userSupportRights.prg

<?php
/**
 * @package UserSupport (Subpackage rights)
 * @author SPB
 *
 * This script is run when the user opens up the rights (cubes) card in the user hub.  It cannot be run independently of that.
 */
$string= array("filter" => HCUFILTER_INPUT_STRING);
HCU_ImportVars($parameters, "a", array("operation" => $string, "payload" => $string, "ft" => $string, "userId" => $string));
extract($parameters["a"]);

$showSQL= $SYSENV["devmode"];
$operation= is_null($operation) ? "" : trim($operation);

if ($operation != "")
{
    switch($operation)
    {
        case "saveRights":
            $returnArray= saveUserRights($dbh, $Cu, $userId, $Cn);
            break;
        case "deleteRights":
            $returnArray= deleteRights($dbh, $Cu, $userId, $Cn);
            break;
        default: // Won't get here
          $returnArray= array("error" => array("Operation not specified: '$operation'"), "record" => array(), "sql" => array());
    }

    header('Content-type: application/json');
    if (!$showSQL)
        unset($returnArray["sql"]);
    print HCU_JsonEncode($returnArray);
}
else
{
    try
    {
        $userId = HCU_PayloadDecode($Cu, $payload);
    }
    catch(exception $e)
    { ?>
        <div class='noUserFound'><div>No User Found</div></div>
    <?php exit;
    }
    printPage("$menu_link?ft=$ft", $userId["user_id"], getUserRights($dbh, $Cu, $userId["user_id"], $showSQL));
}

/**
 * function getUserRights($dbh, $cuCode, $userId, $showSQL= false)
 * Gets the user rights
 *
 * @param integer $dbh -- the database connection
 * @param string $cuCode -- the credit union
 * @param integer $userId -- the user id
 * @param boolean $showSQL -- turn it off for non devmode.
 * @return array -- 0 to infinity errors, all SQL, a nonzero code if there is an error.  Data is what will show up in the user rights table.
 */
function getUserRights($dbh, $Cu, $userId, $showSQL)
{
    $sqls= array();
    try
    {
        $sql= "select f.feature_code, f.description as fdescription, g.group_name, p.profile_code, least(pr.amount_per_transaction, gr.amount_per_transaction) as max_apt,
            ur.feature_code as exists, least(pr.amount_per_day, gr.amount_per_day) as max_apd, least(pr.amount_per_month, gr.amount_per_month) as max_apm,
            least(pr.amount_per_account_per_day, gr.amount_per_account_per_day) as max_apapd, least(pr.count_per_day, gr.count_per_day) as max_cpd, least(pr.count_per_month,
            gr.count_per_month) as max_cpm, least(pr.count_per_account_per_day, gr.count_per_account_per_day) as max_cpapd, f.limit_type,
            coalesce(pr.confirm_required, false) or coalesce(gr.confirm_required, false) as bool_max_cr, ur.amount_per_transaction as apt, ur.amount_per_day as apd,
            ur.amount_per_month as apm, ur.amount_per_account_per_day as apapd, ur.count_per_day as cpd, ur.count_per_month as cpm, ur.count_per_account_per_day as cpapd,
            ur.deny_create as bool_fcreate, ur.deny_confirm as bool_fconfirm, ur.deny_decline as bool_fdecline,
            ur.deny_report as bool_freport, coalesce(ur.confirm_required,false) as bool_crequired, ur.deny_access as bool_faccess from
            (select user_id, group_id from ${Cu}user where user_id= $userId) as u
            inner join ${Cu}group g on u.group_id = g.group_id
            inner join cu_profile p on g.profile_id = p.profile_id and p.cu= '$Cu'
            inner join cu_profilerights pr on p.profile_id = pr.profile_id
            inner join cu_feature f on pr.feature_code = f.feature_code and f.enabled
            left join ${Cu}userrights ur on u.user_id= ur.user_id and pr.feature_code = ur.feature_code
            left join ${Cu}grouprights gr on pr.feature_code = gr.feature_code and g.group_id = gr.group_id";
        $sqls[]= $sql;
        $sth= db_query($sql, $dbh);
        if (!$sth)
            throw new exception("Select query failed!", 1);
        $data= array();
        $unusedFeatures= array();
        for($i=0; $array= db_fetch_assoc($sth, $i); $i++)
        {
            foreach($array as $key => $value)
            {
                $value= is_null($value) ? "" : trim($value);

                if ($key == "exists")
                    $value= $value != "";
                else if ($key == "bool_crequired" || $key == "bool_max_cr") // Confirm and confirm's higher up value are not inverted.
                    $value= $value == "t";
                else if (strpos($key, "bool_") !== false)
                    $value= $value != "t"; // Want the opposite.  It is deny after all.
                else if (isset($array["max_${key}"]))
                {
                    $maxValue= floatval($array["max_${key}"]);
                    $value= floatval($value) >= $maxValue ? "" : $value; // Prevent recording actual values when equal or greater than the limit.  Also "Default" is supposed to be the same.
                }
                $array[$key]= $value;
            }
            $data[]= $array;
        }
        $returnArray= array("code" => 0, "error" => array(), "data" => $data, "sql" => $sqls);
    }
    catch(exception $e)
    {
        $returnArray= array("code" => $e->getCode(), "error" => array($e->getMessage()), "sql" => $sqls);
    }

    if (!$showSQL)
        unset($returnArray["sql"]);

    return $returnArray;
}

/**
 * function saveUserRights($dbh, $Cu, $userId, $Cn)
 *
 * This function saves the changes made to the rights grid and propagates them to the database.  This expects three json arrays: deletes, updates, and adds.  If one or more isn't there,
 * Then, it isn't a big deal.  If all are missing, then nothing is done.  The three arrays are validated and if there are no errors, then the changes are made to the database and an audit
 * record is created.
 *
 * @param $dbh -- the database connection
 * @param $Cu -- the credit union
 * @param $userId -- the userId to save rights from.
 * @param $Cn -- the logged in user (For logging the audit record)
 *
 * @return array("error" => 0 or 1 errors found, "code" => 0 if successful; nonzero otherwise, "sql" => all $sqls used (except for the audit/update functions))
 */
function saveUserRights($dbh, $Cu, $userId, $Cn)
{
    $sqls= array();
    $string= array("filter" => HCUFILTER_INPUT_STRING);
    HCU_ImportVars($parameters, "a", array("deletes" => $string, "updates" => $string, "adds" => $string));
    extract($parameters["a"]);
    try
    {
        $deletes= is_null($deletes) ? "" : trim($deletes);
        $updates= is_null($updates) ? "" : trim($updates);
        $adds= is_null($adds) ? "" : trim($adds);

