PHP getDenyRead函数代码示例

		</tr>
		<tr>
			<td <?php 
echo $style;
?>
 align="center">
			<div id="idToolbarContainer">
			<div id="idToolbarSlider"<?php 
echo $top;
?>
>
				<table id="idToolbarTray" border="0" cellpadding="2" cellspacing="2" width="100%">
				<?php 
foreach ($nav as $module) {
    $dir = $module['mod_directory'];
    if (!getDenyRead($dir)) {
        $icon = $module['mod_ui_icon'];
        $name = $AppUI->_($module['mod_ui_name']);
        $sel = '';
        if ($m == $dir) {
            define('DP_CURRENT_MODULE_ICON', $icon);
            $name = '<b>' . $name . '</b>';
            $sel = ' id="idSelected"';
        }
        ?>
					<tr<?php 
        echo $sel;
        ?>
 onclick="go('index.php?m=<?php 
        echo $dir;
        ?>

}
// retrieve any state parameters
if (isset($_GET['tab'])) {
    $AppUI->setState('TaskLogVwTab', $_GET['tab']);
}
$tab = $AppUI->getState('TaskLogVwTab') !== NULL ? $AppUI->getState('TaskLogVwTab') : 0;
// get the prefered date format
$df = $AppUI->getPref('SHDATEFORMAT');
//Also view the time
$df .= " " . $AppUI->getPref('TIMEFORMAT');
$start_date = intval($obj->task_start_date) ? new CDate($obj->task_start_date) : null;
$end_date = intval($obj->task_end_date) ? new CDate($obj->task_end_date) : null;
$start_date_ir = intval($obj->task_start_date_ir) ? new CDate($obj->task_start_date_ir) : null;
$end_date_ir = intval($obj->task_end_date_ir) ? new CDate($obj->task_end_date_ir) : null;
//check permissions for the associated project
$canReadProject = !getDenyRead('projects', $obj->task_project);
// get the users on this task
$q->addTable('users', 'u');
$q->addTable('user_tasks', 't');
$q->leftJoin('contacts', 'c', 'user_contact = contact_id');
$q->addQuery('u.user_id, u.user_username, contact_email');
$q->addWhere('t.task_id = ' . $task_id);
$q->addWhere('t.user_id = u.user_id');
$q->addOrder('u.user_username');
$sql = $q->prepare();
$q->clear();
$users = db_loadList($sql);
$durnTypes = dPgetSysVal('TaskDurationType');
// setup the title block
$titleBlock = new CTitleBlock('View Task', 'applet-48.png', $m, "{$m}.{$a}");
$titleBlock->addCell();

//grab hours per day from config
$min_hours_day = $AppUI->cfg['daily_working_hours'];
$can_edit_other_timesheets = $TIMECARD_CONFIG['minimum_edit_level'] >= $AppUI->user_type;
$show_other_worksheets = $TIMECARD_CONFIG['minimum_see_level'] >= $AppUI->user_type;
$show_possible_hours_worked = $TIMECARD_CONFIG['show_possible_hours_worked'];
//print "<pre>";
//print_r($AppUI);
//print "</pre>";
//compute hours/week from config
$min_hours_week = count(explode(",", dPgetConfig("cal_working_days"))) * $min_hours_day;
// get date format
$df = $AppUI->getPref('SHDATEFORMAT');
if (isset($_GET['user_id'])) {
    $sql = "SELECT user_company FROM users WHERE user_id = " . $_GET['user_id'];
    $company_id = db_loadResult($sql);
    if (getDenyRead("companies", $company_id)) {
        $AppUI->setMsg('Access denied', UI_MSG_ERROR);
        $AppUI->redirect();
    }
    $AppUI->setState('TimecardSelectedUser', $_GET['user_id']);
}
$user_id = $AppUI->getState('TimecardSelectedUser') ? $AppUI->getState('TimecardSelectedUser') : $AppUI->user_id;
$AppUI->savePlace();
if (isset($_GET['start_date'])) {
    $AppUI->setState('TimecardStartDate', $_GET['start_date']);
}
$start_day = new CDate($AppUI->getState('TimecardStartDate') ? $AppUI->getState('TimecardStartDate') : NULL);
//set the time to noon to combat a php date() function bug that was adding an hour.
$date = $start_day->format('%Y-%m-%d') . ' 12:00:00';
$start_day->setDate($date, DATE_FORMAT_ISO);
$today_weekday = $start_day->getDayOfWeek();

