aProfile.data

<?php
/**
 * @package aProfileLst.prg
 * Purpose: Handle the CRUD portion of the Profile/Profile Features, feature in Monitor.  Return any requested data
 *            in a JSON format, for the client to display accordingly.
 *
 * Call this script with the following parameters
 * @param string  $action : requested database action
 * @param int     $pId    : profile_id
 * @param string  $pCode  : profile_code
 * @param string  $pDesc  : profile description
 * @param string  $fList  : feature list, list of profile feature codes to delete from profile_id
 * @param string  $fType  : feature limit_type, determines what feature limits are set to NULL
 * @param string  $fCode  : feature_code, name of profile feature limit
 * @param float   $fApt   : feature limit, dollar amount per transaction
 * @param float   $fApd   : feature limit, dollar amount per day
 * @param float   $fApm   : feature limit, dollar amount per month
 * @param float   $fApa   : feature limit, dollar amount per account per day
 * @param int     $fCpd   : feature limit, quantity amount per day
 * @param int     $fCpm   : feature limit, quantity amount per month
 * @param int     $fCpa   : feature limit, quantity amount per account per day
 * @param boolean $fCfm   : feature limit, confirmation required
 *
 *
 * @return JSON OBJECT.
 */
header('Content-Type: application/json');
try {
  require_once(dirname(__FILE__) . '/../../shared/library/dms_imp_val.i');

  $admVars = array();
  $varOk = array(
    "action" => array('filter' => FILTER_SANITIZE_STRING),
    "pId" => array('filter' => FILTER_VALIDATE_INT),
    "pCode" => array('filter' => FILTER_SANITIZE_STRING),
    "pDesc" => array('filter' => FILTER_SANITIZE_STRING),
    "fList" => array('filter' => FILTER_SANITIZE_STRING),
    "fType" => array('filter' => FILTER_SANITIZE_STRING),
    "fCode" => array('filter' => FILTER_SANITIZE_STRING),
    "fApt" => array('filter' => FILTER_VALIDATE_FLOAT),
    "fApa" => array('filter' => FILTER_VALIDATE_FLOAT),
    "fApd" => array('filter' => FILTER_VALIDATE_FLOAT),
    "fApm" => array('filter' => FILTER_VALIDATE_FLOAT),
    "fCpa" => array('filter' => FILTER_VALIDATE_INT),
    "fCpd" => array('filter' => FILTER_VALIDATE_INT),
    "fCpm" => array('filter' => FILTER_VALIDATE_INT),
    "fCfm" => array('filter' => FILTER_VALIDATE_BOOLEAN),
  );

  HCU_ImportVars($admVars, "", $varOk);

  $action = isset($admVars['action']) ? $admVars['action'] : null;
  $pId = isset($admVars['pId']) ? $admVars['pId'] : null;
  $pCode = isset($admVars['pCode']) ? $admVars['pCode'] : null;
  $pDesc = isset($admVars['pDesc']) ? $admVars['pDesc'] : null;
  $fList = isset($admVars['fList']) ? $admVars['fList'] : null;
  $fCode = isset($admVars['fCode']) ? $admVars['fCode'] : null;
  $fType = isset($admVars['fType']) ? $admVars['fType'] : null;
  $fApt = isset($admVars['fApt']) ? $admVars['fApt'] : null;
  $fApd = isset($admVars['fApd']) ? $admVars['fApd'] : null;
  $fApm = isset($admVars['fApm']) ? $admVars['fApm'] : null;
  $fApa = isset($admVars['fApa']) ? $admVars['fApa'] : null;
  $fCpd = isset($admVars['fCpd']) ? $admVars['fCpd'] : null;
  $fCpm = isset($admVars['fCpm']) ? $admVars['fCpm'] : null;
  $fCpa = isset($admVars['fCpa']) ? $admVars['fCpa'] : null;
  $fCfm = isset($admVars['fCfm']) ? $admVars['fCfm'] : null;

  $aryResult = array();
  $aryReply = array();

  switch ($action) {
    case "data_read":