        $officialDelete= array();
        $officialUpdate= array();
        $officialAdd= array();
        $notSoOfficialUpdate= array();
        $notSoOfficialAdd= array();
        $codes= array();
        $doSave= false;

        if ($deletes != "" && $deletes != "[]")
        {
            $deletes= HCU_JsonDecode($deletes);
            if (count($deletes) == 0)
                throw new exception("Delete array is invalid!", 1);
            foreach($deletes as $featureCode)
            {
                $officialDelete[]= array("_action" => "delete", "user_id" => $userId, "feature_code" => $featureCode);
            }
            $doSave= true;
        }

        $updateCodes= array();
        if ($updates != "" && $updates != "[]")
        {
            $updates= HCU_JsonDecode($updates);
            if (count($updates) == 0)
                throw new exception("Update array is invalid!", 2);

            foreach($updates as $update)
            {
                if (!isset($update["feature_code"]))
                    throw new exception("Update row needs the feature code!", 3);
                $code= trim($update["feature_code"]);
                $updateCodes[$code]= true;
                $code= prep_save($code, 10);
                $codes[]= "('$code','update')";
                $update["_action"]= "update";
                $update["user_id"]= $userId;

                $notSoOfficialUpdate[]= $update;
            }
            $doSave= true;
        }

        $addCodes= array();
        if ($adds != "" && $adds != "[]")
        {

            $adds= HCU_JsonDecode($adds);
            if (count($adds) == 0)
                throw new exception("Add array is invalid!", 2);
            foreach($adds as $add)
            {
                if (!isset($add["feature_code"]))
                    throw new exception("Add row needs the feature code!", 6);
                $code= trim($add["feature_code"]);
                $addCodes[$code]= true;
                $code= prep_save($code, 10);
                $codes[]= "('$code', 'add')";
                $add["_action"]= "create";
                $add["user_id"]= $userId;
                $notSoOfficialAdd[]= $add;
            }
            $doSave= true;
        }

        // Check to see if the feature code is in the right array
        if (count($codes) > 0)
        {
            $sql= "select v.* from ${Cu}userrights r inner join (values " . implode(",", $codes) . ") as v (code, type) on r.feature_code = v.code and r.user_id = $userId";
            $sqls[]= $sql;
            $sth= db_query($sql, $dbh);
            if (!$sth)
                throw new exception("Check query failed!", 7);

            $officialUpdate= array();
            $officialAdd= array();

            $actualUpdateCodes= array();
            $actualAddCodes= array();

            for($i=0; $array= db_fetch_assoc($sth, $i); $i++)
            {
                if ($array["type"] == "add")
                    $actualAddCodes[$array["code"]]= true;
                else
                    $actualUpdateCodes[$array["code"]]= true;
            }

            if (count($actualUpdateCodes) == count($updateCodes) && count($actualAddCodes) == 0) // All good.  Add codes shouldn't exist.  Update codes should exist.
            {
                $officialUpdate= $notSoOfficialUpdate;
                $officialAdd= $notSoOfficialAdd;
            }
            else
            {
                foreach($notSoOfficialUpdate as $row)
                {
                    $feature= $row["feature_code"];
                    if (!isset($actualUpdateCodes[$feature]))
                    {
                        $row["_action"]= "create";
                        $officialAdd[]= $row;
                    }
                    else
                        $officialUpdate[]= $row;
                }

                foreach($notSoOfficialAdd as $row)
                {
                    $feature= $row["feature_code"];
                    if (isset($actualAddCodes[$feature]))
                    {
                        $row["_action"]= "update";
                        $officialUpdate[]= $row;
                    }
                    else
                        $officialAdd[]= $row;
                }
            }
        }

        if ($doSave)
        {
            $sql= "select email from cuadminusers where user_name= '$Cn' and cu= '$Cu'";
            $sqls[]= $sql;
            $sth = db_query($sql, $dbh);
            if (!$sth)
                throw new exception("email query failed!", 9);
            $email= db_fetch_row($sth)[0];

            $context= "admin";
            $script= "userSupportRights.prg";
            $addr= trim($_SERVER["REMOTE_ADDR"]);
            $vars= array("cu" => $Cu);

            if ($deletes != "" && $deletes != "[]")
            {
                $official= array("userrights" => $officialDelete);
                if (DataUserTableUpdate($dbh, $vars, null, $official, $userId, "UR_DELETE", $context, $script, "A", "Rights Delete", $Cn, $email, $addr) === false)
                    throw new exception("Deleting failed!", 10);
            }

            if ($updates != "" && $updates != "[]")
            {
                $official= array("userrights" => $officialUpdate);
                if (DataUserTableUpdate($dbh, $vars, null, $official, $userId, "UR_UPDATE", $context, $script, "A", "Rights Update", $Cn, $email, $addr) === false)
                    throw new exception("Updating failed!", 11);
            }

            if ($adds != "" && $adds != "[]")
            {
                $official= array("userrights" => $officialAdd);
                if (DataUserTableUpdate($dbh, $vars, null, $official, $userId, "UR_ADD", $context, $script, "A", "Rights Add", $Cn, $email, $addr) === false)
                    throw new exception("Adding failed!", 12);
            }
        }
    }
    catch(exception $e)
    {
        return array("error" => array($e->getMessage()), "code" => $e->getCode(), "sql" => $sqls);
    }
    return array("error" => array(), "code" => 0, "sql" => $sqls);
}

