userSupportDelete.prg

<?php
/**
 * @package UserSupport (Subpackage delete)
 * @author SPB
 *
 * This script is run when the user opens up the delete card in the user hub.  It cannot be run independently of that.
 */

$string = array("filter" => HCUFILTER_INPUT_STRING);
$parameters = array("a" => array("operation" => "", "payload" => ""));
HCU_ImportVars($parameters, "a", array("operation" => $string, "payload" => $string));
extract($parameters["a"]);

$operation = !isset($operation) ? "" : trim($operation);
$payload = !isset($payload) ? "" : trim($payload);

$userId = null;
try { $userId = HCU_PayloadDecode($Cu, $payload); } catch(exception $e) {}
$userId = isset($userId) ? $userId["user_id"] : null;
$showSQL = $SYSENV["devmode"];

if ($operation != "") {
    if (isset($userId)) {
        switch($operation) {
            case "deleteUser":
                $returnArray = deleteUser($dbh, $Cu, $userId, $Cn);
                break;
            default: // Won't get here
              $returnArray = array("error" => array("Operation not specified: '$operation'"), "record" => array(), "sql" => array());
        }
    } else {
        $returnArray = array("error" => "No User Found", "record" => array(), "sql" => array());
    }

    header('Content-type: application/json');
    if (!$showSQL) {
        unset($returnArray["sql"]);
    }
    print HCU_JsonEncode($returnArray);
} else {
    if (isset($userId)) {
        $isPrimary = getIsPrimary($dbh, $Cu, $userId);
        $isPrimary = $isPrimary["code"] == 0 ? $isPrimary["isPrimary"] : false;
        printPage("$menu_link?ft=$ft", $userId, $isPrimary, "$menu_link?ft=22", $payload);
    } else { ?>
        <div class='noUserFound'><div>No User Found</div></div>
    <?php }
}

/**
 * function getIsPrimary($dbh, $Cu, $userId)
 * This will get information to see if deleting the primary user.  If so there will be a different text and confirmation message.
 *
 * @param $dbh -- the database connection
 * @param $Cu -- the credit union
 * @param $userId -- the user id to delete
 *
 * @return "error" -- the last error encountered or empty array, "code" -- zero if successful, non-zero if not, "isPrimary" -- true if primary, false if not.
 */
function getIsPrimary($dbh, $Cu, $userId) {
    $sqls = array();
    try {
        $sql = "select is_group_primary from ${Cu}user where user_id = $userId";
        $sqls[] = $sql;
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("Select query failed.", 1);
        }
        if (db_num_rows($sth) == 0) {
            throw new exception("User not found.", 2);
        }
        $isPrimary = trim(db_fetch_row($sth, 0)[0]) == "t";
    } catch(exception $e) {
        return array("error" => array($e->getMessage()), "code" => $e->getCode());
    }
    return array("error" => array(), "code" => 0, "isPrimary" => $isPrimary);
}

/**
 * function createHighLevelDeleteAuditRecord($dbh, $Cu, $Cn, $userId, $shortCode, $longDescription, &$sqls, &$email)
 * Creates an audit record with no before and after.
 *
 * @param $dbh -- the database connection
 * @param $Cu -- the credit union
 * @param $Cn -- the logged in user
 * @param $userId -- the user id
 * @param $shortCode -- the identifying code
 * @param $longDescription -- the full description
 * @param $sqls -- the array to append SQLs to
 * @param $email -- get/set email
 * @param $before -- before to use
 *
 * @throws between 100 and 200 which will fail the transaction at the higher level.
 */
function createHighLevelDeleteAuditRecord($dbh, $Cu, $Cn, $userId, $shortCode, $longDescription, &$sqls, &$email, $before) {
    if (!isset($email) || trim($email) == "") {
        $sql = "select email from cuadminusers where user_name = '$Cn' and cu = '$Cu'";
        $sqls[] = $sql;
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("email query failed.", 105);
        }
        $email = trim(db_fetch_row($sth)[0]);
    }

    $context = "admin";
    $script = "userSupportDelete.prg";
    $addr = trim($_SERVER["REMOTE_ADDR"]);
    $vars = array("cu" => $Cu);

    $auditRecord = SetAuditRecord($dbh, array("cu" => $Cu), null, $userId, $shortCode, "admin", "userSupportDelete.prg", "A", $longDescription, $Cn, $email,
        trim($_SERVER["REMOTE_ADDR"]), $before, null);
    if ($auditRecord["code"] != "000") {
        throw new exception("Audit record creation failed.", 104);
    }
}

