X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;f=includes%2Faccess_levels.inc;h=62a71cb61d4f334cefe22364f91cc618b936331a;hb=268a54dcfd08aff7113bc3afe8b784f36db2d0d4;hp=c7442ab4dd51715987597a566bd43669c5ed91d3;hpb=117a47981e773ef0ac7aafaf5984978c59c6947a;p=fa-stable.git diff --git a/includes/access_levels.inc b/includes/access_levels.inc index c7442ab4..62a71cb6 100644 --- a/includes/access_levels.inc +++ b/includes/access_levels.inc @@ -10,15 +10,19 @@ See the License here . ***********************************************************************/ /* - Security sections groups various areas on both functionality and privilige levels. - Often analyti inquires are available only for management, and configuration + Security sections groups various areas on both functionality and privilege levels. + Often analytic inquires are available only for management, and configuration for administration or management staff. This is why we have those three - sections related to near every FA module. - - Every security section can contain up to 256 different areas. + section type inside near every FA module. + Section codes 0-99 are reserved for core FA functionalities. - External modules can extend security roles system by adding rows to security sections and - security areas using section code >=100. + Every security section can contain up to 256 different areas. + External modules can extend security roles system by adding rows to + $security_sections and $security_areas using section codes >=100. + Security areas and sections created by extension modules/plugins + have dynamically assigned 3-byte integer codes. The highest byte is zero + for sections/areas defined in this file, and extid+1 for those defined + by extensions */ define('SS_SADMIN', 1<<8); // site admin define('SS_SETUP', 2<<8); // company level setup @@ -36,6 +40,10 @@ define('SS_ITEMS_C',31<<8); define('SS_ITEMS', 32<<8); define('SS_ITEMS_A',33<<8); +define('SS_ASSETS_C',36<<8); +define('SS_ASSETS', 37<<8); +define('SS_ASSETS_A',38<<8); + define('SS_MANUF_C',41<<8); define('SS_MANUF', 42<<8); define('SS_MANUF_A',43<<8); @@ -49,36 +57,41 @@ define('SS_GL', 62<<8); define('SS_GL_A', 63<<8); $security_sections = array( - SS_SADMIN => _("System administration"), - SS_SETUP => _("Company setup"), - SS_SPEC => _("Special maintenance"), - SS_SALES_C => _("Sales configuration"), - SS_SALES => _("Sales transactions"), - SS_SALES_A => _("Sales analytics"), - SS_PURCH_C => _("Purchase configuration"), - SS_PURCH => _("Purchase transactions"), - SS_PURCH_A => _("Purchase analytics"), - SS_ITEMS_C => _("Inventory configuration"), - SS_ITEMS => _("Inventory operations"), - SS_ITEMS_A => _("Inventory analytics"), - SS_MANUF_C => _("Manufacturing configuration"), - SS_MANUF => _("Manufacturing transations"), - SS_MANUF_A => _("Manufacturing analytics"), - SS_DIM => _("Dimensions"), - SS_GL_C => _("Banking & GL configuration"), - SS_GL => _("Banking & GL transactions"), - SS_GL_A => _("Banking & GL analytics") + SS_SADMIN => _("System administration"), + SS_SETUP => _("Company setup"), + SS_SPEC => _("Special maintenance"), + SS_SALES_C => _("Sales configuration"), + SS_SALES => _("Sales transactions"), + SS_SALES_A => _("Sales related reports"), + SS_PURCH_C => _("Purchase configuration"), + SS_PURCH => _("Purchase transactions"), + SS_PURCH_A => _("Purchase analytics"), + SS_ITEMS_C => _("Inventory