/**
 * function printPage($self, $userId, $readData)
 *
 * Prints all script, templates and HTML necessary to display the rights grid from within the outer tab window.
 *
 * @param $self -- The URL of this script
 * @param $userId -- the userId of the user
 * @param $readData -- the results of getUserRights.  This is to not flicker on load which was caused by the call for the page plus the call for the read.
 */
function printPage($self, $userId, $readData)
{ ?>
    <script type="text/javascript">
    //# sourceURL=rights.js

    var userSupportContents= {};

    userSupportContents.labels= [
        {code: "apt", description: "Amount per transaction", popup: "Transaction", type: "amount"},
        {code: "apapd", description: "Amount per account per day", popup: "Account / Day", type: "amount"},
        {code: "apd", description: "Amount per day", popup: "Day", type: "amount"},
        {code: "apm", description: "Amount per month", popup: "Month", type: "amount"},
        {code: "cpapd", description: "Count per account per day", popup: "Account / Day", type: "count"},
        {code: "cpd", description: "Count per day", popup: "Day", type: "count"},
        {code: "cpm", description: "Count per month", popup: "Month", type: "count"},
        {code: "bool_faccess", description: "Has access", popup: "Access", type: "boolean", isAccess: true},
        {code: "bool_fcreate", description: "Create feature", popup: "Create", type: "boolean"},
        {code: "bool_fconfirm", description: "Needs confirmation", popup: "Confirm", type: "boolean"},
        {code: "bool_fdecline", description: "Can decline", popup: "Decline", type: "boolean"},
        {code: "bool_freport", description: "Has Report", popup: "Report", type: "boolean"},
        {code: "bool_crequired", description: "Confirmation required", popup: "Required", type: "boolean", isConfirmation: true}
    ];
    userSupportContents.rightsData= [];
    userSupportContents.defaultRowTemplate= "";

    <?php
    /**
     * function dirtify(dirty, container)
     *
     * This function sets the dirty flag after the cell is changed.
     *
     * @param Boolean dirty -- if there are changes or not.
     * @param HTMLElement container -- this is the cell. (TD tag)
     */
    ?>
    function dirtify(dirty, container)
    {
        if (dirty)
        {
            $(container).addClass("k-dirty-cell");
            $(container).prepend("<span class='k-dirty'></span>");
        }
        else
        {
            $(container).removeClass("k-dirty-cell");
            $(container).find(".k-dirty").remove();
        }
    }

    <?php
    /**
     * function numericEditor(container, options)
     *
     * This is a custom editor for numeric fields.  This is specifying the limits of the particular feature and if the value goes equal or above the limit, then it is set to null.
     *
     * @param HTMLElement container -- this is the cell. (TD tag)
     * @param {} options -- contains quite a few things.  For more info go to the kendo grid API and look at columns.editor.
     */
    ?>
    function numericEditor(container, options, rightsGrid)
    {
        if ($(container).hasClass("vsgDisabled"))
        {
            rightsGrid.closeCell();
            return false;
        }
        switch(options.model.limit_type)
        {
            case "B": break; <?php // "Both" means that DO IT! ?>
            case "D":
                if (!$(container).hasClass("bb"))
                {
                    rightsGrid.closeCell();
                    return;
                }
                break;
            case "Q":
                if (!$(container).hasClass("cc"))
                {
                    rightsGrid.closeCell();
                    return;
                }
                break;
            default: <?php // Unknown value.  This expects BDQ. ?>
                rightsGrid.closeCell();
                return false;
                break;
        }

        var label= null;
        for(var i=0; i!= userSupportContents.labels.length; i++)
        {
            var item= userSupportContents.labels[i];
            if (item.code == options.field)
            {
                label= item;
                break;
            }
        }
        var max= (options.model["max_"+options.field]+"").trim();
        max= max == "" ? (label.type == "amount" ? "<?php echo FEATURE_LIMIT_MAX_AMOUNT; ?>" : "<?php echo FEATURE_LIMIT_MAX_COUNT; ?>") : max;
        max= Math.round(max);
        var value= options.model[options.field];
        value= value == null ? null : Math.round(value);
        var orgValue= options.model["org_"+options.field];
        var ntb= $("<input>").appendTo(container).kendoNumericTextBox({
            min: 0,
            format: label.type == "amount" ? "c0" : "n0",
            max: max,
            step: max,
            value: value,
            upArrowText: "Set to Default",
            downArrowText: "Set to 0",
            change: function() {
                var value= this.value() >= max ? null : Math.round(this.value());

                if (orgValue == "")
                    orgValue= null;
                options.model[options.field]= value;
                this.value(value);
                options.model.dirty= orgValue != value;

                dirtify(options.model.dirty, container);
            }
        }).data("kendoNumericTextBox");
    }

    <?php
    /**
     * function radioClick(value, rightsGrid)
     *
     * This is called when one of the radio buttons on the top gets clicked and also on the databound for the grid (booleans are shown by default.)
     *
     * @param string value -- the val() of the radio button that is clicked.  This will show/hide columns based on the selection.
     * @param KendoGrid rightsGrid -- the main grid.
     */
    ?>
    function radioClick(value, rightsGrid)
    {
        var showBoolean= false, booleanIndex= 2;
        var showCounts= false, countIndex= 4;
        var showAmounts= false, amountIndex= 3;
        switch(value)
        {
            case "boolean":
                showBoolean= true;
                break;
            case "count":
                showCounts= true;
                break;
            case "amount":
                showAmounts= true;
                 break;
            case "all":
                showBoolean= true;
                showAmounts= true;
                showCounts= true;
                break;
        }

