<?php
/**
 * 管理公众号--使用者管理
 * [WeEngine System] Copyright (c) 2014 W7.CC.
 */
defined('IN_IA') or exit('Access Denied');
load()->model('module');
load()->model('system');

$dos = array('delete', 'edit', 'set_permission', 'save_permission', 'set_manager', 'module');
$do = in_array($do, $dos) ? $do : 'edit';

$uniacid = intval($_GPC['uniacid']);
if (empty($uniacid)) {
	if ($_W['isajax']) {
		iajax(-1, '请选择要编辑的平台账号');
	}
	itoast('请选择要编辑的平台账号', referer(), 'error');
}
$state = permission_account_user_role($_W['uid'], $uniacid);
//只有创始人、主管理员、管理员才有权限
$role_permission = in_array($state, array(ACCOUNT_MANAGE_NAME_FOUNDER, ACCOUNT_MANAGE_NAME_OWNER, ACCOUNT_MANAGE_NAME_MANAGER, ACCOUNT_MANAGE_NAME_VICE_FOUNDER));
if (!$role_permission) {
	if ($_W['isajax']) {
		iajax(-1, '无权限操作');
	}
	itoast('无权限操作！', referer(), 'error');
}
$founders = explode(',', $_W['config']['setting']['founder']);
$founder_info = pdo_getcolumn('users', array('uid' => current($founders)), 'username');
$account = uni_fetch($uniacid);
$_W['breadcrumb'] = $account['name'];
$headimgsrc = tomedia('headimg_' . $account['acid'] . '.jpg');
if (is_error($account)) {
	itoast($account['message']);
}

if ('edit' == $do) {
	$account_belong_user = pdo_getcolumn('uni_account_users', array('uniacid' => $uniacid,'role' => 'owner'), 'uid');
	$permissions = pdo_fetchall('SELECT id, uid, role FROM ' . tablename('uni_account_users') . " WHERE uniacid = '$uniacid' ORDER BY uid ASC, role DESC", array(), 'uid');
	if (!empty($permissions)) {
		$member = pdo_fetchall('SELECT username, uid FROM ' . tablename('users') . ' WHERE uid IN (' . implode(',', array_keys($permissions)) . ')', array(), 'uid');
		if (!empty($member)) {
			$operator = $manager = $owner = $vice_founder = array();
			foreach ($permissions as $key => $per_val) {
				$per_val['isfounder'] = in_array($member[$key]['uid'], $founders) ? 1 : 0;
				$per_val['username'] = $member[$key]['username'] ? $member[$key]['username'] : '';
				switch ($per_val['role']) {
					case 'vice_founder':
						$vice_founder = $per_val;
						break;
					case 'owner':
						$owner = $per_val;
						break;
					case 'manager':
						$manager[] = $per_val;
						break;
					case 'operator':
						$operator[] = $per_val;
						break;
					default:
						break;
				}
			}
		}
	}
	if ($_W['isajax']) {
		iajax(0, array(
			'founder_info' => $founder_info,
			'vice_founder' => empty($vice_founder) ? '' : $vice_founder,
			'owner' => empty($owner) ? '' : $owner,
			'manager' => empty($manager) ? '' : $manager,
			'operator' => empty($operator) ? '' : $operator,
			'create_user_url' => $_W['siteroot'] . 'web' . ltrim(url('user/create'), '.'),
		));
	}
	template('account/manage-users');
}

if ('delete' == $do) {
	$uid = intval($_GPC['uid']);
	if (empty($uid)) {
		iajax(-1, '请选择要删除的用户！');
	}
	$data = array(
		'uniacid' => $uniacid,
		'uid' => $uid,
	);
	$exists = pdo_get('uni_account_users', array('uniacid' => $uniacid, 'uid' => $uid));
	if (empty($exists)) {
		iajax(-1, '该平台账号下不存在该用户！');
	}