configuration"), + SS_ITEMS => _("Inventory operations"), + SS_ITEMS_A => _("Inventory analytics"), + SS_ASSETS_C => _("Fixed Assets configuration"), + SS_ASSETS => _("Fixed Assets operations"), + SS_ASSETS_A => _("Fixed Assets analytics"), + SS_MANUF_C => _("Manufacturing configuration"), + SS_MANUF => _("Manufacturing transactions"), + SS_MANUF_A => _("Manufacturing analytics"), + SS_DIM_C => _("Dimensions configuration"), + SS_DIM => _("Dimensions"), + SS_GL_C => _("Banking & GL configuration"), + SS_GL => _("Banking & GL transactions"), + SS_GL_A => _("Banking & GL analytics") ); /* This table stores security areas available in FA. Key is area identifier used to check user rights, values are - code stored for each role in security_roles table and description used + codes stored for each role in security_roles table and description used in roles editor. Set of allowed access areas codes is retrieved during user login from - security_roles table, and stored in user profile for direct during the session. + security_roles table, and cached in user profile. + Special value 'SA_OPEN' is used for publicly available pages like login/logout. */ $security_areas =array( // @@ -91,63 +104,78 @@ $security_areas =array( // // Company setup // - 'SA_CRSTATUS' => array(SS_SETUP|1, _("Credit status definitions changes")), - 'SA_INVENTORYLOCATION' => array(SS_SETUP|2, _("Inventory locations changes")), - 'SA_INVENTORYMOVETYPE' => array(SS_SETUP|3, _("Inventory movement types")), - 'SA_WORKCENTRE' => array(SS_SETUP|4, _("Manufacture work centres ")), - 'SA_SETUPCOMPANY' => array(SS_SETUP|5, _("Company parameters")), - 'SA_SETUPUSER' => array(SS_SETUP|6, _("Users setup")), - 'SA_SETUPFORM' => array(SS_SETUP|7, _("Forms setup")), - 'SA_PRINTPROFILE' => array(SS_SETUP|8, _("Print profiles")), - 'SA_PAYMENTTERM' => array(SS_SETUP|9, _("Payment terms")), - 'SA_SHIPPING' => array(SS_SETUP|10, _("Shipping ways")), - 'SA_SETUPPOS' => array(SS_SETUP|11, _("Point of sales definitions")), - 'SA_SETUPPRINTER' => array(SS_SETUP|12, _("Printers configuration")), - -// special and common functions - 'SA_VIEWPRINTTRANSACTION' => array(SS_SPEC|1, _("Common view/print transactions interface")), - 'SA_ATTACHDOCUMENT' => array(SS_SPEC|2, _("Attaching documents")), - 'SA_VOIDTRANSACTION' => array(SS_SPEC|3, _("Voiding transactions")), - 'SA_BACKUP' => array(SS_SPEC|4, _("Database backup/restore")), - + 'SA_SETUPCOMPANY' => array(SS_SETUP|1, _("Company parameters")), + 'SA_SECROLES' => array(SS_SETUP|2, _("Access levels edition")), + 'SA_USERS' => array(SS_SETUP|3, _("Users setup")), + 'SA_POSSETUP' => array(SS_SETUP|4, _("Point of sales definitions")), + 'SA_PRINTERS' => array(SS_SETUP|5, _("Printers configuration")), + 'SA_PRINTPROFILE' => array(SS_SETUP|6, _("Print profiles")), + 'SA_PAYTERMS' => array(SS_SETUP|7, _("Payment terms")), + 'SA_SHIPPING' => array(SS_SETUP|8, _("Shipping ways")), + 'SA_CRSTATUS' => array(SS_SETUP|9, _("Credit status definitions changes")), + 'SA_INVENTORYLOCATION' => array(SS_SETUP|10, _("Inventory locations changes")), + 'SA_INVENTORYMOVETYPE' => array(SS_SETUP|11, _("Inventory movement types")), + 'SA_WORKCENTRES' => array(SS_SETUP|12, _("Manufacture work centres")), + 'SA_FORMSETUP' => array(SS_SETUP|13, _("Forms setup")), + 'SA_CRMCATEGORY' => array(SS_SETUP|14, _("Contact categories")), +// +// Special and common functions +// + 'SA_VOIDTRANSACTION' => array(SS_SPEC|1, _("Voiding