        <?php // There seems to be a bug with hide/show columns after read calls. ?>
        showBoolean ? $("#userRightsGrid").removeClass("hideAA") : $("#userRightsGrid").addClass("hideAA");
        showCounts ? $("#userRightsGrid").removeClass("hideCC") : $("#userRightsGrid").addClass("hideCC");
        showAmounts ? $("#userRightsGrid").removeClass("hideBB") : $("#userRightsGrid").addClass("hideBB");

        if (typeof(resizingAndWhatnot) == "function")
            (resizingAndWhatnot)($("#externalTabWindow").data("kendoWindow"));
    }

    <?php
    /**
     * function clearRecord(item)
     *
     * This happens when the user clicks on one of the checkboxes on the second column and updates.  That is meant to set everything to "Default" for the row so effectively, it is "cleared."
     *
     * @param {} item -- the dataItem in the dataSource to update.
     */
    ?>
    function clearRecord(item)
    {
        item.checked= false;
        item.exists= false;
        item.apt= null;
        item.apd= null;
        item.apm= null;
        item.apapd= null;
        item.cpd= null;
        item.cpm= null;
        item.cpapd= null;
        item.bool_faccess= true;
        item.bool_fcreate= true;
        item.bool_fconfirm= true;
        item.bool_fdecline= true;
        item.bool_freport= true;
        item.bool_crequired= true;
    }

    <?php
    /**
     * function createSnapshot(item)
     *
     * This sets the original fields to the current value before changes.
     *
     * @param {} item -- the dataItem in the dataSource to update.
     */
    ?>
    function createSnapshot(item)
    {
        item.org_apt= item.apt;
        item.org_apd= item.apd;
        item.org_apm= item.apm;
        item.org_apapd= item.apapd;
        item.org_cpd= item.cpd;
        item.org_cpm= item.cpm;
        item.org_cpapd= item.cpapd;
        item.org_bool_faccess= item.bool_faccess;
        item.org_bool_fcreate= item.bool_fcreate;
        item.org_bool_fconfirm= item.bool_fconfirm;
        item.org_bool_fdecline= item.bool_fdecline;
        item.org_bool_freport= item.bool_freport;
        item.org_bool_crequired= item.bool_crequired;
    }

    <?php
    /**
     * function updateGrid(options, rightsGrid)
     *
     * This parses the grid and sends the data down to be saved.  It is going to iterate and check to see if it is a delete, a update or an add.  Then put only the data necessary in those
     * arrays.
     *
     * @param {} options -- all the options: Kendo-defined.  For more information, see the kendo dataSource API and look at transport.update function examples.
     * @param KendoGrid rightsGrid -- the main grid.
     */
    ?>
    function updateGrid(options, rightsGrid)
    {
        var deletes= [];
        var updates= [];
        var adds= [];
        var data= options.data.models;
        for(var i=0; i!= data.length; i++)
        {
            var item= data[i];
            if (item.checked)
                deletes.push(item.feature_code);
            else
            {
                var record= {feature_code: item.feature_code, amount_per_transaction: item.apt, amount_per_day: item.apd, amount_per_month: item.apm,
                    amount_per_account_per_day: item.apapd, count_per_day: item.cpd, count_per_month: item.cpm, count_per_account_per_day: item.cpapd, deny_report: !item.bool_freport,
                    deny_access: !item.bool_faccess, deny_create: !item.bool_fcreate, deny_confirm: !item.bool_fconfirm, deny_decline: !item.bool_fdecline,
                    confirm_required: item.bool_crequired};
                if (item.exists)
                    updates.push(record);
                else
                    adds.push(record);
            }
        }
        if (deletes.length > 0 || updates.length > 0 || adds.length > 0)
        {
            var parameters= {userId: "<?php echo $userId; ?>", deletes: kendo.stringify(deletes), updates: kendo.stringify(updates), adds: kendo.stringify(adds)};
            showWaitWindow();
            $.post("<?php echo $self; ?>&operation=saveRights", parameters, function(data) {
                hideWaitWindow();
                if (data.error.length > 0)
                {
                    $.homecuValidator.displayMessage(data.error, $.homecuValidator.settings.statusError );
                    options.error(data.error);
                }
                else
                {
                    var data= options.data.models;
                    for(var i=0; i!= data.length; i++)
                    {
                        var item= data[i];
                        item.dirty= false;
                        if (item.checked)
                            clearRecord(item);
                        else
                            item.exists= true;
                        createSnapshot(item);
                    }
                    options.success(data);
                    postPostPostPost();
                }
            });
        }
    }

    <?php
    /**
     * function openGroupRights()
     *
     * This opens the window when the user clicks on the "Open Group's Rights" link.  Data is already there from the main read.
     */
    ?>
    function openGroupRights()
    {
        var groupRightWindow= $("#groupRightWindow").data("kendoWindow");
        if (groupRightWindow == null)
        {
            groupRightWindow= $("<div id='groupRightWindow'></div>").appendTo("body").kendoWindow({
                modal: true,
                title: "Group Rights",
                visible: false,
                resizable: false,
                minWidth: 300,
                maxWidth: 600,
                width: "90%",
                close: function(e) {
                    if (window.activeWindows != null)
                        window.activeWindows.pop();
                },
                open: function() {
                    if (window.activeWindows != null)
                        window.activeWindows.push(this);
                    var kWindow= $(this.wrapper);
                    this.center();
                    $(kWindow).css({position: "absolute", top: "10px", overflow: "hidden"});
                    $("#groupRightWindow").css({overflow: "hidden", padding: 0, paddingBottom: 15});
                }
            }).data("kendoWindow");

            groupRightWindow.content(kendo.template($("#groupRightsWindowTemplate").html()));

            var fields= {feature_code: {type: "string"}, fdescription: {type: "string"}};

