Question about admin rights

[RepoMonkey]

Hi guys
Hoping someone can answer this question. I'm considering buying easyPHPcalendar, but I need an answer to a simple question.

The client we're working for needs to have an admin user who has complete access to the calendar and various other users who can add events. Easy enough so far - however - the admin needs to know that any events he or she adds cannot be modified by the other users with lower priviledges. Does anyone know if this is possible with this software?

Many thanks in advance

[Brian]

Version 6 doesn't have this ability... This is being designed into Version 7. (No release information is available but it's expected in the next few months.)

[Lance Monotone]

How about this, then...

Is there a way to show only a selected category upon logging into the event manager? E.g., User X logs in and can only see Category Y events.

This capability is built into the calendar, as in {$showCat="6|";}, can it be set somewhere within headerCustom.inc? What is headerCustom.inc for?

[Brian]

What is headerCustom.inc for?

http://docs.easyphpcalendar.com/sour...omizations.htm


You may be able to do that in the custom header. You can force the category upon login.

[Lance Monotone]

Hi Brian,

Thanks for your reply.

So, how do you force the category on log in? I've spent the last two days trying to figure out if something like this is possible. It seems like it might be very easy to do, but all the code is encrypted and I wouldn't even know where to begin. What are the properties/methods of the event mangager? The one-line entry in the docs about headerCustom.inc is honestly not very helpful.

I understand that the next version will have true multi-user capability, but until then, the ability to match category to user in the event manager upon login would be a pretty good workaround. Maybe you could include it in the FAQs. I see a lot of people asking about it here.

Otherwise, this is a fantastic piece of software. It's very easy to install and configure and I love that you guys are so active on the forums. Every other question I've had I've been able to answer quickly.

[Brian]

Version 6 just wasn't designed to be used in a multi-user environment like this. That's why Version 7 is being developed (and the multi-user part is working as we speak... type. ). But there's lots more to be done before it can be released.

You could use the custom header file and $showCat to only show a particular category, but the user will be able to post to any of them.

[Lance Monotone]

Sorry to be dense and I know this version of the software isn't meant for this type of usage, but could you give me an example of the code I'd need to insert into headerCustom.inc?

PHP Code:

if($user=="John"){
  $showCat = "6|";
} 


(a switch statement would be better, I know.)

Might it be as simple as that (except that I don't know what the $user variable is actually named)?

There's not so much a concern of misposting, at least in our case. I'm planning on putting an aggregated calendar on one page where all the users can view all the entries. If one is in the wrong category it will be simple for the user who 'owns' that category to log in and correct it.

This would make me look really good. : )

[Brian]

I'm not at my production computer today... If I haven't replied with the variable by the end of the day, please remind me tomorrow to find this for you.

[Lance Monotone]

Hi Brian,

Happy Fifth! Here is the reminder you requested. Thanks so much.

[Brian]

Thanks for the reminder...

$_SESSION['user'] hold the user name of the logged in person.

[Lance Monotone]

Hi Brian,

Thanks! That pretty much works like I'd hoped, and it was easy to implement:

PHP Code:

if(isset($_SESSION['user'])) {
    $userName = $_SESSION['user'];
    switch($userName){
        case "User1":
            $_SESSION['showCat'] = "a|1";
            break;
        case "User2":
            $_SESSION['showCat'] = "a|2";
            break;
        case "User3":
            $_SESSION['showCat'] = "a|3";
            break;
        default: //This would be the Admin account
            $_SESSION['showCat'] = "1|2|3|6|";
    }
} 


The user, once logged in, initially is only able to see his/her events in the Event Manager, which is nice, as it cuts down clutter.

However, if the filter function is utilized, the user is then able to view all categories again, even with showCat hard-coded. Don't suppose there's a fix for that, such as disabling the filter function?

Also, what is $_SESSION['dataMode'] and its possible values?

Thanks again, this is really helpful!

[Brian]

However, if the filter function is utilized, the user is then able to view all categories again, even with showCat hard-coded. Don't suppose there's a fix for that, such as disabling the filter function?

There isn't a mechanism built-in to disable the filter. You may can override the filter variable too, but I'm not able to confirm that right now.

Also, what is $_SESSION['dataMode'] and its possible values?

It can be f or s... f = flat-file / s = mySQL.

[Lance Monotone]

dataMode...Oh.

I've got the Event Manager performing pretty well and my client is happy with the current state until the next version comes out.

But...if you wouldn't mind telling me the name of the filter variable, maybe I can secure the EV a little more, and then I won't ever bother you again (probably)!

What you've already provided has been great. Thanks a million!

[Brian]

In the standard filter, it is showCat. The advanced filter is a little more complicated and each setup would be different. You can view the source of the advanced filter page to see the input variables.

You may be able to unset those variables so their selections doesn't matter...

unset ($epcSel,$epcCat);