->
  34. <script src="assets/vendor/modernizr/modernizr.js"></script>
  35. <script src="assets/vendor/jquery/jquery.js"></script>
  36. <!-- Icon -->
  37. <link rel="shortcut icon" href="assets/images/favicon.ico" />
  38. <!-- vue3 -->
  39. <script src="https://unpkg.com/vue@next"></script>
  40. <script src="./script/js/global.js"></script>
  41. <script src="/Common/script/js/user-image.js"></script>
  42. <style>
  43. td {
  44. font-size: 20px;
  45. color: black;
  46. }
  47. select {
  48. font-size: 12px;
  49. color: black;
  50. }
  51. .right {
  52. position: absolute;
  53. right: 8px;
  54. }
  55. </style>
  56. <script type="application/javascript">
  57. var userName = '<?php echo $_SESSION['name']; ?>';
  58. var pageHeader = '帳號權限管理系統';
  59. var role = '<?php echo ($groupName); ?>';
  60. var right = <?php echo ($right); ?>;
  61. var roles;
  62. var users;
  63. var groups;
  64. var groupDropdown;
  65. var checkManager = 0;
  66. var test;
  67. function getDeptUser() {
  68. $.ajax({
  69. url: "./script/php/API/get_dept_user.php",
  70. type: "POST",
  71. dataType: "json"
  72. }).done(function(result) {
  73. roles = result.permissions;
  74. users = result.users;
  75. users.forEach(function(data) {
  76. let btn = getPermissions(data.GroupID, data.GroupName, data.UserID);
  77. $('#table-data').append(`<tr>
  78. <td>${data.UserID}</td>
  79. <td>${data.Account}</td>
  80. <td>${data.UserName}</td>
  81. <td>${data.DepartmentID}</td>
  82. <td id="${data.UserID}">
  83. <div class="btn-group">
  84. <button type="button" class="mb-xs mt-xs mr-xs btn btn-default dropdown-toggle" data-toggle="dropdown">新增身分 <span class="caret"></span></button>
  85. <ul class="dropdown-menu" role="menu" style="cursor: default;">
  86. ${groupDropdown}
  87. </ul>
  88. </div>
  89. ${btn}
  90. </td>
  91. </tr>`);
  92. });
  93. }).error(function(error) {
  94. console.log(error);
  95. }).complete(function(e) {
  96. $('#datatable').DataTable({
  97. bProcessing: true,
  98. responsive: true,
  99. "searching": true,
  100. "pageLength": 10,
  101. "language": {
  102. "processing": "處理中...",
  103. "loadingRecords": "載入中...",
  104. "lengthMenu": "顯示 _MENU_ 項結果",
  105. "zeroRecords": "沒有符合的結果或是沒有資料",
  106. "info": "顯示第 _START_ 至 _END_ 項結果,共 _TOTAL_ 項",
  107. "infoEmpty": "顯示第 0 至 0 項結果,共 0 項",
  108. "infoFiltered": "(從 _MAX_ 項結果中過濾)",
  109. "infoPostFix": "",
  110. "search": "",
  111. "paginate": {
  112. "first": '<i class="fa fa-step-backward"></i>',
  113. "previous": '<i class="fa fa-backward"></i>',
  114. "next": '<i class="fa fa-forward"></i>',
  115. "last": '<i class="fa fa-step-forward"></i>'
  116. },
  117. "aria": {
  118. "sortAscending": ": 升冪排列",
  119. "sortDescending": ": 降冪排列"
  120. }
  121. },
  122. });
  123. $('body .dropdown-toggle').dropdown();
  124. $("body").on('click', '.groupDropdown', function(e) {
  125. let groupName = $(this).text();
  126. let groupID = $(this).attr('groupID');
  127. let userAccount = $(this).closest("td").attr('id');
  128. $(this).closest("td").append(addPermission(groupID, groupName, userAccount));
  129. })
  130. });
  131. }
  132. function getGroup() {
  133. $.ajax({
  134. url: "./script/php/API/get_group.php",
  135. type: "POST",
  136. dataType: "json"
  137. }).done(function(result) {
  138. groups = result;
  139. groupDropdown = '';
  140. groups.forEach(function(group) {
  141. groupDropdown += `<li class="li-${group.GroupID}"><a groupID="${group.GroupID}" class="groupDropdown" >${group.GroupName}</a></li>`;
  142. });
  143. }).error(function(error) {
  144. console.log(error);
  145. });
  146. }
  147. function getPermissions(groupIDs, groupNames, userID) {
  148. var result = "";
  149. groupIDs.forEach(function(groupID, index) {
  150. result += `<button id="btn-${userID}-${groupID}" onclick="delPermission('${userID}','${groupID}');" class="btn btn-${groupID}">${groupNames[index]}</button> `;
  151. if (groupID == 'Manager') {
  152. checkManager++;
  153. }
  154. });
  155. return result;
  156. }
  157. function addPermission(groupID, groupName, userID) {
  158. var result = "";
  159. user = users.find(user => user.UserID == userID);
  160. if (!user.GroupName.includes(role)) {
  161. addPermissionDB(user.UserID, groupID);
  162. result += `<button id="btn-${userID}-${groupID}" onclick="delPermission('${userID}','${groupID}');" class="btn btn-${groupID}">${groupName}</button> `;
  163. user.GroupName.push(groupName);
  164. user.GroupID.push(groupID);
  165. return result;
  166. } else {
  167. return result;
  168. }
  169. }