            for (var i=0; i!= userSupportContents.labels.length; i++)
            {
                var item= userSupportContents.labels[i];
                switch(item.type)
                {
                    case "boolean":
                        if (item.code == "bool_crequired")
                            fields.bool_max_cr= {type: "boolean"};
                        break;
                    case "amount":
                    case "count":
                        fields["max_"+item.code]= {type: "number"};
                        break;
                }
            }

            var groupRightsGrid= $("#groupRightsGrid").kendoGrid({
                dataSource: {
                    data: userSupportContents.rightsData,
                    schema: {
                        model: {
                            id: "feature_code",
                            fields: fields
                        }
                    }
                },
                columns: [
                    {field: "fdescription", title: "Feature", attributes: {"class": "showEllipsis"}, width: "200px"},
                    {title: "Description", template: $("#groupRightsCellTemplate").html()}
                ],
                noRecords: {
                    template: "<tr><td colspan='2'>No Records Found</td></tr>"
                }
            }).data("kendoGrid");

            $("#groupRightsGrid").css({border: "none", maxHeight: 500, overflowX: "hidden", overflowY: "auto"});
            $("#groupRightsGrid:not(:has(.k-grid-norecords) .k-grid-content").css({overflowX: "hidden", overflowY: "auto"});
            $("#groupRightsGrid:has(.k-grid-norecords) .k-grid-content").css({overflow: "hidden"});

            $("#groupRightWindow").on("click", ".closeBtn", function() {
                groupRightWindow.close();
                return false;
            });

            var toolTipProps= homecuTooltip.defaults;
            toolTipProps.filter= ".showEllipsis:overflown";
            toolTipProps.content= function(e) {
                return $(e.target).text().trim();
            };

            $("#groupRightsGrid").kendoTooltip(toolTipProps);
        }
        groupRightWindow.open();
    }

    <?php
    /**
     * function init()
     *
     * Initializes the main grid and all the click events on the main popup.
     */
    ?>
    function init()
    {
        $.homecuValidator.setup({formValidate:'userRightsDiv', formStatusField: 'formValidateDiv'});
        $("#externalTabWindow").data("preferredHeight", "auto");
        $("#externalTabWindow").data("preferredWidth", 1100);
        var columns= [
            {title: "Feature", columns: [{locked: true, field: "fdescription", title: "&nbsp;", width: 200, attributes: {"class": "showEllipsis"}}]},
            {title: "Reset", columns: [{locked: true, template: "<input type='checkbox' class='rowCheckbox' # if (!exists) { # disabled style='display:none;' # } #>",
            attributes: {"class": "checkboxTD"}, headerTemplate: "<input type='checkbox' class='allCheckbox'>", width: 75, sortable: false, filterable: false, field: "checked"}]}
        ];

        var fields= {
            kendoIndex: {type: "number", editable: false},
            feature_code: {type: "string", editable: false},
            checked: {type: "boolean", editable: false},
            fdescription: {type: "string", editable: false},
            limit_type: {type: "string", editable: false},
            exists: {type: "boolean", editable: false}
        };

        var booleans= [];
        var confirmation= [];
        var counts= [];
        var amounts= [];
        var rightsGrid= null;
        var booleanWidth= 75, amountWidth= 150, countWidth= 150;
        var defaultT= ["<td class='showEllipsis' role='gridcell'>#: fdescription #</td>",
        "<td class='checkboxTD' role='gridcell'><input type='checkbox' class='rowCheckbox' checked # if (!exists) { # disabled style='display:none;' # } #></td>"];
        var defaultTB= [];
        var defaultTA= [];
        var defaultTC= [];
        var templateTemplate= kendo.template("# if (code != 'bool_faccess') { # \\# if (limit_type == 'A') { \\# <div class='accessOnly'>&nbsp;</div> \\# } else { \\# # } #"
            + "<center> \\# if (#: code #) { \\# <div class='restriction allow hcu-all-100'><i class='fa fa-check'></i></div> \\# } else { \\#"
            + "<div class='restriction ban hcu-all-100'><i class='fa fa-ban'></i></div> \\# } \\# </center> # if (code != 'bool_faccess') { # \\# } \\# # } #");
        for (var i=0; i!= userSupportContents.labels.length; i++)
        {
            var item= userSupportContents.labels[i];
            switch(item.type)
            {
                case "boolean":
                    if (item.isConfirmation)
                    {
                        var thisRow= {field: item.code, title: item.popup, attributes: {"class": "aa"}, headerAttributes: {"class": "aa"},
                            template: "# if (limit_type == 'A') { # <div class='accessOnly'>&nbsp;</div> # } else  if (checked) { # Yes # } "
                            + "else if (bool_max_cr) { # <div class='vsgDisabled'>Yes</div> # } else if (bool_crequired) { # "
                            + "<div class='crequired showClickable hcu-all-100'>Yes</div> # } else { # <div class='crequired showClickable hcu-all-100'>No</div> # } #",
                            width: 140};
                        confirmation.push(thisRow);
                        fields[item.code]= {type: "boolean", editable: false};
                        defaultTB.push("# if (limit_type == 'A') { # <td class='accessOnly aa'>&nbsp;</td> # } else { #<td class='aa vsgDisabled k-group-cell' role='gridcell'>Yes</td># } #");
                    }
                    else
                    {
                        var thisRow= {field: item.code, headerTemplate: "<center>"+item.popup+"</center>", attributes: {"class": "aa restrictionTD", "data-name": item.code},
                        headerAttributes: {"class": "aa"}, template: templateTemplate({code: item.code}), width: booleanWidth};
                        booleans.push(thisRow);
                        fields[item.code]= {type: "boolean", editable: false};
                        var defaultThis= item.isAccess ? "<td class='aa vsgDisabled'><center><i class='fa fa-check'></i></center></td>" :
                            "# if (limit_type == 'A') { # <td class='accessOnly aa'>&nbsp;</td> # } else { #<td class='aa vsgDisabled'><center><i class='fa fa-check'></i></center></td> # } #";
                        defaultTB.push(defaultThis);
                    }
                    break;
                case "amount":
                    amounts.push({field: item.code, title: item.popup, editor: function(container, options) { numericEditor(container, options, rightsGrid); },
                        attributes: {"class": "bb"}, headerAttributes: {"class": "bb"}, template: "# if (limit_type != 'B' && limit_type != 'D') { # <div class='notAmount'>&nbsp;</div> # } "
                        + "else if (checked) { # Default # } else if ("+ item.code+ " == null) { #"
                        + "<div class='showClickable hcu-all-100'>Default</div> # } else { # <div class='showClickable hcu-all-100'>#= kendo.toString ("+ item.code+ ", 'c0') #</div> # } #",
                        width: amountWidth});
                    fields[item.code]= {type: "number"};
                    defaultTA.push("# if (limit_type != 'B' && limit_type != 'D') { # <td class='bb notAmount'>&nbsp;</td> # }"
                        + "else { # <td class='bb vsgDisabled' role='gridcell'>Default</td> # } #");
                    break;
                case "count":
                    counts.push({field: item.code, title: item.popup, editor: function(container, options) { numericEditor(container, options, rightsGrid); },
                        attributes: {"class": "cc"}, headerAttributes: {"class": "cc"}, template: "# if (limit_type != 'B' && limit_type != 'Q') { # <div class='notCount'>&nbsp;</div> # } "
                        + "else if (checked) { # Default # } else if ("+ item.code+ " == null) { #"
                        + "<div class='showClickable hcu-all-100'>Default</div> # } else { # <div class='showClickable hcu-all-100'>#= kendo.toString ("+ item.code+ ", 'n0') #</div> # } #",
                        width: countWidth});
                    fields[item.code]= {type: "number"};
                    defaultTC.push("# if (limit_type != 'B' && limit_type != 'Q') { # <td class='cc notCount'>&nbsp;</td> # } else {"
                        + "# <td class='cc vsgDisabled' role='gridcell'>Default</td> # } #");
                    break;
            }
        }