      $aryResult['data']['profiles'] = ReadProfiles($SYSENV, $dbh, $Cu);
      $aryResult['data']['limits'] = ReadProfileFeatures($SYSENV, $dbh, $Cu);
      $aryResult['data']['features'] = ReadAvailableFeatures($SYSENV, $dbh, $Cu);
      break;

    case "profile_create":

      $aryResult = CreateProfile($SYSENV, $dbh, $pCode, $pDesc, $Cu);
      break;

    case "profile_update":

      $aryResult = UpdateProfile($SYSENV, $dbh, $pId, $pCode, $pDesc, $Cu);
      break;

    case "profile_delete":

      $aryResult = DeleteProfile($SYSENV, $dbh, $pId, $pCode, $Cu);
      break;

    case "limit_create":

      $fAmount = array("apt" => $fApt, "apd" => $fApd, "apm" => $fApm, "apa" => $fApa);
      $fCount = array("cpd" => $fCpd, "cpm" => $fCpm, "cpa" => $fCpa, "cfm" => $fCfm);
      $fFeature = array("code" => $fCode, "type" => $fType);

      $aryResult = CreateLimit($SYSENV, $dbh, $pId, $fFeature, $fAmount, $fCount, $Cu);
      break;

    case "limit_update":

      $fAmount = array("apt" => $fApt, "apd" => $fApd, "apm" => $fApm, "apa" => $fApa);
      $fCount = array("cpd" => $fCpd, "cpm" => $fCpm, "cpa" => $fCpa, "cfm" => $fCfm);
      $fFeature = array("code" => $fCode, "type" => $fType);

      $aryResult = UpdateLimit($SYSENV, $dbh, $pId, $fFeature, $fAmount, $fCount);
      break;

    case "limit_delete":

      $aryResult = DeleteLimit($SYSENV, $dbh, $pId, $fList, $Cu);
      break;
    default:

      throw new Exception("Feature Action: ( $action ) unknown");
      break;
  }

} catch (Exception $e) {
  $aryReply['error'][] = $e->getMessage();
  $aryResult['data'] = array();
  $aryResult['info'] = array();
}

$aryReply['action'] = $action;
if (isset($aryResult['data']) && count($aryResult['data'])) $aryReply['data'] = $aryResult['data'];
if (isset($aryResult['info']) && count($aryResult['info'])) $aryReply['info'] = $aryResult['info'];
if (isset($aryResult['error']) && count($aryResult['error'])) $aryReply['error'] = $aryResult['error'];

print json_encode(array("Results" => $aryReply));

/**
 * LimitInUse: this function determines if an particular profile feature limit is being used by
 * a group or user. If the feature is not in use it can be delete from the profile
 *
 * @param object  $pEnv   : system environment variable for debugging
 * @param object  $pDbh   : system database variable for database manipulation
 * @param int     $pId    : profile_id, check groups and users associated with this profile
 * @param string  $fCode  : feature_code, feature associated with profile_id, check if in use
 * @param string  $pCu    : credit union code associated with the profile_id
 *
 * @return booleam  $sqlReturn  : true if profile feature is in use by groups or users
 */
function LimitInUse($pEnv, $pDbh, $pId, $fCode, $pCu) {

  $sqlReturn = false;
  $sqlInUseGroup = "
    SELECT COUNT(*) FROM {$pCu}grouprights gr
    INNER JOIN {$pCu}group g
      ON gr.group_id = g.group_id
    WHERE g.profile_id = $pId
      AND gr.feature_code = $fCode";

  $sqlInUseUser = "
    SELECT COUNT(*) FROM {$pCu}userrights ur
    INNER JOIN {$pCu}user u
      ON ur.user_id = u.user_id
    INNER JOIN {$pCu}group g
      ON u.group_id = g.group_id
    WHERE g.profile_id = $pId
      AND ur.feature_code = $fCode";

  $sqlInUseGroupRs = db_query($sqlInUseGroup, $pDbh);
  $sqlInUseUserRs = db_query($sqlInUseUser, $pDbh);
  if (!$sqlInUseGroupRs || !$sqlInUseUserRs) {
    $pEnv['logger']->error(db_last_error());
    throw new Exception("Failed to read limit uses");
  }

