require_once('include/formbase.php'); function list_dirs($dir,$dirs) { $dirs.=$dir."||"; $z="select id from ecmdocuments where iddir='".$dir."'"; $w=mysql_query($z); while($r=mysql_fetch_array($w))$dirs=list_dirs($r['id'],$dirs); return $dirs; } function set_permissions_down($i,$dir,$dirs) { $d=explode("||",$dirs); for($j=0;$j<=count($d)-2;$j++) { set_permissions($i,$d[$j],0); } } function set_permissions($i,$dir,$rest) { $z="select id from ecmdocuments_permissions where userid='".$_POST['userid'][$i]."' and iddir='".$dir."'"; $w=mysql_query($z); $ile=mysql_num_rows($w); $r=mysql_fetch_array(mysql_query("select iddir from ecmdocuments where id='".$dir."'")); $idkat=$r['iddir']; if($ile==0) { if($rest) { $re=$_POST['read'][$i]; $wr=0; $ad=0; $de=0; } else { $re=$_POST['read'][$i]; $wr=$_POST['write'][$i]; $ad=$_POST['add'][$i]; $de=$_POST['delete'][$i]; } $za="insert into ecmdocuments_permissions values('".create_guid()."','".$_POST['userid'][$i]."','".$dir."','".$re."','".$wr."','".$ad."','".$de."')"; $wy=mysql_query($za); } else { if($rest) { $re=$_POST['read'][$i]; $wr=0; $ad=0; $de=0; } else { $re=$_POST['read'][$i]; $wr=$_POST['write'][$i]; $ad=$_POST['add'][$i]; $de=$_POST['delete'][$i]; } if(!$re)$re=0; if(!$wr)$wr=0; $za="UPDATE ecmdocuments_permissions SET ecmdocuments_permissions.read='".$re."',ecmdocuments_permissions.write='".$wr."',ecmdocuments_permissions.add='".$ad."',ecmdocuments_permissions.delete='".$de."' WHERE ecmdocuments_permissions.userid='".$_POST['userid'][$i]."' AND ecmdocuments_permissions.iddir='".$dir."'"; $wy=mysql_query($za) or die(mysql_error()); } if($idkat && $rest)set_permissions($i,$idkat,$rest); } if($_POST['save'] || $_POST['save1']) { for($i=0;$i<=$_POST['numusers']-1;$i++) { if($_POST['selecttype']=="thisfolder") { set_permissions($i,$_GET['record'],1); set_permissions($i,$_GET['record'],0); } if($_POST['selecttype']=="subfolders") { $dirs=list_dirs($_GET['record'],""); //set_permissions($i,$_GET['record'],1); set_permissions_down($i,$_GET['record'],$dirs); } } ob_start(); handleRedirect($_GET['record'],'EcmDocuments'); } ?>
Set Permissions: $z="select name from ecmdocuments where id='".$_GET['record']."'"; $w=mysql_query($z); $r=mysql_fetch_array($w); print " ".$r['name']; ?> |