home/autoph/public_html/connectv1/api/controllers/role.php000064400000010077150310461350017772 0ustar00 '' && $limit <> ''){ $offset_limit = " LIMIT $offset,$limit"; } $query="SELECT * FROM `employee_role` WHERE name LIKE '%$search%' AND status = 1 /*AND id <> 1*/ ORDER BY name ASC $offset_limit"; // echo $query; return $db -> return_result($query); } function read_role_by_id($role_id,$db){ $query="SELECT * FROM `employee_role_access` WHERE employee_role_id = '$role_id' AND status = 1"; // print_r( $db -> return_result($query)); return $db -> return_result($query); } function create_company_access_role($role_id,$data_to_insert,$db){ $query = "INSERT INTO `employee_role_access`(`employee_role_id`, `company_permissions`, `status`) VALUES ('$role_id','$data_to_insert','1')"; $rows_affected = $db->sql_query_num_inserted($query); return $rows_affected; } function update_company_access_role($role_id,$data_to_insert,$db){ $query = "UPDATE `employee_role_access` SET `company_permissions`='$data_to_insert',`timestamp`= NOW() WHERE employee_role_id = '$role_id'"; $rows_affected = $db->sql_query_num_inserted($query); return $rows_affected; } //modify function update_dealer_access_role($role_id,$data_to_insert,$db){ // echo "UPDATE `employee_role_access` SET `dealer_permissions`='$data_to_insert',`timestamp`= NOW() WHERE employee_role_id = '$role_id'" $query = "UPDATE `employee_role_access` SET `dealer_permissions`='$data_to_insert',`timestamp`= NOW() WHERE employee_role_id = '$role_id'"; $rows_affected = $db->sql_query_num_inserted($query); return $rows_affected; } function create_access_role($role_id,$data_to_insert,$db){ $query = "INSERT INTO `employee_role_access`(`employee_role_id`, `action_permissions`, `status`) VALUES ('$role_id','$data_to_insert','1')"; $rows_affected = $db->sql_query_num_inserted($query); return $rows_affected; } function create_access_fields($role_id,$data_to_insert,$db){ $query = "INSERT INTO `employee_role_access`(`employee_role_id`, `fields_permissions`, `status`) VALUES ('$role_id','$data_to_insert','1')"; $rows_affected = $db->sql_query_num_inserted($query); return $rows_affected; } function delete_role($role_id,$db){ $query = "UPDATE `employee_role` SET `status`= '0' WHERE `id` = '$role_id' "; $rows_affected = $db->sql_query_num_inserted($query); return $rows_affected; } function update_access_role($role_id,$data_to_insert,$db){ $query = "UPDATE `employee_role_access` SET `action_permissions`='$data_to_insert',`timestamp`= NOW() WHERE employee_role_id = '$role_id'"; $rows_affected = $db->sql_query_num_inserted($query); return $rows_affected; } function update_access_fields($role_id,$data_to_insert,$db){ $query = "UPDATE `employee_role_access` SET `fields_permissions`='$data_to_insert',`timestamp`= NOW() WHERE employee_role_id = '$role_id'"; $rows_affected = $db->sql_query_num_inserted($query); return $rows_affected; } function update_role_name($role_id,$name,$db){ $query = "UPDATE `employee_role` SET `name`='$name' WHERE id = '$role_id'"; $rows_affected = $db->sql_query_num_inserted($query); return $rows_affected; } function read_user_account_by_role_id($role_id,$db){ $query = "SELECT count(id) FROM `employee_account` WHERE `employee_role_id` = '$role_id' "; return $db->select($query); } function read_company_access_role_by_id($id,$db){ } } ?> home/autoph/public_html/connectv1/api/role/role.php000064400000016545150314533270016400 0ustar00 escape($_REQUEST['search']) : '' ; $offset = isset($_REQUEST['offset']) ? $db -> escape($_REQUEST['offset']) : '' ; $limit = isset($_REQUEST['limit']) ? $db -> escape($_REQUEST['limit']) : '' ; $role_list = $role->read_roles($search,$offset,$limit,$db); $json = array(); foreach($role_list as $role){ $json[] = ['role_id'=>$role['id'], 'role_name'=>$role['name']]; } echo json_encode($json); }else if($apiKey === '2041618739067217' ){ //Get Interest Content $company_access = isset($_REQUEST['company_access']) ? $_REQUEST['company_access'] : '[]' ; $role_id = isset($_REQUEST['role_id']) ? $_REQUEST['role_id'] : '-1' ; $current_role_count = $role->read_role_by_id($role_id,$db); if(count($current_role_count) > 0){ $role_inserted_count = $role->update_company_access_role($role_id,$company_access,$db); }else{ $role_inserted_count = $role->create_company_access_role($role_id,$company_access,$db); } if(intval($role_inserted_count) > 0 ){ $return_arr["status"]=1; $return_arr["message"]="Role Data Updated"; }else{ $return_arr["status"]=0; $return_arr["message"]="Role