admAudit.prg

<?php
/**
 * @package admAudit.prg
 * Shows all admin audits.
 */

// For GetAuditTime().
require_once("$admLibrary/aAudit.i");

$parameters = array("a" => array("operation" => ""));
$string = array("filter" => HCUFILTER_INPUT_STRING);
HCU_ImportVars($parameters, "a", array("operation" => $string));
extract($parameters["a"]);

$operation = isset($operation) ? trim($operation) : "";
if ($operation != "") {
    switch($operation) {
        case "readAudits":
            $parameters = array("a" => array("duration" => "", "auditUser" => "", "loggedInUser" => "", "actionType" => "", "startOn" => ""));
            $string = array("filter" => HCUFILTER_INPUT_STRING);
            HCU_ImportVars($parameters, "a", array("duration" => $string, "auditUser" => $string, "loggedInUser" => $string, "actionType" => $string, "startOn" => $string));
            $returnArray = getAuditRecords($dbh, $Cu, $parameters["a"], $SYSENV["logger"]);
            break;
        default: // Won't get here
          $returnArray = array("error" => array("Operation not specified: '$operation'"), "record" => array(), "sql" => array());
    }

    header('Content-type: application/json');
    print HCU_JsonEncode($returnArray);
} else {
    PrintPage("$menu_link?ft=$ft", GetAuditTypes($dbh, $Cu), GetAuditRecords($dbh, $Cu, array("duration" => 30), $SYSENV["logger"]));
}

/**
 * function GetAuditTypes($dbh, $Cu)
 * This will get the audit types from what is currently in the database.
 *
 * @param $dbh -- the database connection
 * @param $Cu -- the credit union
 *
 * @return $status -- "000" if successful, nonzero otherwise.
 * @return $error -- "" if successful, nonempty otherwise.
 * @return $ddl -- the distinct types of audits for the query.
 */
function GetAuditTypes($dbh, $Cu) {
    try {
        $sql = "select distinct auditfulldesc as text, auditaction as value from cuauditadmin";
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("Select query failed.", 1);
        }
        $ddl = array(array("text" => "All Types", "value" => ""));
        for($i = 0; $row = db_fetch_assoc($sth, $i); $i++) {
            $ddl[] = $row;
        }

        $returnArray = array("status" => "000", "error" => "", "ddl" => $ddl);
    } catch(exception $e) {
        $returnArray = array("status" => $e->getCode(), "error" => $e->getMessage(), "ddl" => array());
    }
    return $returnArray;
}

/**
 * function GetAuditRecords($dbh, $Cu, $parameters)
 * Gets the audit records
 *
 * @param $dbh -- the database connection
 * @param string $Cu -- the credit union
 * @param array $parameters -- the parameters for the audit record.
 * @param object $logger -- logs to kibana
 * @return [date:"", actioncode:"", user:"", script:"", action:"", rown:0, details: [{table:"", label:"", type:"",
 *      rows: [{type: "", values: [{col: "", before: "", after: "", label: "", same: false}, ...]}, ...]}, ... ]]
 *      Type can be "mixed", "add", "delete", or "update" at the table level.  It cannot be "mixed" at the column level.
 */
function GetAuditRecords($dbh, $Cu, $parameters, $logger) {
    try {
        extract($parameters);

        $duration = strtolower(isset($duration) ? trim($duration) : "");
        $auditUser = strtolower(isset($auditUser) ? trim($auditUser) : "");
        $loggedInUser = strtolower(isset($loggedInUser) ? trim($loggedInUser) : "");
        $actionType = strtolower(isset($actionType) ? trim($actionType) : "");
        $startOn = isset($startOn) ? trim($startOn) : "";

        $where = array("cu = '$Cu'");

        if ($duration == "") {
            throw new exception("Duration is required.", 20);
        }
        switch($duration) {
            case "all":
                break;
            case "30":
            case "60":
            case "90":
                $date = new DateTime();
                $date = DateTime::createFromFormat("Y-m-d", $date->format("Y-m-d")); // Remove time but keep the date.
                $date->modify("-$duration days");
                $date = $date->format("Y-m-d");
                $where[] = "auditdate >= '$date'";
                break;
            case "on":
                if ($startOn == "") {
                    throw new exception("Start On is required.", 21);
                }
                if (!DateTime::createFromFormat("Y-m-d", $startOn)) {
                    throw new exception("Start On is invalid.", 22);
                }
                $where[] = "auditdate >= '$startOn'";
                break;
            default:
                throw new exception("Duration is invalid.", 23);
                break;
        }

        if ($auditUser != "") {
            $where[] = "lower(user_name) = '" . prep_save($auditUser, 50) . "'";
        }
        if ($loggedInUser != "") {
            $where[] = "lower(auditsrcuser_name) = '" . prep_save($loggedInUser, 50) . "'";
        }
        if ($actionType != "") {
            $where[] = "lower(auditaction) = '" . prep_save($actionType, 10) . "'";
        }