	if (ACCOUNT_MANAGE_NAME_MANAGER == $state && (ACCOUNT_MANAGE_NAME_OWNER == $exists['role'] || ACCOUNT_MANAGE_NAME_MANAGER == $exists['role'])) {
		iajax(-1, '管理员不可操作其他管理员');
	}
	$result = pdo_delete('uni_account_users', $data);
	if ($result) {
		if (ACCOUNT_MANAGE_NAME_OPERATOR == $exists['role']) {
			pdo_delete('users_permission', $data);
		}
		pdo_delete('users_lastuse', $data);
		pdo_delete('users_operate_history', $data);
		iajax(0, '删除成功！', referer());
	} else {
		iajax(-1, '删除失败，请重试');
	}
}

if ('set_manager' == $do) {
	$username = safe_gpc_string($_GPC['username']);
	$user = user_single(array('username' => $username));

	if (!empty($user)) {
		if (2 != $user['status']) {
			iajax(3, '用户未通过审核或不存在！', '');
		}

		
		if (ACCOUNT_OPERATE_CLERK == $user['type']) {
			iajax(-1, '该用户是应用操作员，不能成为账号的操作员!', '');
		}

		$addtype = intval($_GPC['addtype']);
		if (ACCOUNT_MANAGE_TYPE_OWNER == $addtype) {
			$user_end_time = user_end_time($user['uid']);
			$account_end_time = 0 == $user_end_time ? 0 : strtotime($user_end_time);
			pdo_update('account', array('endtime' => $account_end_time), array('uniacid' => $uniacid));
		}

		if (!in_array($addtype, array(ACCOUNT_MANAGE_TYPE_OPERATOR, ACCOUNT_MANAGE_TYPE_MANAGER, ACCOUNT_MANAGE_TYPE_OWNER, ACCOUNT_MANAGE_TYPE_VICE_FOUNDER))) {
			iajax(-1, '添加使用者类型有误，只能添加操作员/管理员/主管理员/副创始人！');
		}
		if (in_array($user['uid'], $founders)) {
			if (ACCOUNT_MANAGE_TYPE_OWNER == $addtype) {
				pdo_delete('uni_account_users', array('uniacid' => $uniacid, 'role' => ACCOUNT_MANAGE_NAME_OWNER));
				iajax(0, '修改成功！', '');
			}
			iajax(1, '不可操作网站创始人！', '');
		}
		//添加/修改公众号主管理员时执行数量判断
		if (ACCOUNT_MANAGE_TYPE_OWNER == $addtype && !in_array($_W['uid'], $founders)) {
			$creat_limit = permission_user_account_num($user['uid']);
			if ($creat_limit[TYPE_SIGN . '_limit'] <= 0) {
				itoast(error(5, ACCOUNT_TYPE_NAME . '创建数量已达上限'), '', 'error');
			}
		}

		$data = array(
			'uniacid' => $uniacid,
			'uid' => $user['uid'],
		);

		$exists = pdo_get('uni_account_users', $data);
		if (empty($exists)) {
			
			if (ACCOUNT_MANAGE_TYPE_OWNER == $addtype) {
				if (ACCOUNT_MANAGE_NAME_MANAGER == $state) {
					iajax(4, '管理员不可操作主管理员', '');
				}
				$vice_founder = pdo_get('uni_account_users', array('uniacid' => $uniacid, 'role' => ACCOUNT_MANAGE_NAME_VICE_FOUNDER));
				if (!empty($vice_founder) && $user['owner_uid'] != $vice_founder['uid']) {
					iajax(-1, '只能修改平台副创始人下的用户为主管理员!');
				}
				$owner = pdo_get('uni_account_users', array('uniacid' => $uniacid, 'role' => 'owner'));
				if (empty($owner)) {
					$data['role'] = ACCOUNT_MANAGE_NAME_OWNER;
				} else {
					$result = pdo_update('uni_account_users', $data, array('id' => $owner['id']));
					if ($result) {
						//设置主管理员后，删除该用户在该公众号下设置的权限（即主管理员拥有该公众号所有权限）
						pdo_delete('users_permission', array('uniacid' => $uniacid, 'uid' => $user['uid']));
						cache_clean(cache_system_key('user_accounts'));
						cache_build_account_modules($uniacid, $user['uid']);
						iajax(0, '修改成功！', '');
					} else {
						iajax(1, '修改失败！', '');
					}
					exit;
				}
			} elseif (ACCOUNT_MANAGE_TYPE_MANAGER == $addtype) {
				if (ACCOUNT_MANAGE_NAME_MANAGER == $state) {
					iajax(4, '管理员不可操作管理员', '');
				}
				$data['role'] = ACCOUNT_MANAGE_NAME_MANAGER;
			} elseif (ACCOUNT_MANAGE_TYPE_OPERATOR == $addtype) {
				$data['role'] = ACCOUNT_MANAGE_NAME_OPERATOR;
			}
			pdo_delete('uni_account_users', array('uniacid' => $uniacid, 'uid' => $user['uid']));
			$result = pdo_insert('uni_account_users', $data);