transactions")), + 'SA_BACKUP' => array(SS_SPEC|2, _("Database backup/restore")), + 'SA_VIEWPRINTTRANSACTION' => array(SS_SPEC|3, _("Common view/print transactions interface")), + 'SA_ATTACHDOCUMENT' => array(SS_SPEC|4, _("Attaching documents")), + 'SA_SETUPDISPLAY' => array(SS_SPEC|5, _("Display preferences")), + 'SA_CHGPASSWD' => array(SS_SPEC|6, _("Password changes")), + 'SA_EDITOTHERSTRANS' => array(SS_SPEC|7, _("Edit other users transactions")), +// // Sales related functionality // - 'SA_STEMPLATE' => array(SS_SALES_C|1, _("Sales templates")), - 'SA_SRECURRENT' => array(SS_SALES_C|2, _("Recurrent invoices definitions")), - 'SA_SALESPRICE' => array(SS_SALES_C|3, _("Sales prices edition")), - 'SA_SALESGROUP' => array(SS_SALES_C|4, _("Sales groups changes")), - 'SA_SALESMAN' => array(SS_SALES_C|5, _("Sales staff maintenance")), - 'SA_SALESAREA' => array(SS_SALES_C|6, _("Sales areas maintenance")), + 'SA_SALESTYPES' => array(SS_SALES_C|1, _("Sales types")), + 'SA_SALESPRICE' => array(SS_SALES_C|2, _("Sales prices edition")), + 'SA_SALESMAN' => array(SS_SALES_C|3, _("Sales staff maintenance")), + 'SA_SALESAREA' => array(SS_SALES_C|4, _("Sales areas maintenance")), + 'SA_SALESGROUP' => array(SS_SALES_C|5, _("Sales groups changes")), + 'SA_STEMPLATE' => array(SS_SALES_C|6, _("Sales templates")), + 'SA_SRECURRENT' => array(SS_SALES_C|7, _("Recurrent invoices definitions")), - 'SA_CUSTOMER' => array(SS_SALES|1, _("Sales customer and branches changes")), - 'SA_SALESORDER' => array(SS_SALES|2, _("Sales orders edition")), - 'SA_SALESDELIVERY' => array(SS_SALES|3, _("Sales deliveries edition")), - 'SA_SALESINVOICE' => array(SS_SALES|4, _("Sales invoices edition")), - 'SA_SALESCREDITINV' => array(SS_SALES|5, _("Sales credit notes against invoice")), - 'SA_SALESCREDIT' => array(SS_SALES|6, _("Sales freehand credit notes")), - 'SA_SALESPAYMNT' => array(SS_SALES|7, _("Customer payments entry")), - 'SA_SALESALLOC' => array(SS_SALES|1, _("Customer payments allocation")), + 'SA_SALESTRANSVIEW' => array(SS_SALES|1, _("Sales transactions view")), + 'SA_CUSTOMER' => array(SS_SALES|2, _("Sales customer and branches changes")), + 'SA_SALESQUOTE' => array(SS_SALES|10, _("Sales quotations")), + 'SA_SALESORDER' => array(SS_SALES|3, _("Sales orders edition")), + 'SA_SALESDELIVERY' => array(SS_SALES|4, _("Sales deliveries edition")), + 'SA_SALESINVOICE' => array(SS_SALES|5, _("Sales invoices edition")), + 'SA_SALESCREDITINV' => array(SS_SALES|6, _("Sales credit notes against invoice")), + 'SA_SALESCREDIT' => array(SS_SALES|7, _("Sales freehand credit notes")), + 'SA_SALESPAYMNT' => array(SS_SALES|8, _("Customer payments entry")), + 'SA_SALESALLOC' => array(SS_SALES|9, _("Customer payments allocation")), - 'SA_SALESANALYTIC' => array(SS_SALES_A|2, _("Customer analytical reports and inquiries")), - 'SA_SALESMANREP' => array(SS_SALES_A|3, _("Sales reports")), - 'SA_SALESVARREP' => array(SS_SALES_A|4, _("Sales other reports and inquires")), + 'SA_SALESANALYTIC' => array(SS_SALES_A|1, _("Sales analytical reports")), + 'SA_SALESBULKREP' => array(SS_SALES_A|2, _("Sales document bulk reports")), + 'SA_PRICEREP' => array(SS_SALES_A|3, _("Sales prices listing")), + 'SA_SALESMANREP' => array(SS_SALES_A|4, _("Sales staff listing")), + 'SA_CUSTBULKREP' => array(SS_SALES_A|5, _("Customer bulk listing")), + 'SA_CUSTSTATREP' => array(SS_SALES_A|6, _("Customer status report")), + 