  $sqlDataGroup = db_fetch_all($sqlInUseGroupRs);
  $sqlDataUser = db_fetch_all($sqlInUseUserRs);
  $sqlDataGroupCount = $sqlDataGroup[0]['count'];
  $sqlDataUserCount = $sqlDataUser[0]['count'];
  if ($sqlDataGroupCount > 0 || $sqlDataUserCount > 0) {
    $sqlReturn = true;
  }

  return $sqlReturn;
}

/**
 * DeleteLimit: this function to be used to delete profile feature limits from a specified profile_id
 *
 * @param object  $pEnv   : system environment variable for debugging
 * @param object  $pDbh   : system database variable for database manipulation
 * @param int     $pId    : profile_id, check groups and users associated with this profile
 * @param string  $fList  : list of profile feature_codes to delete, comma separated list
 * @param string  $pCu    : credit union code associated with the profile_id
 *
 * @return array  $sqlReturn  : array containing deleted rows, and success information
 */
function DeleteLimit($pEnv, $pDbh, $pId, $fList, $pCu) {

  $sqlReturn = array();

  $features = "";
  $featuresAry = array();
  $featuresLst = explode(",", $fList);
  $featuresInUse = false;

  foreach ($featuresLst as $key => $value) {

    $feature = explode(":", $value);
    $code = "'" . prep_save($feature[1], 10) . "'";
    $desc = prep_save($feature[0], 255);

    $inUse = LimitInUse($pEnv, $pDbh, $pId, $code, $pCu);

    if ($inUse) {
      $featuresInUse  = true;
      $sqlReturn['error'][] = "$desc ( Feature has custom access rights for one or more users. )";
    } else {
      array_push($featuresAry, $code);
      $sqlReturn['info'][] = "$desc ( Deleted )";
    }
  }

  if ($featuresInUse) {
    $sqlReturn['error'][] = "Contact HomeCU if you wish to delete these features from the profile.";
  } else {
    $features = implode(",", $featuresAry);

    $sqlColumnsLimit = "profile_id AS pid,
      feature_code AS fcode,
      amount_per_transaction AS fapt,
      amount_per_day AS fapd,
      amount_per_month AS fapm,
      amount_per_account_per_day AS fapa,
      count_per_day AS fcpd,
      count_per_month AS fcpm,
      count_per_account_per_day AS fcpa,
      confirm_required AS fcfm";

    $sqlDeleteLimit = "DELETE FROM cu_profilerights
      WHERE feature_code IN ($features)
        AND profile_id = $pId
      RETURNING $sqlColumnsLimit";

    $sqlDeleteRs = db_query($sqlDeleteLimit, $pDbh);
    if (!$sqlDeleteRs) {
      $pEnv['logger']->error(db_last_error());
      throw new Exception("Failed to delete limits");
    }

    $sqlReturn['data'] = db_fetch_all($sqlDeleteRs);
  }

  return $sqlReturn;
}

/**
 * UpdateLimit: this function to be used to update an existing profile feature_code
 *  associated with an existing profile_id. Depending on feature limit_type, some values
 *  will be saved as NULL.
 *
 * @param object  $pEnv     : system environment variable for debugging
 * @param object  $pDbh     : system database variable for database manipulation
 * @param int     $pId      : profile_id, check groups and users associated with this profile
 * @param array   $fFeature : feature_code, limit_type; feature to be updated, NULL value determinant
 * @param array   $fAmount  : feature limist: dolloar amount /transaction/day/month/account per day
 * @param array   $fCount   : feature limits: quantity amount /day/month/account per day, confirmation required
 *
 * @return array  $sqlReturn  : array containing updated rows, and success information
 */
function UpdateLimit($pEnv, $pDbh, $pId, $fFeature, $fAmount, $fCount) {