			if ($result) {
				if (ACCOUNT_MANAGE_TYPE_OWNER == $addtype) {
					pdo_delete('users_permission', array('uniacid' => $uniacid, 'uid' => $user['uid']));
				}
				if (in_array($addtype, array(ACCOUNT_MANAGE_TYPE_MANAGER, ACCOUNT_MANAGE_TYPE_OPERATOR))) {
					permission_account_user_init($user['uid'], $uniacid);
				}
				cache_clean(cache_system_key('user_accounts'));
				cache_build_account_modules($uniacid, $user['uid']);
				iajax(0, '添加成功！', '');
			} else {
				iajax(1, '添加失败！', '');
			}
		} else {
			$permissions = table('users_permission')->getAllUserPermission($user['uid'], $uniacid);
			$modulelist = uni_modules();
			if (!empty($permissions)) {
				$i = 0;
				foreach ($permissions as $permission) {
					if ($i >= 3) {
						break;
					}
					if (!in_array($permission['type'], array_keys($modulelist))) {
						continue;
					}
					$module_info = module_fetch($permission['type']);
					$modules_str .= $module_info['title'] . ',';
					++$i ;
				}
			}

			if (empty($permissions) && !empty($exists)) {
				if (ACCOUNT_MANAGE_NAME_OPERATOR == $exists['role']) {
					$role_name = '操作员';
				} elseif (ACCOUNT_MANAGE_NAME_MANAGER == $exists['role']) {
					$role_name = '管理员';
				} elseif (ACCOUNT_MANAGE_NAME_OWNER == $exists['role']) {
					$role_name = '主管理员';
				} elseif (ACCOUNT_MANAGE_NAME_VICE_FOUNDER == $exists['role']) {
					$role_name = '副创始人';
				}

				iajax(2, "添加平台使用者失败, <a style='color:#3296fa'>" . $username . "<a/>, 已经是公众号的<a style='color:#3296fa'>" . $role_name . '<a/> ，请勿重复添加！', '');
			} else {
				iajax(2, "添加平台使用者失败, <a style='color:#3296fa'>" . $username . "<a/>, 已经是 <a style='color:#3296fa'>" . rtrim($modules_str, ',') . '</a>的应用操作员，请先取消其应用内操作员身份后再添加平台使用者！', '');
			}
		}
	} else {
		iajax(-1, '用户不存在!', '');
	}
}

if ('set_permission' == $do || 'save_permission' == $do) {
	$uid = intval($_GPC['uid']);
	$user = user_single(array('uid' => $uid));
	if (empty($user)) {
		if ($_W['isajax']) {
			iajax(-1, '您操作的用户不存在或是已经被删除');
		}
		itoast('您操作的用户不存在或是已经被删除！', '', '');
	}
	$role = permission_account_user_role($_W['uid'], $uniacid);
	if (empty($role)) {
		if ($_W['isajax']) {
			iajax(-1, '此用户没有操作该统一公众号的权限，请选指派“管理员”或是“操作员”权限！');
		}
		itoast('此用户没有操作该统一公众号的权限，请选指派“管理员”或是“操作员”权限！', '', '');
	}
	$module_permission = permission_account_user_menu($uid, $uniacid, 'modules');