/**
 * function deleteOption4($dbh, $Cu, $userId, $accountnumber, $Cn)
 * This is what happens when you specify the fourth option.
 *
 * @param $dbh -- the database connection
 * @param $Cu -- the credit union
 * @param $userId -- the userId
 * @param $Cn -- the logged in user
 *
 * @return "error: array of one if not successful, array of zero if successful
 *      "code": 0 if successful, nonzero if not successful
 *      "sql": any SQL used
 */
function deleteUser($dbh, $Cu, $userId, $Cn) {
    $sqls = array();
    try {
        if (!isset($userId) || !is_numeric($userId) || $userId <= 0) {
            throw new exception("UserId must be set to a valid number.", 3);
        }

        $sql = "select u.group_id, u.is_group_primary, u.user_name, g.group_name from ${Cu}user u
                inner join ${Cu}group g on u.group_id = g.group_id where u.user_id = $userId";
        $sqls[] = $sql;
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("select query failed.", 4);
        }
        $row = db_fetch_assoc($sth, 0);
        $groupId = isset($row["group_id"]) ? intval($row["group_id"]) : 0;
        $isPrimary = !isset($row["is_group_primary"]) ? false : trim($row["is_group_primary"]) == "t";
        $username = trim($row["user_name"]);
        $groupname = trim($row["group_name"]);

        $nonPrimaryUsers = array();
        $accounts = array(); // in most cases, this will be only one.
        if ($isPrimary) {
            $sql = "select user_id, user_name from ${Cu}user where group_id = $groupId and user_id <> $userId";
            $sqls[] = $sql;
            $sth = db_query($sql, $dbh);
            if (!$sth) {
                throw new exception("non primary query failed.", 5);
            }
            for($i = 0; $row = db_fetch_row($sth, $i); $i++) {
                $nonPrimaryUsers[] = $row;
            }

            $sql = "select distinct accountnumber from ${Cu}useraccounts where user_id = $userId";
            $sqls[] = $sql;
            $sth = db_query($sql, $dbh);
            if (!$sth) {
                throw new exception("distinct accountnumber query failed.", 6);
            }
            for($i = 0; $row = db_fetch_row($sth, $i); $i++) {
                $accounts[] = trim($row[0]);
            }
        }

        $sql = "begin work";
        $sqls[] = $sql;
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("Begin work failed.", 134);
        }

        if ($isPrimary) {
            foreach($nonPrimaryUsers as $nonPrimaryUserRow) {
                $nonPrimaryUser = trim($nonPrimaryUserRow[0]);
                userDeletion($dbh, $Cu, $nonPrimaryUser, $sqls);
                $before = HCU_JsonEncode(array("deldata" => array("user_name" => $nonPrimaryUserRow[1])));
                createHighLevelDeleteAuditRecord($dbh, $Cu, $Cn, $nonPrimaryUser, "U_DEL_U", "User Login Deleted", $sqls, $email, $before);
            }
        }

        userDeletion($dbh, $Cu, $userId, $sqls);
        $before = HCU_JsonEncode(array("deldata" => array("user_name" => $username)));
        createHighLevelDeleteAuditRecord($dbh, $Cu, $Cn, $userId, "U_DEL_U", "User Login Deleted", $sqls, $email, $before);

        if ($isPrimary) {
            groupDeletion($dbh, $Cu, $groupId, $sqls);
            $before = HCU_JsonEncode(array("deldata" => array("group_name" => $groupname, "user_name" => $username)));
            createHighLevelDeleteAuditRecord($dbh, $Cu, $Cn, $userId, "U_DEL_G", "Group Deleted", $sqls, $email, $before);

            foreach ($accounts as $accountnumber) {
                if (checkAccountUsage($dbh, $Cu, $userId, $accountnumber, $sqls)) {
                    accountDeletion($dbh, $Cu, $accountnumber, $sqls);
                    $before = HCU_JsonEncode(array("deldata" => array("accountnumber" => $accountnumber, "user_name" => $username)));
                    createHighLevelDeleteAuditRecord($dbh, $Cu, $Cn, $userId, "U_DEL_A", "Account Deleted", $sqls, $email, $before);
                }
            }
        }

        $sql = "commit work";
        $sqls[] = $sql;
        $sth = db_query($sql, $dbh);
        if (!$sth) {
            throw new exception("commit work failed.", 135);
        }
    } catch (exception $e) {
        if ($e->getCode() >= 100) {
            $sql = "rollback work";
            $sqls[] = $sql;
            db_query($sql, $dbh); // Got greater problems if this fails.
            return array("error" => array("Deletion was not successful."), "code" => 101, "sql" => $sqls);
        }
        return array("error" => array($e->getMessage()), "code" => $e->getCode(), "sql" => $sqls);
    }
    return array("error" => array(), "code" => 0, "sql" => $sqls);
}

/**
 * function printPage($self, $userId, $primaryAccount)
 * This function will print out the delete card.
 *
 * @param $self -- the URL of this script
 * @param $userId -- the userID
 * @param $primaryUser -- true if primary user
 * @param $userReset -- the URL of the user hub without a selected user
 * @param $payload -- the payload to send the data calls
 */
function printPage($self, $userId, $primaryUser, $userReset, $payload) { ?>
    <script type="text/javascript">
    //# sourceURL=delete.js