Data Not Updated"; } echo json_encode($return_arr); }else if($apiKey === '20416187390672170' ){ //Get Interest Content $dealer_access = isset($_REQUEST['dealer_access']) && !empty($_REQUEST['dealer_access']) ? $_REQUEST['dealer_access'] : '' ; $role_id = isset($_REQUEST['role_id']) ? $_REQUEST['role_id'] : '-1' ; // echo $dealer_access;exit; $delear_ids = str_replace('"', '', $dealer_access); // echo $delear_ids;exit; $current_role_count = $role->read_role_by_id($role_id,$db); // var_dump(count($current_role_count)); if(count($current_role_count) > 0){ $role_inserted_count = $role->update_dealer_access_role($role_id,$delear_ids,$db); }else{ $role_inserted_count = $role->create_dealer_access_role($role_id,$delear_ids,$db); } if(intval($role_inserted_count) > 0 ){ $return_arr["status"]=1; $return_arr["message"]="Role Data Updated"; }else{ $return_arr["status"]=0; $return_arr["message"]="Role Data Not Updated"; } echo json_encode($return_arr); }else if($apiKey === '9808804351241327' ){ //Get Interest Content $role_access = isset($_REQUEST['role_access']) ? $_REQUEST['role_access'] : '{}' ; $role_name = isset($_REQUEST['name']) ? $_REQUEST['name'] : '' ; $role_name = $db -> escape($role_name); $role_name = strtoupper($role_name); $role_id = isset($_REQUEST['role_id']) ? $_REQUEST['role_id'] : '-1' ; $current_role_count = $role->read_role_by_id($role_id,$db); if(count($current_role_count) > 0){ $role_inserted_count = $role->update_access_role($role_id,$role_access,$db); }else{ $role_inserted_count = $role->create_access_role($role_id,$role_access,$db); } $role->update_role_name($role_id,$role_name,$db); if(intval($role_inserted_count) > 0 ){ $return_arr["status"]=1; $return_arr["message"]="Role Data Updated"; }else{ $return_arr["status"]=0; $return_arr["message"]="Role Data Not Updated"; } echo json_encode($return_arr); }else if($apiKey === '2426987890983868' ){ //Get Interest Content $role_access = isset($_REQUEST['role_access']) ? $_REQUEST['role_access'] : '{}' ; $role_id = isset($_REQUEST['role_id']) ? $_REQUEST['role_id'] : '-1' ; $current_role_count = $role->read_role_by_id($role_id,$db); if(count($current_role_count) > 0){ $role_inserted_count = $role->update_access_fields($role_id,$role_access,$db); }else{ $role_inserted_count = $role->create_access_fields($role_id,$role_access,$db); } if(intval($role_inserted_count) > 0 ){ $return_arr["status"]=1; $return_arr["message"]="Role Data Updated"; }else{ $return_arr["status"]=0; $return_arr["message"]="Role Data Not Updated"; } echo json_encode($return_arr); }else if($apiKey === '5231783702538646' && $utility->isPostMethod($server_method)){ //Get Interest Content $role_access = isset($_REQUEST['role_access']) ? $_REQUEST['role_access'] : '{}' ; $role_name = isset($_REQUEST['name']) ? $_REQUEST['name'] : '' ; $role_name = $db -> escape($role_name); $role_id = isset($_REQUEST['role_id']) ? $_REQUEST['role_id'] : '-1' ; $current_role_count = $role->read_role_by_id($role_id,$db); if(count($current_role_count) > 0){ $role_inserted_count = $role->update_access_role($role_id,$role_access,$db); }else{ $role_inserted_count = $role->create_access_role($role_id,$role_access,$db); } $role->update_role_name($role_id,$role_name,$db); if(intval($role_inserted_count) > 0 ){ $return_arr["status"]=1; $return_arr["message"]="Role Data Updated"; }else{ $return_arr["status"]=0; $return_arr["message"]="Role Data Not Updated"; } echo json_encode($return_arr); }else if($apiKey === '4507690562484198' && $utility->isPostMethod($server_method)){ //Get Interest Content $role_id = isset($_REQUEST['role_id']) ? $_REQUEST['role_id'] : '-1' ; $current_user_using_role_count = $role->read_user_account_by_role_id($role_id,$db); if($current_user_using_role_count > 0){ // $role_inserted_count = $role->update_access_role($role_id,$role_access,$db); $return_arr["status"]=2; $return_arr["message"]="This role is currently in use."; echo json_encode($return_arr); return; } $affected_rows = $role->delete_role($role_id,$db); if(intval($affected_rows) > 0 ){ $return_arr["status"]=1; $return_arr["message"]="Role has been deleted successfully."; }else{ $return_arr["status"]=0; $return_arr["message"]="Role not deleted."; } echo json_encode($return_arr); }else{ $return_arr["message"]=" You are not allowed to do this action."; echo $return_arr["message"]; return; } }else{ $return_arr["message"]=" You are not allowed to do this action."; echo $return_arr["message"]; return; }