	if ('all' == current($module_permission)) {
		$module_permission_keys = array();
		$module_permission_all = 1;
	} else {
		$module_permission_keys = array_keys($module_permission);
		$module_permission_all = 0;
	}
	$user_all_module_permission = table('users_permission')->getAllUserModulePermission($uid, $uniacid);
	//对于各种小程序（他们支持版本），只显示版本里的模块，没有在版本里的模块不显示，设置了也无效
	if ($account->supportVersion) {
		$version_modules = array();
		$version_all = miniapp_version_all($uniacid);
		if (!empty($version_all)) {
			foreach ($version_all as $key => $version) {
				if (!empty($version['modules'])) {
					$version_modules = array_merge($version_modules, array_keys($version['modules']));
				}
			}
		}
		foreach ($version_modules as $version_module) {
			$module[$version_module] = module_fetch($version_module);
		}
	} else {
		$module = uni_modules_by_uniacid($uniacid);
	}
	//模块所有菜单权限和各模块菜单权限
	$user_modules_permissions = array();
	if (!empty($module)) {
		foreach ($module as $module_name_key => $value) {
			if (1 == $value['issystem']) {
				unset($module[$module_name_key]);
				continue;
			}
			if (!empty($user_all_module_permission[$module_name_key]['permission'])) {
				$have_module_permission = explode('|', $user_all_module_permission[$module_name_key]['permission']);
			} else {
				$have_module_permission = array();
			}
			$user_modules_permissions[$module_name_key] = array('module_title' => $value['title'], 'permission' => array());
			$permissions = module_permission_fetch($module_name_key);
			if (empty($permissions)) {
				$user_modules_permissions[$module_name_key]['permission'] = (in_array('all', $have_module_permission) || in_array('all', $module_permission)) ? array('all') : array();
				continue;
			}
			foreach ($permissions as $permission_info) {
				$permission_info['checked'] = 0;
				if (in_array($permission_info['permission'], $have_module_permission) || in_array('all', $have_module_permission) || in_array('all', $module_permission)) {
					$permission_info['checked'] = 1;
				}
				$user_modules_permissions[$module_name_key]['permission'][] = $permission_info;
			}
		}
	}

	foreach ($account_all_type_sign as $account_type_sign => $account_type_info) {
		if (in_array($account['type'], $account_type_info['contain_type'])) {
			$account_type = 'account' == $account_type_sign ? 'system' : $account_type_sign;
		}
	}

	$user_menu_permissions = permission_account_user_menu($uid, $uniacid, $account_type);
	$menus = system_menu_permission_list($role);

	permission_account_user_init($user['uid'], $uniacid);

	if (in_array($account['type_sign'], array(ACCOUNT_TYPE_SIGN, WEBAPP_TYPE_SIGN))) {
		$account_type_menu = ACCOUNT_TYPE_SIGN;
	} elseif (in_array($account['type_sign'], array(ALIAPP_TYPE_SIGN, BAIDUAPP_TYPE_SIGN, TOUTIAOAPP_TYPE_SIGN))) {
		$account_type_menu = WXAPP_TYPE_SIGN;
	} else {
		$account_type_menu = $account['type_sign'];
	}

	if ('set_permission' == $do) {
		if ($_W['isajax']) {
			if (!empty($menus[$account_type_menu]) && !empty($menus[$account_type_menu]['section'])) {
				foreach ($menus[$account_type_menu]['section'] as $section_key => &$section) {
					if ($section_key == 'platform_module') {
						unset($menus[$account_type_menu]['section']['platform_module']);
						continue;
					}
					if (empty($section['menu'])) {
						continue;
					}
					foreach ($section['menu'] as &$menu) {
						
						if (in_array($menu['permission_name'], $user_menu_permissions)) {
							$menu['checked'] = 1;
						} else {
							$menu['checked'] = 0;
						}
						if (empty($menu['sub_permission'])) {
							continue;
						}
						foreach ($menu['sub_permission'] as &$sub_permission) {
							if (in_array($sub_permission['permission_name'], $user_menu_permissions)) {
								$sub_permission['checked'] = 1;
							} else {
								$sub_permission['checked'] = 0;
							}
						}
						unset($menu);
					}
					unset($sub_permission);
				}
				unset($section);
			}
			$result = array(
				'uni_modules_permission' => $user_modules_permissions,
				'menus' => $menus[$account_type_menu],
			);
			iajax(0, $result);
		}
		template('account/set-permission');
	}
}