        $sql = "select auditdate as date, auditaction as actioncode, auditsrcuser_name as srcuser, user_name as user, auditrecbefore as before, auditrecafter as after,
               auditsrccode_context as script, auditfulldesc as action, row_number() over (order by auditdate desc) as rown from cuauditadmin where " . implode(" and ", $where);
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("Audit query failed.", 12);
        }
        $auditRecords = array();
        for($i = 0; $row = db_fetch_assoc($sth, $i); $i++) {
            $results = ParseAuditRow($row, $Cu, $dbh);
            if ($results["status"] !== "000") { // Audit row is invalid in the database.  DO NOT KILL THE PAGE.  Instead DO NOT DISPLAY and log error in Kibana.
                $logger->error("Admin audit is invalid in the database.  CU: $Cu, Audit Date: " . $row["date"]);
                continue;
            } else {
                $row = $results["row"];
            }
            // #820 added and commented out reference.  This is more a stage 3 new feature.
            //addDetailedDescription($row);

            // Do date stuff
            $tz = GetCreditUnionTimezone($dbh, $Cu);
            $dateTime = new DateTime($row["date"]);
            $dateTime->setTimezone(new DateTimeZone($tz));
            $row["date"] = $dateTime->format("Y-m-d H:i:s.u") . "Z";

            $auditRecords[] = $row;
        }

        $returnArray = array("code" => 0, "error" => array(), "auditRecords" => $auditRecords);
    } catch(exception $e) {
        $returnArray = array("code" => $e->getCode(), "error" => array($e->getMessage()), "auditRecords" => array());
    }
    return $returnArray;
}

/**
 * function PrintPage($self, $readData, $auditRecords)
 * This function will print out the popup for the audit.
 *
 * @param $self -- the URL of this page.
 * @param $readData -- the data needed for this page's load.
 * @param $auditRecords -- the audit records for this page.
 */
function PrintPage($self, $readData, $auditRecords) { ?>
    <script type="text/javascript">
    <?php // Library javascript functions
        getShowWaitFunctions(); ?>

    function AddDays(date, numberofDays) {
        var d = new Date(date);
        return new Date(d.getFullYear(), d.getMonth(), (d.getDate() + numberofDays));
    }

    <?php
    /**
     * function Init()
     * Initializes everything.  It is a super magical function.
     */
    ?>
    function Init() {
        $.homecuValidator.setup({formValidate: "searchForm", formStatusField: "formValidateDiv"});
        var record = <?php echo HCU_JsonEncode($auditRecords); ?>;
        var ddlError = <?php echo HCU_JsonEncode($readData["error"]); ?>;
        if (record.error.length > 0) {
            $.homecuValidator.displayMessage(record.error, $.homecuValidator.settings.statusError);
        } else if (ddlError.length > 0) {
            $.homecuValidator.displayMessage(ddlError, $.homecuValidator.settings.statusError);
        } else {
            var auditData = record.auditRecords;
            <?php printAuditInit("all admin"); ?>
        }

        var actionDDL = $("#actionDDL").kendoDropDownList({
            dataSource: {
                data: <?php echo HCU_JsonEncode($readData["ddl"]); ?>
            },
            dataTextField: "text",
            dataValueField: "value"
        }).data("kendoDropDownList");

        $("#okayBtn").click(function() {
            if ($.homecuValidator.validate()) {
                var duration = $("#durationDDL").data("kendoDropDownList").value();
                var startOn = $("#startingDatePicker").data("kendoDatePicker").value();
                startOn = startOn == null || duration != "on" ? "" : kendo.toString(startOn, "yyyy-MM-dd");
                var parameters = {duration: duration, startOn: startOn, auditUser: $("[name='auditUser']").val().trim(), loggedInUser: $("[name='loggedInUser']").val().trim(),
                    actionType: actionDDL.value()};

                showWaitWindow();
                $.post("<?php echo $self; ?>&operation=readAudits", parameters, function(data) {
                    hideWaitWindow();
                    auditData = data.auditRecords;

                    if (data.error.length > 0) {
                        $.homecuValidator.displayMessage(data.error, $.homecuValidator.settings.statusError);
                    } else {
                        $("#auditGrid").data("kendoGrid").dataSource.read();
                    }
                });
            }
            return false;
        });