<?php

/* HELPDESK $Id: index.php,v 1.30 2005/11/10 22:03:20 pedroix Exp $ */
// check permissions for this module
$canReadModule = !getDenyRead($m);
if (!$canReadModule) {
    $AppUI->redirect("m=public&a=access_denied");
}
$AppUI->savePlace();
if (isset($_GET['tab'])) {
    $AppUI->setState('HelpDeskIdxTab', $_GET['tab']);
}
$tab = $AppUI->getState('HelpDeskIdxTab') !== NULL ? $AppUI->getState('HelpDeskIdxTab') : 0;
// Setup the title block
$titleBlock = new CTitleBlock('Help Desk', 'helpdesk.png', $m, 'ID_HELP_HELPDESK_IDX');
if ($canEdit) {
    $titleBlock->addCell('<input type="submit" class="button" value="' . $AppUI->_('new item') . '" />', '', '<form action="?m=helpdesk&a=addedit" method="post">', '</form>');
}
$titleBlock->addCrumb("?m=helpdesk", 'home');
$titleBlock->addCrumb("?m=helpdesk&a=list", 'list');
$titleBlock->addCrumb("?m=helpdesk&a=reports", 'reports');
$titleBlock->show();
$item_perms = getItemPerms();
$sql = "SELECT COUNT(item_id)\n        FROM helpdesk_items\n        WHERE {$item_perms}";
$numtotal = db_loadResult($sql);
/*
 * Unassigned = 0
 * Open = 1
 * Closed = 2
 * On hold = 3
 * Delete = 4

<?php

// check access to files module
if (!defined('DP_BASE_DIR')) {
    die('You should not access this file directly');
}
global $AppUI, $m, $obj, $task_id;
if (!getDenyRead('links')) {
    if (!getDenyEdit('links')) {
        echo '<a href="./index.php?m=links&a=addedit&project_id=' . $obj->task_project . '&link_task=' . $task_id . '">' . $AppUI->_('Attach a link') . '</a>';
    }
    echo dPshowImage(dPfindImage('stock_attach-16.png', $m), 16, 16, '');
    $showProject = false;
    $project_id = $obj->task_project;
    include DP_BASE_DIR . '/modules/links/index_table.php';
}

$obj = new CCompany();
$companies = $obj->getAllowedRecords($AppUI->user_id, 'company_id,company_name', 'company_name');
$filters2 = arrayMerge(array('all' => $AppUI->_('All Companies', UI_OUTPUT_RAW)), $companies);
// setup the title block
$titleBlock = new CTitleBlock('Tasks', 'applet-48.png', $m, "{$m}.{$a}");
// patch 2.12.04 text to search entry box
if (isset($_POST['searchtext'])) {
    $AppUI->setState('searchtext', $_POST['searchtext']);
}
$search_text = $AppUI->getState('searchtext') ? $AppUI->getState('searchtext') : '';
$search_text = dPformSafe($search_text, true);
$titleBlock->addCell('     ' . $AppUI->_('Search') . ':');
$titleBlock->addCell('<input type="text" class="text" SIZE="20" name="searchtext" onChange="document.searchfilter.submit();" value=' . "'{$search_text}'" . 'title="' . $AppUI->_('Search in name and description fields') . '"/>
       	<!--<input type="submit" class="button" value=">" title="' . $AppUI->_('Search in name and description fields') . '"/>-->', '', '<form action="?m=tasks" method="post" id="searchfilter">', '</form>');
// Let's see if this user has admin privileges
if (!getDenyRead("admin")) {
    $titleBlock->addCell();
    $titleBlock->addCell($AppUI->_("User") . ":");
    $user_list = $perms->getPermittedUsers('tasks');
    $titleBlock->addCell(arraySelect($user_list, "user_id", "size='1' class='text' onChange='document.userIdForm.submit();'", $user_id, false), "", "<form action='?m=tasks' method='post' name='userIdForm'>", "</form>");
}
$titleBlock->addCell();
$titleBlock->addCell($AppUI->_('Company') . ':');
$titleBlock->addCell(arraySelect($filters2, 'f2', 'size=1 class=text onChange="document.companyFilter.submit();"', $f2, false), '', '<form action="?m=tasks" method="post" name="companyFilter">', '</form>');
$titleBlock->addCell();
if ($canEdit && $project_id) {
    $titleBlock->addCell('<input type="submit" class="button" value="' . $AppUI->_('new task') . '">', '', '<form action="?m=tasks&a=addedit&task_project=' . $project_id . '" method="post">', '</form>');
}
$titleBlock->show();
if (dPgetParam($_GET, 'inactive', '') == 'toggle') {
    $AppUI->setState('inactive', $AppUI->getState('inactive') == -1 ? 0 : -1);

