mirror of
				https://git.code.sf.net/p/seeddms/code
				synced 2025-10-31 21:27:36 +00:00 
			
		
		
		
	
		
			
				
	
	
		
			231 lines
		
	
	
		
			9.4 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			231 lines
		
	
	
		
			9.4 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
| <?php
 | |
| //    MyDMS. Document Management System
 | |
| //    Copyright (C) 2002-2005  Markus Westphal
 | |
| //    Copyright (C) 2006-2008 Malcolm Cowe
 | |
| //    Copyright (C) 2010 Matteo Lucarelli
 | |
| //    Copyright (C) 2011 Uwe Steinmann
 | |
| //
 | |
| //    This program is free software; you can redistribute it and/or modify
 | |
| //    it under the terms of the GNU General Public License as published by
 | |
| //    the Free Software Foundation; either version 2 of the License, or
 | |
| //    (at your option) any later version.
 | |
| //
 | |
| //    This program is distributed in the hope that it will be useful,
 | |
| //    but WITHOUT ANY WARRANTY; without even the implied warranty of
 | |
| //    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | |
| //    GNU General Public License for more details.
 | |
| //
 | |
| //    You should have received a copy of the GNU General Public License
 | |
| //    along with this program; if not, write to the Free Software
 | |
| //    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
 | |
| 
 | |
| include("../inc/inc.Settings.php");
 | |
| include("../inc/inc.Utils.php");
 | |
| include("../inc/inc.ClassEmail.php");
 | |
| include("../inc/inc.DBInit.php");
 | |
| include("../inc/inc.Language.php");
 | |
| include("../inc/inc.ClassUI.php");
 | |
| include("../inc/inc.Authentication.php");
 | |
| 
 | |
| /* Check if the form data comes for a trusted request */
 | |
| if(!checkFormKey('approvedocument')) {
 | |
| 	UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_request_token"))),getMLText("invalid_request_token"));
 | |
| }
 | |
| 
 | |
| if (!isset($_POST["documentid"]) || !is_numeric($_POST["documentid"]) || intval($_POST["documentid"])<1) {
 | |
| 	UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
 | |
| }
 | |
| 
 | |
| $documentid = $_POST["documentid"];
 | |
| $document = $dms->getDocument($documentid);
 | |
| 
 | |
| if (!is_object($document)) {
 | |
| 	UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
 | |
| }
 | |
| 
 | |
| $folder = $document->getFolder();
 | |
| $docPathHTML = getFolderPathHTML($folder, true). " / <a href=\"../out/out.ViewDocument.php?documentid=".$documentid."\">".$document->getName()."</a>";
 | |
| 
 | |
| if ($document->getAccessMode($user) < M_READ) {
 | |
| 	UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("access_denied"));
 | |
| }
 | |
| 
 | |
| if (!isset($_POST["version"]) || !is_numeric($_POST["version"]) || intval($_POST["version"])<1) {
 | |
| 	UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("invalid_version"));
 | |
| }
 | |
| 
 | |
| $version = $_POST["version"];
 | |
| $content = $document->getContentByVersion($version);
 | |
| 
 | |
| if (!is_object($content)) {
 | |
| 	UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("invalid_version"));
 | |
| }
 | |
| 
 | |
| // operation is only allowed for the last document version
 | |
| $latestContent = $document->getLatestContent();
 | |
| if ($latestContent->getVersion()!=$version) {
 | |
| 	UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("invalid_version"));
 | |
| }
 | |
| 
 | |
| // verify if document has expired
 | |
| if ($document->hasExpired()){
 | |
| 	UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("access_denied"));
 | |
| }
 | |
| 
 | |
| if (!isset($_POST["approvalStatus"]) || !is_numeric($_POST["approvalStatus"]) ||