    <?php
    /**
     * function init()
     * This will initialize the card which is miminal
     */
    ?>
    function init() {
        $.homecuValidator.setup({formValidate: "deleteDiv", formStatusField: "formValidateDiv"});
        $("#externalTabWindow").data("preferredHeight", "auto");
        $(".deleteDiv").on("click", ".cancelBtn", function() {
            postPostPostPost();
            return false;
        });

        $(".deleteDiv").on("click", ".deleteBtn", function() {
            openConfirm();
            return false;
        });
    }

    <?php
    /**
     * function openFailDialog(errors, title)
     * This one would open a dialog with an error message.
     *
     * @param errors -- the errors (Will be put in the body.)
     * @param title -- the title of this dialog.
     */
    ?>
    function openFailDialog(errors, title) {
        var failDialog = $("#failDialog").data("kendoDialog");
        if (failDialog == null) {
            failDialog = $("<div id='failDialog'></div>").appendTo("body").kendoDialog({
                actions: [
                    {text: "Okay"}
                ],
                open: function() {
                    if (window.activeWindows != null) {
                        window.activeWindows.push(this);
                    }
                },
                close: function() {
                    if (window.activeWindows != null) {
                        window.activeWindows.pop();
                    }
                },
                visible: false,
                modal: true,
                width: 300
            }).data("kendoDialog");
        }

        var content = errors == null ? "" : (typeof(errors) == "string" ? errors.trim() : (errors.length <=1 ? errors.join("").trim() : "<ul><li>" + errors.join("</li><li>") + "</li></ul>"));
        failDialog.title(title).content(content).open();
    }

    <?php
    /**
     * function openConfirm()
     * This opens up the confirmation message.
     */
    ?>
    function openConfirm() {
        var confirmDialog = $("#confirmDeleteDialog").data("kendoDialog");

        if (confirmDialog == null) {
            <?php if ($primaryUser) { ?>

            var content = "";
            content += "<p>This user is a group primary user.</p>";
            content += "<p>Deleting this user will result in the following:</p>";
            content += "<ul style=\"margin-left: 15px;\"><li>Delete primary user</li><li>Delete group</li><li>Delete all other users in the group</li>"
            content += "<li>Delete the primary user's account(s) if no other users reference the account(s)</li></ul>";
            content += "<p>Do you wish to continue?</p>";

            <?php } else { ?>

            var content = "<p>You are about to delete this user.</p><p>Do you wish to continue?</p>";

            <?php } ?>

            confirmDialog = $("<div id='confirmDeleteDialog'></div>").appendTo("body").kendoDialog({
                content: content,
                actions: [{text: "No"}, {text: "Yes", primary: true, action: function() {
                    confirmDialog.close();
                    showWaitWindow();
                    $.post("<?php echo $self; ?>&operation=deleteUser", {payload: "<?php echo $payload; ?>"}, function(data) {
                        hideWaitWindow();
                        if (data.error.length > 0) {
                            $.homecuValidator.displayMessage(data.error, $.homecuValidator.settings.statusError );
                        } else {
                            window.location.href= "<?php echo $userReset; ?>";
                        }
                    });
                    return false;
                }}],
                visible: false,
                open: function() {
                  if (window.activeWindows != null) {
                        window.activeWindows.push(this);
                  }
                },
                close: function() {
                  if (window.activeWindows != null) {
                        window.activeWindows.pop();
                  }
                },
                title: "Confirm User Removal",
                visible: false,
                modal: true,
                minWidth: 300
            }).data("kendoDialog");
        }
        confirmDialog.open();
    }

    <?php
    /**
     * function postPostPostPost()
     * This obviously happens after everything else.
     */
    ?>
    function postPostPostPost() {
        $("#externalTabWindow").data("isClosing", true);
        $("#externalTabWindow").data("kendoWindow").close();
        $("#externalTabWindow").data("isClosing", false);
    }

    init();

    </script>
    <div class="container hcu-all-100 deleteDiv vsgPrimary hcu-template" id="deleteDiv">
        <div class="row notificationRow hcuSpacer"></div>
        <div class="row">
            <div id="formValidateDiv" class="k-block k-error-colored formValidateDiv" style="display:none"></div>
        </div>
        <div class="row">
            <?php echo $primaryUser ? "Delete this primary user, all users in the group, the group, and the account if no more users reference the account."
                : "Delete this non-primary user."; ?>
        </div>
        <div class="hcu-edit-buttons k-state-default row">
            <a class="cancelBtn" href="#">Cancel</a>&nbsp;&nbsp;&nbsp;<a class="deleteBtn k-button k-primary" href="#"><i class="fa fa-trash"></i>Delete</a>
        </div>
    </div>
<?php }