  $id = $pId;
  $code = prep_save($fFeature['code'], 10);
  $type = prep_save($fFeature['type'], 1);
  $apt = ($type == "B" || $type == "D") ? $fAmount['apt'] : "NULL";
  $apd = ($type == "B" || $type == "D") ? $fAmount['apd'] : "NULL";
  $apm = ($type == "B" || $type == "D") ? $fAmount['apm'] : "NULL";
  $apa = ($type == "B" || $type == "D") ? $fAmount['apa'] : "NULL";
  $cpd = ($type == "B" || $type == "Q") ? $fCount['cpd'] : "NULL";
  $cpm = ($type == "B" || $type == "Q") ? $fCount['cpm'] : "NULL";
  $cpa = ($type == "B" || $type == "Q") ? $fCount['cpa'] : "NULL";
  $cfm = $fCount['cfm'] == 1 ? "true" : "false";

  $sqlReturn = array();
  $sqlColumnsLimit = "profile_id AS pid,
    feature_code AS fcode,
    amount_per_transaction AS fapt,
    amount_per_day AS fapd,
    amount_per_month AS fapm,
    amount_per_account_per_day AS fapa,
    count_per_day AS fcpd,
    count_per_month AS fcpm,
    count_per_account_per_day AS fcpa,
    confirm_required AS fcfm";

  $sqlUpdateLimit = "UPDATE cu_profilerights
    SET (amount_per_transaction, amount_per_day, amount_per_month, amount_per_account_per_day,
      count_per_day, count_per_month, count_per_account_per_day, confirm_required)
    = ($apt, $apd, $apm, $apa, $cpd, $cpm, $cpa, $cfm)
    WHERE profile_id = $pId
    AND feature_code = '$code'
    RETURNING $sqlColumnsLimit";

  $sqlUpdateLimitRs = db_query($sqlUpdateLimit, $pDbh);
  if (!$sqlUpdateLimitRs) {
    $pEnv['logger']->error(db_last_error());
    throw new Exception("Failed to update limit");
  }

  $sqlReturn['data'] = db_fetch_all($sqlUpdateLimitRs);
  $sqlReturn['info'][] = "Limit has been updated successfully";

  return $sqlReturn;
}

/**
 * CreateLimit: this function to be used to create a new profile feature_code
 *  associated with a profile_id. Depending on feature limit_type, some values
 *  will be saved as NULL.
 *
 * @param object  $pEnv     : system environment variable for debugging
 * @param object  $pDbh     : system database variable for database manipulation
 * @param int     $pId      : profile_id, check groups and users associated with this profile
 * @param array   $fFeature : feature_code, limit_type; feature to be added to profile_id, NULL value determinant
 * @param array   $fAmount  : feature limist: dolloar amount /transaction/day/month/account per day
 * @param array   $fCount   : feature limits: quantity amount /day/month/account per day, confirmation required
 * @param string  $pCu  : credit union code associated with the profile_id
 *
 * @return array  $sqlReturn  : array containing updated rows, and success information
 */
function CreateLimit($pEnv, $pDbh, $pId, $fFeature, $fAmount, $fCount, $pCu) {

  $id = $pId;
  $code = prep_save($fFeature['code'], 10);
  $type = prep_save($fFeature['type'], 1);
  $apt = ($type == "B" || $type == "D") ? $fAmount['apt'] : "NULL";
  $apd = ($type == "B" || $type == "D") ? $fAmount['apd'] : "NULL";
  $apm = ($type == "B" || $type == "D") ? $fAmount['apm'] : "NULL";
  $apa = ($type == "B" || $type == "D") ? $fAmount['apa'] : "NULL";
  $cpd = ($type == "B" || $type == "Q") ? $fCount['cpd'] : "NULL";
  $cpm = ($type == "B" || $type == "Q") ? $fCount['cpm'] : "NULL";
  $cpa = ($type == "B" || $type == "Q") ? $fCount['cpa'] : "NULL";
  $cfm = $fCount['cfm'] == 1 ? "true" : "false";

  $sql = "select 'FOUND' from cu_featuremenu fm inner join cu_feature f on fm.feature_code = f.feature_code and fm.cu = '" . prep_save($pCu, 10) . "' and f.enabled = true";
  $sth = db_query($sql, $pDbh);
  if (!$sth || db_num_rows($sth) == 0) {
    throw new exception("Failed to create limit"); // Feature is not in Credit Union's list of features or feature is not enabled.  Keep same exposed error message.
  }