 | |
| 		(intval($_POST["approvalStatus"])!=1 && intval($_POST["approvalStatus"])!=-1)) {
 | |
| 	UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("invalid_approval_status"));
 | |
| }
 | |
| 
 | |
| if ($_POST["approvalType"] == "ind") {
 | |
| 
 | |
| 	$comment = $_POST["comment"];
 | |
| 	if(0 > $latestContent->setApprovalByInd($user, $user, $_POST["approvalStatus"], $comment)) {
 | |
| 		UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("approval_update_failed"));
 | |
| 	}
 | |
| 	else {
 | |
| 		// Send an email notification to the document updater.
 | |
| 		if($notifier) {
 | |
| 			$subject = $settings->_siteName.": ".$document->getName().", v.".$version." - ".getMLText("approval_submit_email");
 | |
| 			$message = getMLText("approval_submit_email")."\r\n";
 | |
| 			$message .= 
 | |
| 				getMLText("name").": ".$document->getName()."\r\n".
 | |
| 				getMLText("version").": ".$version."\r\n".
 | |
| 				getMLText("user").": ".$user->getFullName()." <". $user->getEmail() .">\r\n".
 | |
| 				getMLText("status").": ".getApprovalStatusText($_POST["approvalStatus"])."\r\n".
 | |
| 				getMLText("comment").": ".$comment."\r\n".
 | |
| 				"URL: http".((isset($_SERVER['HTTPS']) && (strcmp($_SERVER['HTTPS'],'off')!=0)) ? "s" : "")."://".$_SERVER['HTTP_HOST'].$settings->_httpRoot."out/out.ViewDocument.php?documentid=".$documentid."\r\n";
 | |
| 
 | |
| //			$subject=mydmsDecodeString($subject);
 | |
| //			$message=mydmsDecodeString($message);
 | |
| 			
 | |
| 			$notifier->toIndividual($user, $content->getUser(), $subject, $message);
 | |
| 
 | |
| 			// Send notification to subscribers.
 | |
| 			$nl=$document->getNotifyList();
 | |
| 			$notifier->toList($user, $nl["users"], $subject, $message);
 | |
| 			foreach ($nl["groups"] as $grp) {
 | |
| 				$notifier->toGroup($user, $grp, $subject, $message);
 | |
| 			}
 | |
| 		}
 | |
| 	}
 | |
| }
 | |
| else if ($_POST["approvalType"] == "grp") {
 | |
| 	$comment = $_POST["comment"];
 | |
| 	$group = $dms->getGroup($_POST['approvalGroup']);
 | |
| 	if(0 > $latestContent->setApprovalByGrp($group, $user, $_POST["approvalStatus"], $comment)) {
 | |
| 		UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("approval_update_failed"));
 | |
| 	}
 | |
| 	else {
 | |
| 		// Send an email notification to the document updater.
 | |
| 		if($notifier) {
 | |
| 			$subject = $settings->_siteName.": ".$document->getName().", v.".$version." - ".getMLText("approval_submit_email");
 | |
| 			$message = getMLText("approval_submit_email")."\r\n";
 | |
| 			$message .= 
 | |
| 				getMLText("name").": ".$document->getName()."\r\n".
 | |
| 				getMLText("version").": ".$version."\r\n".
 | |
| 				getMLText("user").": ".$user->getFullName()." <". $user->getEmail() .">\r\n".
 | |
| 				getMLText("status").": ".getApprovalStatusText($_POST["approvalStatus"])."\r\n".
 | |
| 				getMLText("comment").": ".$comment."\r\n".
 | |
| 				"URL: http".((isset($_SERVER['HTTPS']) && (strcmp($_SERVER['HTTPS'],'off')!=0)) ? "s" : "")."://".$_SERVER['HTTP_HOST'].$settings->_httpRoot."out/out.ViewDocument.php?documentid=".$documentid."\r\n";
 | |
| 
 | |
| //			$subject=mydmsDecodeString($subject);
 | |
| //			$message=mydmsDecodeString($message);
 | |
| 			
 | |
| 			$notifier->toIndividual($user, $content->getUser(), $subject, $message);
 | |
| 
 | |
| 			// Send notification to subscribers.
 | |
| 			$nl=$document->getNotifyList();
 | |
| 			$notifier->toList($user, $nl["users"], $subject, $message);
 | |
| 			foreach ($nl["groups"] as $grp) {
 | |
| 				$notifier->toGroup($user, $grp, $subject, $message);
 | |
| 			}
 | |