 public function canAccess($user_id)
 {
     $q = new DBQuery();
     // Let's see if this user has admin privileges
     if (!getDenyRead('admin')) {
         return true;
     }
     switch ($this->task_access) {
         case self::ACCESS_PUBLIC:
             $retval = true;
             break;
         case self::ACCESS_PROTECTED:
             $q->addTable('users');
             $q->addQuery('user_company');
             $q->addWhere('user_id=' . (int) $user_id . ' OR user_id=' . (int) $this->task_owner);
             $user_owner_companies = $q->loadColumn();
             $q->clear();
             $company_match = true;
             foreach ($user_owner_companies as $current_company) {
                 $company_match = $company_match && (!isset($last_company) || $last_company == $current_company);
                 $last_company = $current_company;
             }
         case self::ACCESS_PARTICIPANT:
             $company_match = isset($company_match) ? $company_match : true;
             $q->addTable('user_tasks');
             $q->addQuery('COUNT(task_id)');
             $q->addWhere('user_id=' . (int) $user_id . ' AND task_id=' . (int) $this->task_id);
             $count = $q->loadResult();
             $q->clear();
             $retval = $company_match && $count > 0 || $this->task_owner == $user_id;
             break;
         case self::ACCESS_PRIVATE:
             $retval = $this->task_owner == $user_id;
             break;
         default:
             $retval = false;
             break;
     }
     return $retval;
 }

<?php

/* $Id: viewer.php,v 1.25.6.4 2007/03/28 15:00:52 cyberhorse Exp $ */
if (!defined('DP_BASE_DIR')) {
    die('You should not access this file directly.');
}
//view posts
$forum_id = isset($_GET["forum_id"]) ? (int) $_GET["forum_id"] : 0;
$message_id = isset($_GET["message_id"]) ? (int) $_GET["message_id"] : 0;
$post_message = isset($_GET["post_message"]) ? $_GET["post_message"] : 0;
$f = dpGetParam($_POST, 'f', 0);
// check permissions
$canRead = !getDenyRead($m, $forum_id);
$canEdit = !getDenyEdit($m, $forum_id);
if (!$canRead || $post_message & !$canEdit) {
    $AppUI->redirect("m=public&a=access_denied");
}
$df = $AppUI->getPref('SHDATEFORMAT');
$tf = $AppUI->getPref('TIMEFORMAT');
$q = new DBQuery();
$q->addTable('forums');
$q->addTable('projects', 'p');
$q->addTable('users', 'u');
$q->addQuery('forum_id, forum_project,	forum_description, forum_owner, forum_name,
	forum_create_date, forum_last_date, forum_message_count, forum_moderated,
	user_username, contact_first_name, contact_last_name,
	project_name, project_color_identifier');
$q->addJoin('contacts', 'con', 'contact_id = user_contact');
$q->addWhere("user_id = forum_owner");
$q->addWhere("forum_id = {$forum_id}");
$q->addWhere("forum_project = project_id");