        userSupportContents.defaultRowTemplate= defaultT.concat(defaultTB).concat(defaultTA).concat(defaultTC).join(" ");

        columns.push({headerTemplate: "<center>Restrictions</center>", columns: booleans, headerAttributes: {"class": "topHeader aa"}});
        columns.push({title: "Confirmation", columns: confirmation, headerAttributes: {"class": "topHeader aa"}});
        columns.push({title: "Count Per", columns: counts, headerAttributes: {"class": "topHeader cc"}});
        columns.push({title: "Amount Per", columns: amounts, headerAttributes: {"class": "topHeader bb"}});


        var data= <?php echo HCU_JsonEncode($readData); ?>;
        if (data.error.length > 0)
            $.homecuValidator.displayMessage(data.error, $.homecuValidator.settings.statusError );
        else
        {
            for(var i=0; i!= data.data.length; i++)
            {
                data.data[i].kendoIndex= i+1;
                data.data[i].checked= false;
                createSnapshot(data.data[i]);
            }
            userSupportContents.rightsData= new kendo.data.ObservableArray(data.data);

        }

        rightsGrid= $("#userRightsGrid").kendoGrid({
            dataSource: {
                transport: {
                    read: function(options) {
                        options.success(userSupportContents.rightsData);
                    },
                    create: function(options) {}, // Won't get here
                    update: function(options) {
                        updateGrid(options, this);
                    }
                },
                schema: {
                    model: {
                        id: "kendoIndex",
                        fields: fields
                    }
                },
                sort: [{field: "specialAddRow", dir: "asc"}, {field: "fdescription", dir: "asc"}, {field: "feature_code", dir: "asc"}],
                batch: true
            },
            columns: columns,
            noRecords: {
                template: "<tr><td colspan='3'>No Records Found</td></tr>"
            },
            editable: "incell",
            autoBind: true,
            scrollable: false,
            height: 400
        }).data("kendoGrid");

        $("#userRightsGrid:has(.k-grid-norecords) .k-grid-content").css({overflow: "hidden !important"});
        $("#userRightsGrid").addClass("hideBB hideCC");

        <?php // This is needed because the colgroups are needed to show/hide based on the radio button selection.  Otherwise, there are also alignment issues. ?>
        $("#userRightsGrid colgroup").each(function(i) {
            $(this).find("col").each(function(index) {
                if (index < 2)
                    ;
                else if (index < 7)
                    $(this).addClass("aa");
                else if (index < 11)
                    $(this).addClass("bb");
                else if (index < 14)
                    $(this).addClass("cc");
            });
        });

        $(".userRightsDiv").on("click", ".showGroupRightsBtn", function() {
            openGroupRights();
            return false;
        });

        $(".userRightsDiv").on("mouseup", ".cancelBtn", function() {
            potentiallyCancelChanges();
            return false;
        });

        $(".userRightsDiv").on("mouseup", ".updateBtn", function() {
            $("body").click();
            var data= rightsGrid.dataSource.data();
            var doUpdate= false;
            for(var i=0; i!= data.length; i++)
            {
                var item= data[i];
                if (item.checked)
                    item.dirty= true; <?php // Will need to manually set the dirty flag so it is picked in the model ?>
                if (item.dirty)
                    doUpdate= true;
            }
            doUpdate ? rightsGrid.dataSource.sync() : postPostPostPost();
            return false;
        });

        <?php printCheckboxEvents("#userRightsGrid", "", "", ".allCheckbox", ".rowCheckbox", "doDefaultRow"); ?>

        $("#userRightsGrid").on("click", ".checkboxTD", function(e) {
            if (e.target !== this)
                return;
            $(this).find("[type='checkbox']").click();
        });

