From: Janusz Dobrowolski <janusz@frontaccounting.eu>
Date: Fri, 20 Feb 2015 14:26:50 +0000 (+0100)
Subject: Additional access control related ui helpers added: check_edit_access, access_post... 
X-Git-Tag: v2.4.2~19^2~244
X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=commitdiff_plain;h=7561718ee5113232ce917f63085d272884b0929c;p=fa-stable.git

Additional access control related ui helpers added: check_edit_access, access_post, access_num
---

diff --git a/includes/access_levels.inc b/includes/access_levels.inc
index c54f02ed..fc3d48df 100644
--- a/includes/access_levels.inc
+++ b/includes/access_levels.inc
@@ -314,3 +314,39 @@ function get_access_extensions($id) {
 	return array($security_areas, $security_sections);
 }
 */
+
+function check_edit_access($name)
+{
+	global $input_security;
+
+	$access = @$input_security[$name];
+
+	if (!$access)
+		$access = @$input_security['']; // default access level
+
+	if (!$access)
+		return true; // if constraint is not defined edit access is allowed
+
+	return  user_check_access($access);
+}
+/*
+	Returns POST value or null if edit access to $name control is forbidden.
+*/
+function access_post($name, $dflt=null)
+{
+	if (!check_edit_access($name))
+		return $dflt;
+	else
+		return get_post($name, $dflt);
+}
+
+/*
+	Returns numeric input value or null if edit access to $name control is forbidden.
+*/
+function access_num($name, $dflt=null)
+{
+	if (!check_edit_access($name))
+		return $dflt;
+	else
+		return input_num($name, $dflt);
+}