'SA_CUSTPAYMREP' => array(SS_SALES_A|7, _("Customer payments report")), // // Purchase related functions // 'SA_PURCHASEPRICING' => array(SS_PURCH_C|1, _("Purchase price changes")), - 'SA_SUPPLIER' => array(SS_PURCH|1, _("Suppliers data changes")), - 'SA_PURCHASEORDER' => array(SS_PURCH|2, _("Purchase order entry")), - 'SA_GRN' => array(SS_PURCH|3, _("Purchase receive")), - 'SA_SUPPLIERINVOICE' => array(SS_PURCH|4, _("Supplier invoices")), - 'SA_SUPPLIERCREDIT' => array(SS_PURCH|5, _("Supplier credit notes")), - 'SA_SUPPLIERPAYMNT' => array(SS_PURCH|6, _("Supplier payments")), - 'SA_SUPPLIERALLOC' => array(SS_PURCH|7, _("Supplier payments allocations")), + 'SA_SUPPTRANSVIEW' => array(SS_PURCH|1, _("Supplier transactions view")), + 'SA_SUPPLIER' => array(SS_PURCH|2, _("Suppliers changes")), + 'SA_PURCHASEORDER' => array(SS_PURCH|3, _("Purchase order entry")), + 'SA_GRN' => array(SS_PURCH|4, _("Purchase receive")), + 'SA_SUPPLIERINVOICE' => array(SS_PURCH|5, _("Supplier invoices")), + 'SA_GRNDELETE' => array(SS_PURCH|9, _("Deleting GRN items during invoice entry")), + 'SA_SUPPLIERCREDIT' => array(SS_PURCH|6, _("Supplier credit notes")), + 'SA_SUPPLIERPAYMNT' => array(SS_PURCH|7, _("Supplier payments")), + 'SA_SUPPLIERALLOC' => array(SS_PURCH|8, _("Supplier payments allocations")), - 'SA_SUPPLIERANALYTIC' => array(SS_PURCH_A|1, _("Supplier analytical reports and inquiries")), - 'SA_SUPPLIERMANREP' => array(SS_PURCH_A|2, _("Supplier reports")), - 'SA_SUPPLIERVARREP' => array(SS_PURCH_A|3, _("Supplier other reports and inquiries")), + 'SA_SUPPLIERANALYTIC' => array(SS_PURCH_A|1, _("Supplier analytical reports")), + 'SA_SUPPBULKREP' => array(SS_PURCH_A|2, _("Supplier document bulk reports")), + 'SA_SUPPPAYMREP' => array(SS_PURCH_A|3, _("Supplier payments report")), // // Inventory // @@ -156,37 +184,55 @@ $security_areas =array( 'SA_ITEMCATEGORY' => array(SS_ITEMS_C|3, _("Item categories")), 'SA_UOM' => array(SS_ITEMS_C|4, _("Units of measure")), - 'SA_FORITEMCODE' => array(SS_ITEMS|1, _("Foreign item codes entry")), - 'SA_LOCATIONTRANSFER' => array(SS_ITEMS|2, _("Inventory location transfers")), - 'SA_INVENTORYADJUSTMENT' => array(SS_ITEMS|3, _("Inventory adjustments")), + 'SA_ITEMSSTATVIEW' => array(SS_ITEMS|1, _("Stock status view")), + 'SA_ITEMSTRANSVIEW' => array(SS_ITEMS|2, _("Stock transactions view")), + 'SA_FORITEMCODE' => array(SS_ITEMS|3, _("Foreign item codes entry")), + 'SA_LOCATIONTRANSFER' => array(SS_ITEMS|4, _("Inventory location transfers")), + 'SA_INVENTORYADJUSTMENT' => array(SS_ITEMS|5, _("Inventory adjustments")), 'SA_REORDER' => array(SS_ITEMS_A|1, _("Reorder levels")), 'SA_ITEMSANALYTIC' => array(SS_ITEMS_A|2, _("Items analytical reports and inquiries")), - 'SA_ITEMSMANREP' => array(SS_ITEMS_A|3, _("Inventory reports")), - 'SA_ITEMSVARREP' => array(SS_ITEMS_A|4, _("Inventory other reports and inquiries")), + 'SA_ITEMSVALREP' => array(SS_ITEMS_A|3, _("Inventory valuation report")), + +// +// Fixed Assets +// + 'SA_ASSET' => array(SS_ASSETS_C|1, _("Fixed Asset items add/edit")), + 'SA_ASSETCATEGORY' => array(SS_ASSETS_C|2, _("Fixed Asset categories")), + 'SA_ASSETCLASS' => array(SS_ASSETS_C|4, _("Fixed Asset classes")), + + 'SA_ASSETSTRANSVIEW' => array(SS_ASSETS|1, _("Fixed Asset transactions view")), + 'SA_ASSETTRANSFER' => array(SS_ASSETS|2, _("Fixed Asset location transfers")), + 'SA_ASSETDISPOSAL' => array(SS_ASSETS|3, _("Fixed