  $sqlReturn = array();
  $sqlColumnsLimit = "profile_id AS pid,
    feature_code AS fcode,
    amount_per_transaction AS fapt,
    amount_per_day AS fapd,
    amount_per_month AS fapm,
    amount_per_account_per_day AS fapa,
    count_per_day AS fcpd,
    count_per_month AS fcpm,
    count_per_account_per_day AS fcpa,
    confirm_required AS fcfm";

  $sqlInsertLimit = "INSERT INTO cu_profilerights
    (profile_id, feature_code,
      amount_per_transaction, amount_per_day, amount_per_month, amount_per_account_per_day,
      count_per_day, count_per_month, count_per_account_per_day, confirm_required)
    VALUES
    ($id, '$code', $apt, $apd, $apm, $apa, $cpd, $cpm, $cpa, $cfm)
    RETURNING $sqlColumnsLimit";

  $sqlInsertLimitRs = db_query($sqlInsertLimit, $pDbh);
  if (!$sqlInsertLimitRs) {
    $pEnv['logger']->error(db_last_error());
    throw new Exception("Failed to create limit");
  }

  $sqlReturn['data'] = db_fetch_all($sqlInsertLimitRs);
  $sqlReturn['info'][] = "Limit has been created successfully";

  return $sqlReturn;
}

/**
 * ProfileInUse: function to be used in determining if a profile is in use, by checking
 *  if the profile_id has any limits associated with it or a group is a ssociated with the profile_id
 *
 * @param object  $pEnv : system environment variable for debugging
 * @param object  $pDbh : system database variable for database manipulation
 * @param int     $pId  : profile_id, check groups and users associated with this profile
 * @param string  $pCu  : credit union code associated with the profile_id
 *
 * @return boolean  $sqlReturn  : true if profile is associated with any feature limits or groups
 */
function ProfileInUse($pEnv, $pDbh, $pId, $pCu) {

  $sqlReturn = false;
  $sqlSelectProfileGroup = "SELECT COUNT(*) FROM {$pCu}group
    WHERE profile_id = $pId";

  $sqlSelectProfileRights = "SELECT COUNT(*) FROM cu_profilerights
    WHERE profile_id = $pId";

  $sqlSelectProfileGroupRs = db_query($sqlSelectProfileGroup, $pDbh);
  $sqlSelectProfileRightsRs = db_query($sqlSelectProfileRights, $pDbh);
  if (!$sqlSelectProfileGroupRs || !$sqlSelectProfileRightsRs) {
    $pEnv['logger']->error(db_last_error());
    throw new Exception("Failed to read profile uses");
  }

  $sqlDataProfileGroup = db_fetch_all($sqlSelectProfileGroupRs);
  $sqlDataProfileRights = db_fetch_all($sqlSelectProfileRightsRs);
  $sqlDataProfileGroupCount = $sqlDataProfileGroup[0]['count'];
  $sqlDataProfileRightsCount = $sqlDataProfileRights[0]['count'];
  if ($sqlDataProfileGroupCount > 0 || $sqlDataProfileRightsCount > 0) {
    $sqlReturn = true;
  }

  return $sqlReturn;
}

/**
 * DeleteProfile: this function be used for deleting existing profiles which are not associated
 *  with any feature limits or groups (determined by ProfileInUse).
 *
 * @param object  $pEnv   : system environment variable for debugging
 * @param object  $pDbh   : system database variable for database manipulation
 * @param int     $pId    : profile_id, check groups and users associated with this profile
 * @param string  $pCode  : profile_code, 20 character code name associated with the profile_id
 * @param string  $pCu    : credit union code associated with the profile_id
 *
 * @return array  $sqlReturn  : array containing updated rows, and success information
 */
function DeleteProfile($pEnv, $pDbh, $pId, $pCode, $pCu) {

  $sqlReturn = array();
  if (ProfileInUse($pEnv, $pDbh, $pId, $pCu)) {
    throw new Exception("Failed to delete profile. It is currently in use");
  }