  170. function addPermissionDB(userID, groupID) {
  171. $.ajax({
  172. url: "./script/php/API/insert_role.php",
  173. type: "POST",
  174. dataType: "text",
  175. data: {
  176. UserID: userID,
  177. GroupID: groupID,
  178. }
  179. }).done(function(result) {
  180. if (result == 'success' && groupID == 'Manager') {
  181. checkManager++;
  182. alert('身分新增成功!');
  183. } else if(result == 'success'){
  184. alert('身分新增成功!');
  185. }else {
  186. console.log(result);
  187. }
  188. }).error(function(error) {
  189. console.log(error);
  190. });
  191. }
  192. function delPermission(userID, groupID) {
  193. if (groupID != 'User' && groupID != 'Guest') {
  194. if (groupID == 'Manager') {
  195. if (checkManager > 1) {
  196. delPermissionDB(userID, groupID);
  197. $(`#btn-${userID}-${groupID}`).remove();
  198. } else {
  199. alert('部門至少要有一名管理員!');
  200. }
  201. } else {
  202. delPermissionDB(userID, groupID);
  203. $(`#btn-${userID}-${groupID}`).remove();
  204. }
  205. }else{
  206. alert('身分最低為一般用戶!請勿刪除!');
  207. }
  208. }
  209. function delPermissionDB(userID, groupID) {
  210. $.ajax({
  211. url: "./script/php/API/delete_role.php",
  212. type: "POST",
  213. dataType: "text",
  214. data: {
  215. UserID: userID,
  216. GroupID: groupID,
  217. }
  218. }).done(function(result) {
  219. if (result == 'success' && groupID == 'Manager') {
  220. checkManager--;
  221. alert('身分刪除成功!');
  222. } else if(result == 'success'){
  223. alert('身分刪除成功!');
  224. }else {
  225. console.log(result);
  226. }
  227. }).error(function(error) {
  228. console.log(error);
  229. });
  230. }
  231. </script>
  232. </head>
  233. <body>
  234. <section class="body">
  235. <!-- start: header -->
  236. <header-menu></header-menu>
  237. <!-- end: header -->
  238. <div class="inner-wrapper">
  239. <!-- start: sidebar -->
  240. <side-bar></side-bar>
  241. <!-- end: sidebar -->
  242. <section role="main" class="content-body" id="contentBody">
  243. <header class="page-header">
  244. <h2>{{pageHeader}}</h2>
  245. </header>
  246. <!-- <role-block v-for="item in roles" v-bind:tbodyId='item.id' v-bind:title='item.title' v-bind:tableId='item.idd'></role-block> -->
  247. <section class="panel">
  248. <header class="panel-heading">
  249. <div class="panel-actions">
  250. <a href="#" class="fa fa-caret-down"></a>
  251. <a href="#" class="fa fa-times"></a>
  252. </div>
  253. <h2 id="testID" class="panel-title">所有系統</h2>
  254. </header>
  255. <div class="panel-body">
  256. <table class="table table-bordered table-striped mb-none" id="datatable">
  257. <thead>
  258. <tr>
  259. <th>員工編號</th>
  260. <th>使用者帳號</th>
  261. <th>使用者名稱</th>
  262. <th>所屬部門</th>
  263. <th>使用者權限(點擊以刪除權限)</th>
  264. </tr>
  265. </thead>
  266. <tbody id="table-data">
  267. </tbody>
  268. </table>
  269. </div>
  270. </section>
  271. </div>
  272. </section>
  273. <script>
  274. vm.mount('.body');
  275. getGroup();
  276. getDeptUser();
  277. $(function() {
  278. addUserImage(userName.charAt(0),role);
  279. });
  280. </script>
  281. <!-- Vendor -->
  282. <script src="assets/vendor/jquery-browser-mobile/jquery.browser.mobile.js"></script>
  283. <script src="assets/vendor/bootstrap/js/bootstrap.js"></script>
  284. <script src="assets/vendor/nanoscroller/nanoscroller.js"></script>
  285. <script src="assets/vendor/bootstrap-datepicker/js/bootstrap-datepicker.js"></script>
  286. <script src="assets/vendor/magnific-popup/magnific-popup.js"></script>
  287. <script src="assets/vendor/jquery-placeholder/jquery.placeholder.js"></script>
  288. <!-- Specific Page Vendor -->
  289. <script src="assets/vendor/select2/select2.js"></script>
  290. <script src="assets/vendor/jquery-datatables/media/js/jquery.dataTables.js"></script>
  291. <script src="assets/vendor/jquery-datatables/extras/TableTools/js/dataTables.tableTools.min.js"></script>
  292. <script src="assets/vendor/jquery-datatables-bs3/assets/js/datatables.js"></script>
  293. <!-- Theme Base, Components and Settings -->
  294. <script src="assets/javascripts/theme.js"></script>
  295. <!-- Theme Custom -->
  296. <script src="assets/javascripts/theme.custom.js"></script>
  297. <!-- Theme Initialization Files -->
  298. <script src="assets/javascripts/theme.init.js"></script>
  299. <!-- Examples -->
  300. <script src="assets/javascripts/tables/examples.datatables.default.js"></script>
  301. <script src="assets/javascripts/tables/examples.datatables.row.with.details.js"></script>
  302. <script src="assets/javascripts/tables/examples.datatables.tabletools.js"></script>
  303. </section>
  304. </body>
  305. </html>