Asset disposals")), + 'SA_DEPRECIATION' => array(SS_ASSETS|4, _("Depreciation")), + + 'SA_ASSETSANALYTIC' => array(SS_ASSETS_A|1, _("Fixed Asset analytical reports and inquiries")), // // Manufacturing module // 'SA_BOM' => array(SS_MANUF_C|1, _("Bill of Materials")), - 'SA_WORKORDERENTRY' => array(SS_MANUF|1, _("Work order entry")), - 'SA_WORKORDEROPERATION' => array(SS_MANUF|2, _("Work order operations")), + 'SA_MANUFTRANSVIEW' => array(SS_MANUF|1, _("Manufacturing operations view")), + 'SA_WORKORDERENTRY' => array(SS_MANUF|2, _("Work order entry")), + 'SA_MANUFISSUE' => array(SS_MANUF|3, _("Material issues entry")), + 'SA_MANUFRECEIVE' => array(SS_MANUF|4, _("Final product receive")), + 'SA_MANUFRELEASE' => array(SS_MANUF|5, _("Work order releases")), 'SA_WORKORDERANALYTIC' => array(SS_MANUF_A|1, _("Work order analytical reports and inquiries")), - 'SA_WORKORDERMANREP' => array(SS_MANUF_A|2, _("Work order reports")), - 'SA_WORKORDERVARREP' => array(SS_MANUF_A|3, _("Work order other reports and inquiries")), - + 'SA_WORKORDERCOST' => array(SS_MANUF_A|2, _("Manufacturing cost inquiry")), + 'SA_MANUFBULKREP' => array(SS_MANUF_A|3, _("Work order bulk reports")), + 'SA_BOMREP' => array(SS_MANUF_A|4, _("Bill of materials reports")), // // Dimensions // - 'SA_DIMENSION' => array(SS_DIM|1, _("Dimensions")), + 'SA_DIMTAGS' => array(SS_DIM_C|1, _("Dimension tags")), - 'SA_DIMENSIONOPERATION' => array(SS_DIM|2, _("Dimension operations")), + 'SA_DIMTRANSVIEW' => array(SS_DIM|1, _("Dimension view")), - 'SA_DIMENSIONANALYTIC' => array(SS_DIM|3, _("Dimension analytical reports and inquiries")), - 'SA_DIMENSIONMANREP' => array(SS_DIM|4, _("Dimension reports")), - 'SA_DIMENSIONVARREP' => array(SS_DIM|5, _("Dimension other reports and inquiries")), + 'SA_DIMENSION' => array(SS_DIM|2, _("Dimension entry")), + + 'SA_DIMENSIONREP' => array(SS_DIM|3, _("Dimension reports")), // // Banking and General Ledger // @@ -197,20 +243,114 @@ $security_areas =array( 'SA_QUICKENTRY' => array(SS_GL_C|5, _("Quick GL entry definitions")), 'SA_CURRENCY' => array(SS_GL_C|6, _("Currencies")), 'SA_BANKACCOUNT' => array(SS_GL_C|7, _("Bank accounts")), - 'SA_SETUPTAX' => array(SS_GL_C|8, _("Tax rates")), - 'SA_SETUPFISCALYEAR' => array(SS_GL_C|9, _("Fiscal years maintenance")), - - 'SA_EXCHANGERATE' => array(SS_GL|1, _("Exchange rate table changes")), - 'SA_PAYMENT' => array(SS_GL|2, _("Bank payments")), - 'SA_DEPOSIT' => array(SS_GL|3, _("Bank deposits")), - 'SA_BANKACCOUNTTRANSFER' => array(SS_GL|4, _("Bank account transfers")), - 'SA_JOURNALENTRY' => array(SS_GL|5, _("Manual journal entries")), - 'SA_BUDGETENTRY' => array(SS_GL|6, _("Budget edition")), + 'SA_TAXRATES' => array(SS_GL_C|8, _("Tax rates")), + 'SA_TAXGROUPS' => array(SS_GL_C|12, _("Tax groups")), + 'SA_FISCALYEARS' => array(SS_GL_C|9, _("Fiscal years maintenance")), + 'SA_GLSETUP' => array(SS_GL_C|10, _("Company GL setup")), + 'SA_GLACCOUNTTAGS' => array(SS_GL_C|11, _("GL Account tags")), + 'SA_GLCLOSE' => array(SS_GL_C|14, _("Closing GL transactions")), + 'SA_GLREOPEN' => array(SS_GL_C|15, _("Reopening GL transactions")), // see below + 'SA_MULTIFISCALYEARS' => array(SS_GL_C|13, _("Allow entry on non closed Fiscal years")), + + 'SA_BANKTRANSVIEW' => array(SS_GL|1, _("Bank transactions view")), + 'SA_GLTRANSVIEW' => array(SS_GL|2, _("GL postings view")), + 'SA_EXCHANGERATE' => array(SS_GL|3, _("Exchange rate table changes")), + 