  $sqlDeleteProfile = "DELETE FROM cu_profile
    WHERE profile_id = $pId
    AND profile_code = '$pCode'
    AND cu = '$pCu'
    RETURNING profile_id AS pid, profile_code AS pcode, description AS pdesc";

  $sqlDeleteProfileRs = db_query($sqlDeleteProfile, $pDbh);
  if (!$sqlDeleteProfileRs) {
    $pEnv['logger']->error(db_last_error());
    throw new Exception("Failed to delete profile");
  }

  $sqlReturn['data'] = db_fetch_all($sqlDeleteProfileRs);
  $sqlReturn['info'][] = "Profile has been deleted successfully";

  return $sqlReturn;
}

/**
 * UpdateProfile: this function be used for updating existing profile descriptions associated
 *  with the profile_id.
 *
 * @param object  $pEnv   : system environment variable for debugging
 * @param object  $pDbh   : system database variable for database manipulation
 * @param int     $pId    : profile_id, check groups and users associated with this profile
 * @param string  $pCode  : profile_code, 20 character code name associated with the profile_id
 * @param string  $pDesc  : profile description, updated string for profile description
 * @param string  $pCu    : credit union code associated with the profile_id
 *
 * @return array  $sqlReturn  : array containing updated rows, and success information
 */
function UpdateProfile($pEnv, $pDbh, $pId, $pCode, $pDesc, $pCu) {

  $code = strtoupper($pCode);
  $code = prep_save($code, 10);

  $desc = html_entity_decode($pDesc, ENT_QUOTES);
  $desc = prep_save($desc, 255);

  $sqlReturn = array();
  $sqlUpdateProfile = "UPDATE cu_profile
    SET (profile_code, description) = ('$code', '$desc')
    WHERE profile_id = $pId
      AND cu = '$pCu'
    RETURNING profile_id AS pid, profile_code AS pcode, description AS pdesc";

  $sqlUpdateRs = db_query($sqlUpdateProfile, $pDbh);
  if (!$sqlUpdateRs) {
    $pEnv['logger']->error(db_last_error());
    throw new Exception("Failed to update profile");
  }

  $sqlReturn['data'] = db_fetch_all($sqlUpdateRs);
  $sqlReturn['info'][] = "Profile was successfully updated";

  return $sqlReturn;
}

/**
 * CreateProfile: this function be used for creating new profiles associated with a credit union code
 *
 * @param object  $pEnv   : system environment variable for debugging
 * @param object  $pDbh   : system database variable for database manipulation
 * @param string  $pCode  : profile_code, new 20 character code associated with profile_id
 * @param string  $pDesc  : profile description: new 255 character description associated with profile_id
 * @param string  $pCu    : credit union code associated with the profile_id
 *
 * @return array  $sqlReturn  : array containing updated rows, and success information
 */
function CreateProfile($pEnv, $pDbh, $pCode, $pDesc, $pCu) {

  $code = strtoupper($pCode);
  $code = prep_save($code, 20);

  $desc = html_entity_decode($pDesc, ENT_QUOTES);
  $desc = prep_save($desc, 255);

  $cu = prep_save($pCu, 10);

  $sqlReturn = array();
  $sqlInsertProfile = "INSERT INTO cu_profile
    (profile_code, description, cu)
    VALUES
    ('$code', '$desc', '$cu')
    RETURNING profile_id AS pid, profile_code AS pcode, description AS pdesc";

  $sqlInsertRs = db_query($sqlInsertProfile, $pDbh);
  if (!$sqlInsertRs) {
    $pEnv['logger']->error(db_last_error());
    throw new Exception("Failed to create profile");
  }

  $sqlReturn['data'] = db_fetch_all($sqlInsertRs);
  $sqlReturn['info'][] = "Profile was successfully created";

  return $sqlReturn;
}

/**
 * ReadProfiles: generate a list of active profiles associated with the credit union
 *
 * @param object  $pEnv   : system environment variable for debugging
 * @param object  $pDbh   : system database variable for database manipulation
 * @param string  $pCu    : credit union code associated with a profile_id
 *
 * @return array  $sqlReturn  : array containing data rows, and success information
 */
function ReadProfiles($pEnv, $pDbh, $pCu) {
  $sqlReturn = array();
  $sqlColumnsProfiles = "cup.profile_id AS pid,
    cup.profile_code AS pcode,
    cup.description AS pdesc";