        $("#userRightsGrid").on("click", ".crequired.showClickable", function(e) {
            $("#userRightsGrid .crequiredTD").each(function(ei) {
                var td= $(this).closest("td");
                var tr= $(td).closest("tr");
                var dirty= $(td).hasClass("k-dirty-cell");
                var dataItem= $("#userRightsGrid").data("kendoGrid").dataItem(tr);

                $(td).removeClass("crequiredTD");
                $(td).removeClass("k-edit-cell");
                $(tr).removeClass("k-grid-edit-row");
                $(td).html("<div class='crequired showClickable hcu-all-100'>" + (dataItem.bool_crequired ? "Yes" : "No") + "</div>");
                dirtify(dirty, td);
            });

            var isTrue= $(this).text().trim() == "Yes";
            var td= $(this).closest("td");
            var tr= $(td).closest("tr");
            $(td).html("<input class='crrr' type='checkbox' "+ (isTrue ? "checked" : "") + ">");
            $(td).addClass("crequiredTD");
            $(td).addClass("k-edit-cell");
            $(tr).addClass("k-grid-edit-row");
            return false;
        });

        $("#userRightsGrid").on("click", ".crequiredTD", function(e) {
            if ($(e.target).is("input"))
                return;
            var td= $(this).closest("td");
            var tr= $(td).closest("tr");
            var dirty= $(td).hasClass("k-dirty-cell");
            var dataItem= $("#userRightsGrid").data("kendoGrid").dataItem(tr);

            $(td).removeClass("crequiredTD");
            $(td).removeClass("k-edit-cell");
            $(tr).removeClass("k-grid-edit-row");
            $(td).html("<div class='crequired showClickable hcu-all-100'>" + (dataItem.bool_crequired ? "Yes" : "No") + "</div>");
            dirtify(dirty, td);
            return false;
        });

        $("#userRightsGrid").on("click", ".crrr", function(e) {
            var td= $(this).closest("td");
            var tr= $(td).closest("tr");
            var dataItem= $("#userRightsGrid").data("kendoGrid").dataItem(tr);
            dataItem.dirty= true;
            dataItem.bool_crequired= $(this).is(":checked");
            dirtify(dataItem.bool_crequired != dataItem.org_bool_crequired, td);
        });

        $("body").on("click.userSupportHubNamespace", function(e) {
            if ($(e.target).hasClass("crrr") || $(e.target).hasClass("crequiredTD") || $(e.target).hasClass("cancelBtn"))
                return;

            $("#userRightsGrid .crequiredTD").each(function(ei) {
                var td= $(this).closest("td");
                var tr= $(td).closest("tr");
                var dirty= $(td).hasClass("k-dirty-cell");
                var dataItem= $("#userRightsGrid").data("kendoGrid").dataItem(tr);

                $(td).removeClass("crequiredTD");
                $(td).removeClass("k-edit-cell");
                $(tr).removeClass("k-grid-edit-row");
                $(td).html("<div class='crequired showClickable hcu-all-100'>" + (dataItem.bool_crequired ? "Yes" : "No") + "</div>");
                dirtify(dirty, td);
            });
        });

        $("#userRightsGrid").on("click", ".restriction.allow", function() {
            var td= $(this).closest("td");
            var name= $(td).data("name");
            $(td).html("<center><div class='restriction ban hcu-all-100'><i class='fa fa-ban'></i></div></center>");
            var tr= $(td).closest("tr");
            var dataItem= rightsGrid.dataItem(tr);
            dataItem.dirty= true;
            dataItem[name]= false;
            dirtify(dataItem[name] != dataItem["org_"+name], td);
        });

        $("#userRightsGrid").on("click", ".restriction.ban", function() {
            var td= $(this).closest("td");
            var name= $(td).data("name");
            $(td).html("<center><div class='restriction allow hcu-all-100'><i class='fa fa-check'></i></div></center>");
            var tr= $(td).closest("tr");
            var dataItem= rightsGrid.dataItem(tr);
            dataItem.dirty= true;
            dataItem[name]= true;

            dirtify(dataItem[name] != dataItem["org_"+name], td);
        });

        $(".userRightsDiv").on("click", "[name='gridShowOption']", function() {
            radioClick($(this).val().trim());
        });

        <?php printExtendShowOverflown(); ?>

        var toolTipProps= homecuTooltip.defaults;
        toolTipProps.filter= ".showEllipsis:overflown";
        toolTipProps.content= function(e) {
            return $(e.target).text().trim();
        };

        $("#userRightsGrid").kendoTooltip(toolTipProps);

        $("#userRightsGrid").kendoTooltip(toolTipProps);

        toolTipProps= homecuTooltip.defaults;
        toolTipProps.filter= ".aa:has(.vsgDisabled)";
        toolTipProps.content= "Set at the group or profile level.";

        $("#userRightsGrid").kendoTooltip(toolTipProps);

        toolTipProps= homecuTooltip.defaults;
        toolTipProps.filter= "td.vsgDisabled";
        toolTipProps.content= "Set to Default.";

        $("#userRightsGrid").kendoTooltip(toolTipProps);

        toolTipProps= homecuTooltip.defaults;
        toolTipProps.filter= "td:has(.notAmount)";
        toolTipProps.content= "Feature doesn't have amounts.";

        $("#userRightsGrid").kendoTooltip(toolTipProps);

        toolTipProps= homecuTooltip.defaults;
        toolTipProps.filter= "td:has(.notCount)";
        toolTipProps.content= "Feature doesn't have counts.";

        $("#userRightsGrid").kendoTooltip(toolTipProps);

        toolTipProps= homecuTooltip.defaults;
        toolTipProps.filter= "td:has(.accessOnly)";
        toolTipProps.content= "Feature is access only.";

        $("#userRightsGrid").kendoTooltip(toolTipProps);