    die('You should not access this file directly.');
}
// load the companies class
require_once $AppUI->getModuleClass('companies');
if (isset($_POST['company_id'])) {
    $AppUI->setState('DeptIdxCompany', intval($_POST['company_id']));
}
$company = $company_id = $AppUI->getState('DeptIdxCompany') !== NULL ? $AppUI->getState('DeptIdxCompany') : $AppUI->user_company;
$company_prefix = 'company_';
if (isset($_POST['department'])) {
    $AppUI->setState('DeptIdxDepartment', $_POST['department']);
    //if department is set, ignore the company_id field
    unset($company_id);
}
$department = $AppUI->getState('DeptIdxDepartment') !== NULL ? $AppUI->getState('DeptIdxDepartment') : ($AppUI->user_department > 0 ? $AppUI->user_department : $company_prefix . $AppUI->user_company);
$canRead = !getDenyRead($m, $department);
if (!$canRead) {
    $AppUI->redirect('m=public&a=access_denied');
}
$AppUI->savePlace();
//if $department contains the $company_prefix string that it's requesting a company and not a department.  So, clear the
// $department variable, and populate the $company_id variable.
if (!(strpos($department, $company_prefix) === false)) {
    $company_id = substr($department, strlen($company_prefix));
    $AppUI->setState('DeptIdxCompany', $company_id);
    unset($department);
}
$obj = new CCompany();
$q = new DBQuery();
$q->addTable('companies');
$q->addQuery('company_id, company_name');

function get_actual_end_date_pd($task_id, $task)
{
    global $AppUI;
    $q = new DBQuery();
    $mods = $AppUI->getActiveModules();
    if (!empty($mods['history']) && !getDenyRead('history')) {
        $q->addQuery('MAX(history_date) as actual_end_date');
        $q->addTable('history');
        $q->addWhere('history_table=\'tasks\' AND history_item=' . $task_id);
    } else {
        $q->addQuery('MAX(task_log_date) AS actual_end_date');
        $q->addTable('task_log');
        $q->addWhere('task_log_task = ' . $task_id);
    }
    $task_log_end_date = $q->loadResult();
    $edate = $task_log_end_date;
    $edate = $edate > $task->task_end_date || $task->task_percent_complete == 100 ? $edate : $task->task_end_date;
    return $edate;
}

<tr>
	<td valign="top">
<?php 
if (!$dialog) {
    // left side navigation menu
    ?>
		<table cellspacing=0 cellpadding=2 border=0 height="600">
		<tr>
			<td><img src="images/shim.gif" width="70" height="3"></td>
			<td rowspan="100"><img src="images/shim.gif" width="10" height="100"></td>
		</tr>
	<?php 
    $nav = $AppUI->getMenuModules();
    $s = '';
    foreach ($nav as $module) {
        if (!getDenyRead($module['mod_directory'])) {
            $s .= '<tr><td align="center" valign="middle" class="nav">' . '<table cellspacing=0 cellpadding=0 border=0><tr><td class="clsBtnOff">' . '<a href="?m=' . $module['mod_directory'] . '">' . '<img src="' . dPfindImage($module['mod_ui_icon'], $module['mod_directory']) . '" alt="" border="0" width="30" height="30"></a></td></tr></table>' . $AppUI->_($module['mod_ui_name']) . "</td></tr>\n";
        }
    }
    echo $s;
    ?>
		<tr height="100%">
			<td>&nbsp;<img src="images/shim.gif" width="7" height="10"></td>
		</tr>
		</table>	
<?php 
}
// END DIALOG
?>
	</td>
<td valign="top" align="left" width="100%">