  $sqlSelectProfiles = "SELECT $sqlColumnsProfiles
    FROM cu_profile cup
    WHERE cup.cu = '$pCu'
    ORDER BY cup.description ASC";

  $sqlQueryProfiles = db_query($sqlSelectProfiles, $pDbh);
  if (!$sqlQueryProfiles) {
    $pEnv['logger']->error(db_last_error());
    throw new Exception("Failed to read profiles list");
  }

  $sqlReturn = db_fetch_all($sqlQueryProfiles);
  return $sqlReturn;
}

/**
 * ReadProfileFeatures: generate a list of active profile feature limits associated with
 *  a credit union code.
 *
 * @param object  $pEnv   : system environment variable for debugging
 * @param object  $pDbh   : system database variable for database manipulation
 * @param string  $pCu    : credit union code associated with a profile_id
 *
 * @return array  $sqlReturn  : array containing data rows, and success information
 */
function ReadProfileFeatures($pEnv, $pDbh, $pCu) {
  $sqlReturn = array();

  $sqlColumnsRights = "cupr.profile_id AS pid,
    cupr.feature_code AS fcode,
    cupr.amount_per_transaction AS fapt,
    cupr.amount_per_day AS fapd,
    cupr.amount_per_month AS fapm,
    cupr.amount_per_account_per_day AS fapa,
    cupr.count_per_day AS fcpd,
    cupr.count_per_month AS fcpm,
    cupr.count_per_account_per_day AS fcpa,
    cupr.confirm_required AS fcfm,
    cuf.description AS fdesc,
    cuf.limit_type AS ftype";

  $sqlSelectRights = "SELECT $sqlColumnsRights
    FROM cu_profilerights cupr
    INNER JOIN cu_feature cuf ON cupr.feature_code = cuf.feature_code
    INNER JOIN cu_profile cup ON cupr.profile_id = cup.profile_id
    WHERE cuf.enabled = TRUE
    AND cup.cu = '$pCu'
    ORDER BY cuf.description ASC";

  $sqlQueryRights = db_query($sqlSelectRights, $pDbh);
  if (!$sqlQueryRights) {
    $pEnv['logger']->error(db_last_error());
    throw new Exception("Failed to read profile rights");
  }

  $sqlReturn = db_fetch_all($sqlQueryRights);
  return $sqlReturn;
}

/**
 * ReadAvailableFeatures: generate a list of globally enabled features
 *
 * @param object  $pEnv   : system environment variable for debugging
 * @param object  $pDbh   : system database variable for database manipulation
 * @param string  $pCu    : credit union code associated with a profile_id
 *
 * @return array  $sqlReturn  : array containing data rows, and success information
 */
function ReadAvailableFeatures($pEnv, $pDbh, $pCu) {
  $sqlReturn = array();

  $sqlColumnsFeatures = "cuf.feature_code AS fcode,
    cuf.description AS fdesc,
    cuf.limit_type AS ftype,
    cuf.enabled AS fenabled";

  // WHERE EXISTS restricts feature list to the features that the credit union has.
  $sqlSelectFeatures = "SELECT $sqlColumnsFeatures,
    EXISTS (SELECT 'FOUND' FROM cu_featuremenu fm WHERE cuf.enabled = TRUE AND cuf.feature_code = fm.feature_code AND fm.cu = '" . prep_save($pCu, 10) . "') as cuexists
    FROM cu_feature cuf
    ORDER BY cuf.description ASC";

  $sqlQueryFeatures = db_query($sqlSelectFeatures, $pDbh);
  if (!$sqlQueryFeatures) {
    $pEnv['logger']->error(db_last_error());
    throw new Exception("Failed to read feature list");
  }

  $sqlReturn = db_fetch_all($sqlQueryFeatures);
  return $sqlReturn;
}
?>