        $("[name='durationCheck']").click(function() {
            var thisElement = this;
            startingDatePicker.enable(($(thisElement).data("val") + "").trim() == "on");
        });

        var now = new Date();
        now.setHours(0, 0, 0, 0);
        var all = new Date();
        all.setHours(0, 0, 0, 0);
        all.setDate(1);
        all.setMonth((all.getMonth() - 1) % 12);
        all.setFullYear(all.getFullYear() - 1);

        var minx = new Date();
        minx.setHours(0, 0, 0, 0);
        var min30 = AddDays(minx, -30);
        var min60 = AddDays(minx, -60);
        var min90 = AddDays(minx, -90);

        var startingDatePicker = $("#startingDatePicker").kendoDatePicker({
            max: now,
            min: all,
            format: "MM/dd/yyyy", <?php // Add zeroes so that MTB looks okay. ?>
            change: function() {
                $("#durationDDL").data("kendoDropDownList").value("on"); <?php // Now doesn't align with the duration options. ?>
            }
        }).data("kendoDatePicker");

        $("#startingDatePicker").focus(function() { <?php // Clear out when selecting the date. ?>
            $(this).val(null);
            startingDatePicker.value(null);
        });

        $("#startingDatePicker").blur(function() {
            if ($(this).hasClass("k-invalid")) {
                $(startingDatePicker.wrapper).css("border", "1px solid #d80000");
            } else {
                $(startingDatePicker.wrapper).css("border", "inherit");
            }
        });

        var durationDDL = $("#durationDDL").kendoDropDownList({
            dataSource: {
                data: [
                    {text: "Last 30 days", value: "30"},
                    {text: "Last 60 days", value: "60"},
                    {text: "Last 90 days", value: "90"},
                    {text: "All Available", value: "all"},
                    {text: "Custom", value: "on"}
                ]
            },
            dataTextField: "text",
            dataValueField: "value",
            change: function() {
                switch(this.value())
                {
                    case "custom": break; <?php // Nothing to do.  The date is whatever they want. ?>
                    case "all": startingDatePicker.value(all); break;
                    case "30": startingDatePicker.value(min30); break;
                    case "60": startingDatePicker.value(min60); break;
                    case "90": startingDatePicker.value(min90); break;
                }
            }
        }).data("kendoDropDownList");

        startingDatePicker.value(min30); <?php // Starting value: previous 30 days. ?>
    }

    var activeWindows = [];
    $(document).ready(function() {
        Init();
        <?php printClickOverlayEvent(); ?>
    });

    <?php PrintPrintAudits("all admin");
        printAuditOpenPopup(); ?>
    </script>
    <style>
        .auditFilterDiv > div {
            max-width: 950px;
        }
    </style>
    <?php PrintAuditTemplates(true); ?>
    <div id="formValidateDiv" class="k-block k-error-colored formValidateDiv" style="display:none"></div>
    <div class="container-fluid">
        <form id="searchForm"><div class="well well-sm container-fluid auditFilterDiv" style="display:none;"><div>
            <div class="col-xs-12 hcuSpacer hcu-no-padding">
                <div class="container-fluid">
                    <div class="row hcuSpacer"><label class="col-xs-12 col-sm-5">Date Search Range</label>
                        <div class="col-xs-12 col-sm-7"><div id="durationDDL" class="hcu-all-100"></div></div>
                    </div>
                    <div class="row hcuSpacer"><label class="col-xs-12 col-sm-5">&nbsp;</label>
                        <div class="col-xs-12 col-sm-7"><input type="text" id="startingDatePicker" class="hcu-all-100" homecu-match="date" data-homecuCustomMatch-msg="Date is invalid."></div>
                    </div>
                </div>
            </div>

            <div class="col-xs-12 hcuSpacer hcu-no-padding">
                <div class="container hcu-all-100">
                    <div class="row hcuSpacer">
                        <label class="col-xs-12 col-sm-5">Changes for Admin User</label>
                        <div class="col-xs-12 col-sm-7"><input type="text" class="k-input k-textbox hcu-all-100" name="auditUser"></div>
                    </div>
                    <div class="row hcuSpacer">
                        <label class="col-xs-12 col-sm-5">Changed by Admin User</label>
                        <div class="col-xs-12 col-sm-7"><input type="text" class="k-input k-textbox hcu-all-100" name="loggedInUser"></div>
                    </div>
                    <div class="row hcuSpacer">
                        <label class="col-sm-5 col-xs-12">Action Type</label>
                        <div class="col-sm-7 col-xs-12"><div id="actionDDL" class="hcu-all-100"></div></div>
                    </div>
                </div>
            </div>

            <div class="col-xs-12 hcuSpacer hcu-no-padding"><div class="container hcu-all-100"><div class="row"><div class="col-xs-12">
                <a href="#" class="k-button k-primary floatRight" id="okayBtn">Show</a>
            </div></div></div></div>
        </div></div></form>
        <div id="auditGrid" class="hcu-all-100 pointerGrid"></div>
        <form id="auditPrintForm" method="post" action="shell.prg" target="auditPrint">
            <input type="hidden" name="shell" value="">
            <input type="hidden" name="title" value="">
        </form>
    </div>
    <div id="previewWindow"></div>
<?php }