    }

    function doDefaultRow (checked, checkboxInput)
    {
        var savedRows= $("#userRightsGrid").data("savedRows");
        savedRows= savedRows == null ? {} : savedRows;
        var tr= $(checkboxInput).closest("tr");
        var rightsGrid= $("#userRightsGrid").data("kendoGrid");

        if (checked)
        {
            savedRows[$(tr).index()]= $(tr).html();
            $("#userRightsGrid").data("savedRows", savedRows);
            var template= kendo.template(userSupportContents.defaultRowTemplate);
            $(tr).removeClass("k-grid-edit-row");
            $(tr).html(template(rightsGrid.dataItem($(tr))));
        }
        else
        {
            var row= savedRows[$(tr).index()];
            if (row != null)
            {
                $(tr).addClass("k-grid-edit-row");
                $(tr).html(row);
            }

        }
    }

    <?php
    /**
     * function postPostPostPost()
     * This obviously happens after everything else.
     */
    ?>
    function postPostPostPost()
    {
        $("#externalTabWindow").data("isClosing", true);
        $("#externalTabWindow").data("kendoWindow").close();
        $("#externalTabWindow").data("isClosing", false);
    }

    <?php
    /**
     * function userSupportDoOnClose()
     * Whew! I saved a couple of lines.  No, this is needed as it is the hook function from the userSupportHead script.
     */
    ?>
    function userSupportDoOnClose()
    {
      potentiallyCancelChanges();
      $("#externalTabWindow").data("shouldClose", false);
    }

    <?php
    /**
     * function potentiallyCancelChanges()
     * This displays the discard changes dialog on close if there are changes made.
     */
    ?>
    function potentiallyCancelChanges()
    {
        if ($("#userRightsGrid .k-dirty-cell .k-dirty").length == 0 && $("#userRightsGrid .checkboxTD [type='checkbox']:checked").length == 0)
            postPostPostPost();
        else
        {
            var discardChangesDialog= $("#discardChangesDialog").data("kendoDialog");
            if (discardChangesDialog == null)
            {
              discardChangesDialog= $("<div id='discardChangesDialog'></div>").appendTo("body").kendoDialog({
                title: "Discard Changes",
                content: "<p>Changes have been made to this user's rights.</p><p>Do you wish to discard your changes?</p>",
                actions: [
                  {text: "No"},
                  {text: "Yes", primary: true, action: function() {
                    postPostPostPost();
                  }}
                ],
                visible: false,
                open: function() {
                  if (window.activeWindows != null)
                    window.activeWindows.push(this);
                },
                close: function() {
                  if (window.activeWindows != null)
                    window.activeWindows.pop();
                }
              }).data("kendoDialog");
            }
            discardChangesDialog.open();
        }
    }

    <?php // Ready is not needed since document is already initiated. ?>
    init();
    </script>

    <script type="text/x-kendo-template" id="groupRightsWindowTemplate">
        <div class="hcu-template container hcu-all-100 hcu-no-padding">
            <div id="groupRightsGrid" class="hcu-all-100"></div>
            <div class="hcu-edit-buttons k-state-default row hcu-all-100">
                <div class="col-xs-12">
                    <a class="closeBtn k-button k-primary" href="\\#"><i class="fa fa-times"></i>Close</a>
                </div>
            </div>
        </div>
    </script>

    <script type="text/x-kendo-template" id="groupRightsCellTemplate">
        # var fullDescription= [];
            for (var i=0; i!= userSupportContents.labels.length; i++)
            {
                var item= userSupportContents.labels[i];
                var code= item.code == "bool_crequired" ? "bool_max_cr" : "max_"+item.code;
                var value= data[code];
                if (value != null && (value+"").trim() != "")
                {
                    var fullValue= item.description + ": ";
                    switch(item.type)
                    {
                        case "amount":
                            fullValue+= kendo.toString(value, "c2");
                            break;
                        case "count":
                            fullValue+= kendo.toString(value, "n0");
                            break;
                        case "boolean":
                            fullValue+= value == "Y" ? "true" : "false";
                            break;
                    }
                    fullDescription.push(fullValue);
                }
            } #
        #= fullDescription.join(", <br>") #
    </script>
    <script type="text/x-kendo-template" id="defaultRowTemplate">

    </script>

    <div class="container-fluid userRightsDiv hcu-template vsgPrimary" id="userRightsDiv">
        <div class="row">
            <div id="formValidateDiv" class="col-xs-12 k-block k-error-colored formValidateDiv" style="display:none;"></div>
        </div>
        <div class="well well-sm">
            <div class="row hcuSpacer">
                <div class="col-xs-12">
                    <div class="floatRight">
                        <a href="#" class="showGroupRightsBtn">Show Group Rights</a>
                    </div>
                </div>
            </div>
            <div class="row">
                <div>
                    <div class="radio-inline radio-spacer"><label><input type="radio" name="gridShowOption" value="boolean" checked>&nbsp; Restrictions</label></div>
                    <div class="radio-inline radio-spacer"><label><input type="radio" name="gridShowOption" value="count">&nbsp; Quantity</label></div>
                    <div class="radio-inline radio-spacer"><label><input type="radio" name="gridShowOption" value="amount">&nbsp; Amount</label></div>
                    <div class="radio-inline radio-spacer"><label><input type="radio" name="gridShowOption" value="all">&nbsp; All</label></div>
                </div>
            </div>
        </div>
        <div class="row">&nbsp;</div>
        <div class="row">
            <div class="col-xs-12 hcu-secondary">
                <div class="small vsgSecondary">Click on field to edit</div>
            </div>
        </div>
        <div class="row">
            <div class="col-xs-12">
                <div id="userRightsGrid"></div>
            </div>
        </div>
        <div class="hcu-edit-buttons k-state-default">
            <a class="cancelBtn" href="#">Cancel</a>
            &nbsp;&nbsp;&nbsp;
            <a class="updateBtn k-button k-primary" href="#"><i class="fa fa-check"></i>Update</a>
        </div>
    </div>
<?php }