| 		}
 | |
| 	}
 | |
| }
 | |
| 
 | |
| //
 | |
| // Check to see if the overall status for the document version needs to be
 | |
| // updated.
 | |
| //
 | |
| 
 | |
| if ($_POST["approvalStatus"]==-1){
 | |
| 	if($content->setStatus(S_REJECTED,$comment,$user)) {
 | |
| 		$nl=$document->getNotifyList();
 | |
| 		// Send notification to subscribers.
 | |
| 		if($notifier) {
 | |
| 			$folder = $document->getFolder();
 | |
| 			$subject = "###SITENAME###: ".$document->_name." - ".getMLText("document_status_changed_email");
 | |
| 			$message = getMLText("document_status_changed_email")."\r\n";
 | |
| 			$message .= 
 | |
| 				getMLText("document").": ".$document->_name."\r\n".
 | |
| 				getMLText("status").": ".getOverallStatusText($status)."\r\n".
 | |
| 				getMLText("folder").": ".$folder->getFolderPathPlain()."\r\n".
 | |
| 				getMLText("comment").": ".$document->getComment()."\r\n".
 | |
| 				"URL: ###URL_PREFIX###out/out.ViewDocument.php?documentid=".$document->getID()."&version=".$content->_version."\r\n";
 | |
| 
 | |
| //			$subject=mydmsDecodeString($subject);
 | |
| //			$message=mydmsDecodeString($message);
 | |
| 			
 | |
| 			$notifier->toList($user, $nl["users"], $subject, $message);
 | |
| 			foreach ($nl["groups"] as $grp) {
 | |
| 				$notifier->toGroup($user, $grp, $subject, $message);
 | |
| 			}
 | |
| 		}
 | |
| 		
 | |
| 		// TODO: if user os not owner send notification to owner
 | |
| 
 | |
| 	}
 | |
| }else{
 | |
| 
 | |
| 	$docApprovalStatus = $content->getApprovalStatus();
 | |
| 	if (is_bool($docApprovalStatus) && !$docApprovalStatus) {
 | |
| 		UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("cannot_retrieve_approval_snapshot"));
 | |
| 	}
 | |
| 	$approvalCT = 0;
 | |
| 	$approvalTotal = 0;
 | |
| 	foreach ($docApprovalStatus as $drstat) {
 | |
| 		if ($drstat["status"] == 1) {
 | |
| 			$approvalCT++;
 | |
| 		}
 | |
| 		if ($drstat["status"] != -2) {
 | |
| 			$approvalTotal++;
 | |
| 		}
 | |
| 	}
 | |
| 	// If all approvals have been received and there are no rejections, retrieve a
 | |
| 	// count of the approvals required for this document.
 | |
| 	if ($approvalCT == $approvalTotal) {
 | |
| 		// Change the status to released.
 | |
| 		$newStatus=2;
 | |
| 		if($content->setStatus($newStatus, getMLText("automatic_status_update"), $user)) {
 | |
| 			$nl=$document->getNotifyList();
 | |
| 			// Send notification to subscribers.
 | |
| 			if($notifier) {
 | |
| 				$folder = $document->getFolder();
 | |
| 				$subject = "###SITENAME###: ".$document->_name." - ".getMLText("document_status_changed_email");
 | |
| 				$message = getMLText("document_status_changed_email")."\r\n";
 | |
| 				$message .= 
 | |
| 					getMLText("document").": ".$document->_name."\r\n".
 | |
| 					getMLText("status").": ".getOverallStatusText($newStatus)."\r\n".
 | |
| 					getMLText("folder").": ".$folder->getFolderPathPlain()."\r\n".
 | |
| 					getMLText("comment").": ".$document->getComment()."\r\n".
 | |
| 					"URL: ###URL_PREFIX###out/out.ViewDocument.php?documentid=".$document->getID()."&version=".$content->_version."\r\n";
 | |
| 
 | |
| //				$subject=mydmsDecodeString($subject);
 | |
| //				$message=mydmsDecodeString($message);
 | |
| 				
 | |
| 				$notifier->toList($user, $nl["users"], $subject, $message);
 | |
| 				foreach ($nl["groups"] as $grp) {
 | |
| 					$notifier->toGroup($user, $grp, $subject, $message);
 | |
| 				}
 | |
| 			}
 | |
| 			
 | |
| 			// TODO: if user os not owner send notification to owner
 | |
| 		}
 | |
| 	}
 | |
| }
 | |
| 
 | |
| header("Location:../out/out.ViewDocument.php?documentid=".$documentid);
 | |
| 
 | |
| ?>
 | 