<?php

if (!defined('DP_BASE_DIR')) {
    die('You should not access this file directly.');
}
// Add / Edit contact
$risk_id = dPgetParam($_GET, 'risk_id', 0);
// check permissions
$denyView = getDenyRead($m, $risk_id);
if ($denyView) {
    $AppUI->redirect("m=help&a=access_denied");
}
$riskProbability = dPgetSysVal('RiskProbability');
$riskStatus = dPgetSysVal('RiskStatus');
$riskImpact = dPgetSysVal('RiskImpact');
$riskDuration = array(1 => 'Hours', 24 => 'Days', 168 => 'Weeks');
$q = new DBQuery();
$q->addQuery('user_id');
$q->addQuery('CONCAT( contact_first_name, \' \', contact_last_name)');
$q->addTable('users');
$q->leftJoin('contacts', 'c', 'user_contact = contact_id');
$q->addOrder('contact_first_name, contact_last_name');
$users = $q->loadHashList();
//$users = db_loadHashList( $sql );
$q->clear();
$q->addQuery('project_id, project_name');
$q->addTable('projects');
$projects = $q->loadHashList();
$projects[0] = '';
//Pull contact information
$q->clear();

 function canAccess($user_id)
 {
     //echo intval($this->task_access);
     // Let's see if this user has admin privileges
     if (!getDenyRead("admin")) {
         return true;
     }
     switch ($this->task_access) {
         case 0:
             // public
             return true;
             break;
         case 1:
             // protected
             $sql = "SELECT user_company FROM users WHERE user_id={$user_id}";
             $user_company = db_loadResult($sql);
             $sql = "SELECT user_company FROM users WHERE user_id={$this->task_owner}";
             $owner_company = db_loadResult($sql);
             //echo "$user_company,$owner_company";die;
             $sql = "SELECT COUNT(*) FROM user_tasks WHERE user_id={$user_id} AND task_id={$this->task_id}";
             $count = db_loadResult($sql);
             return $owner_company == $user_company && $count > 0 || $this->task_owner == $user_id;
             break;
         case 2:
             // participant
             $sql = "SELECT COUNT(*) FROM user_tasks WHERE user_id={$user_id} AND task_id={$this->task_id}";
             $count = db_loadResult($sql);
             return $count > 0 || $this->task_owner == $user_id;
             break;
         case 3:
             // private
             return $this->task_owner == $user_id;
             break;
     }
 }

 function canAccess($user_id)
 {
     $q =& new DBQuery();
     // Let's see if this user has admin privileges
     if (!getDenyRead('admin')) {
         return true;
     }
     switch ($this->task_access) {
         case 0:
             // public
             $retval = true;
             break;
         case 1:
             // protected
             $q->addTable('users');
             $q->addQuery('user_company');
             $q->addWhere('user_id=' . $user_id . ' OR user_id=' . $this->task_owner);
             $sql = $q->prepare();
             $q->clear();
             $user_owner_companies = db_loadColumn($sql);
             $company_match = true;
             foreach ($user_owner_companies as $current_company) {
                 $company_match = $company_match && (!isset($last_company) || $last_company == $current_company);
                 $last_company = $current_company;
             }
         case 2:
             // participant
             $company_match = isset($company_match) ? $company_match : true;
             $q->addTable('user_tasks');
             $q->addQuery('COUNT(*)');
             $q->addWhere('user_id=' . $user_id . ' AND task_id=' . $this->task_id);
             $sql = $q->prepare();
             $q->clear();
             $count = db_loadResult($sql);
             $retval = $company_match && $count > 0 || $this->task_owner == $user_id;
             break;
         case 3:
             // private
             $retval = $this->task_owner == $user_id;
             break;
         default:
             $retval = false;
             break;
     }
     return $retval;
 }

 /**
 * The constructor
 *
 * Assigns the title, icon, module and help reference.  If the user does not
 * have permission to view the help module, then the context help icon is
 * not displayed.
 */
 function CTitleBlock_core($title, $icon = '', $module = '', $helpref = '')
 {
     $this->title = $title;
     $this->icon = $icon;
     $this->module = $module;
     $this->helpref = $helpref;
     $this->cells1 = array();
     $this->cells2 = array();
     $this->crumbs = array();
     $this->showhelp = !getDenyRead('help');
 }