'SA_PAYMENT' => array(SS_GL|4, _("Bank payments")), + 'SA_DEPOSIT' => array(SS_GL|5, _("Bank deposits")), + 'SA_BANKTRANSFER' => array(SS_GL|6, _("Bank account transfers")), 'SA_RECONCILE' => array(SS_GL|7, _("Bank reconciliation")), - 'SA_STANDARDCOST' => array(SS_GL|8, _("Item standard costs")), + 'SA_JOURNALENTRY' => array(SS_GL|8, _("Manual journal entries")), + 'SA_BANKJOURNAL' => array(SS_GL|11, _("Journal entries to bank related accounts")), + 'SA_BUDGETENTRY' => array(SS_GL|9, _("Budget edition")), + 'SA_STANDARDCOST' => array(SS_GL|10, _("Item standard costs")), + 'SA_ACCRUALS' => array(SS_GL|12, _("Revenue / Cost Accruals")), - 'SA_GLANALYTIC' => array(SS_GL_A|1, _("Bank and GL analytical reports and inquiries")), - 'SA_GLMANREP' => array(SS_GL_A|2, _("Bank and GL reports")), - 'SA_GLVARREP' => array(SS_GL_A|3, _("Bank and GL other reports and inquiries")) + 'SA_GLANALYTIC' => array(SS_GL_A|1, _("GL analytical reports and inquiries")), + 'SA_TAXREP' => array(SS_GL_A|2, _("Tax reports and inquiries")), + 'SA_BANKREP' => array(SS_GL_A|3, _("Bank reports and inquiries")), + 'SA_GLREP' => array(SS_GL_A|4, _("GL reports and inquiries")), ); -?> \ No newline at end of file + +if (!@$SysPrefs->allow_gl_reopen) + unset($security_areas['SA_GLREOPEN']); +/* + This function should be called whenever we want to extend core access level system + with new security areas and/or sections i.e.: + . on any page with non-standard security areas + . in security roles editor + The call should be placed between session.inc inclusion and page() call. + Up to 155 security sections and 155 security areas for any extension can be installed. +*/ +function add_access_extensions() +{ + global $security_areas, $security_sections, $installed_extensions; + + foreach($installed_extensions as $extid => $ext) { + $accext = hook_invoke($ext['package'], 'install_access', $dummy); + if ($accext == null) continue; + + $scode = 100; + $acode = 100; + $extsections = $accext[1]; + $extareas = $accext[0]; + $extcode = $extid<<16; + + $trans = array(); + foreach($extsections as $code =>$name) { + $trans[$code] = $scode<<8; + // reassign section codes + $security_sections[$trans[$code]|$extcode] = $name; + $scode++; + } + foreach($extareas as $code => $area) { + $section = $area[0]&0xff00; + // extension modules: + // if area belongs to nonstandard section + // use translated section codes and + // preserve lower part of area code + if (isset($trans[$section])) { + $section = $trans[$section]; + } + // otherwise assign next available + // area code >99 + $area[0] = $extcode | $section | ($acode++); + $security_areas[$code] = $area; + } + } +} + +function check_edit_access($name) +{ + global $input_security; + + $access = @$input_security[$name]; + + if (!$access) + $access = @$input_security['']; // default access level + + if (!$access) + return true; // if constraint is not defined edit access is allowed + + return user_check_access($access); +} +/* + Returns POST value or null if edit access to $name control is forbidden. +*/ +function access_post($name, $dflt=null) +{ + if (!check_edit_access($name)) + return $dflt; + else + return get_post($name, $dflt); +} + +/* + Returns numeric input value or null if edit access to $name control is forbidden. +*/ +function access_num($name, $dflt=null) +{ + if (!check_edit_access($name)) + return $dflt; + else + return input_num($name, $dflt); +}