if ('save_permission' == $do) {
	$user_menu_permission_new = array();
	if (!empty($_GPC['menus'])) {
		$all_menu_permission = permission_menu_name();
		foreach ($_GPC['menus'] as $permission_name) {
			if (in_array($permission_name, $all_menu_permission)) {
				$user_menu_permission_new[] = $permission_name;
			}
		}
		$data = array(
			'type' => $account_type,
			'permission' => implode('|', $user_menu_permission_new),
		);
		$result = permission_update_account_user($uid, $uniacid, $data);
		if (is_error($result)) {
			if ($_W['isajax']) {
				iajax(-1, $result['message']);
			}
			itoast($result['message']);
		}
	} else {
		$data = array(
			'type' => $account_type,
			'permission' => '|',
		);
		$result = permission_update_account_user($uid, $uniacid, $data);
	}
	if (is_error($result)) {
		if ($_W['isajax']) {
			iajax(-1, $result['message']);
		}
		itoast($result['message']);
	}
	
	// pdo_delete('users_permission', array('uniacid' => $uniacid, 'uid' => $uid, 'type <>' => PERMISSION_ACCOUNT, 'type <>' => PERMISSION_WXAPP));
	//	不支持，会丢失一个 “type ！=”，sql语句为：DELETE FROM `ims_users_permission` WHERE `uniacid` = :__uniacid_324 AND `uid` = :__uid_325 AND `type` <> :__type_326
	
	$permission_names = "'" . implode(array(PERMISSION_ACCOUNT, PERMISSION_WXAPP, PERMISSION_WEBAPP, PERMISSION_PHONEAPP, PERMISSION_ALIAPP, PERMISSION_BAIDUAPP, PERMISSION_TOUTIAOAPP, PERMISSION_SYSTEM), "','") . "'";
	pdo_query('DELETE FROM ' . tablename('users_permission') . ' WHERE uniacid = :uniacid AND uid = :uid AND type not in (' . $permission_names . ')', array(':uniacid' => $uniacid, ':uid' => $uid));

	if (!empty($_GPC['module'])) {
		$module_names = array();
		foreach ($_GPC['module'] as $module_val) {
			$insert = array(
				'uniacid' => $uniacid,
				'uid' => $uid,
				'type' => $module_val,
			);
			if (!empty($module[$module_val])) {
				$module_names[] = $module_val;
			}
			if (1 == $_GPC[$module_val . '_select']) {
				$insert['permission'] = 'all';
				pdo_insert('users_permission', $insert);
				continue;
			} else {
				$data = array();
				foreach ($_GPC['module_' . $module_val] as $v) {
					$data[] = $v;
				}
				if (!empty($data)) {
					$insert['permission'] = implode('|', $data);
					pdo_insert('users_permission', $insert);
				}
			}
		}
		$module_names = implode(',', $module_names);
		pdo_query('DELETE FROM ' . tablename('users_operate_history') . ' WHERE uniacid = :uniacid AND uid = :uid AND module_name not in (:module_name)', array(':uniacid' => $uniacid, ':uid' => $uid, ':module_name' => $module_names));
	} else {
		$module_all_permission_data = array(
			'uid' => $uid,
			'uniacid' => $uniacid,
			'type' => 'modules',
		);
		$module_all_permission = pdo_get('users_permission', $module_all_permission_data);
		if (empty($module_all_permission)) {
			$module_all_permission_data['permission'] = 'none';
			pdo_insert('users_permission', $module_all_permission_data);
		}
	}
	cache_delete(cache_system_key('permission', array('uniacid' => $uniacid, 'uid' => $uid)));
	if ($_W['isajax']) {
		iajax(0, '操作菜单权限成功!');
	}
	itoast('操作菜单权限成功！', referer(), 'success');
}

if ('module' == $do) {
	$uid = intval($_GPC['uid']);
	$user = user_single($uid);
	if (empty($user)) {
		iajax(-1, '访问错误, 未找到指定操作用户.', '');
	}
	$isfounder = user_is_founder($uid, true);
	if ($isfounder) {
		iajax(-1, '访问错误, 无法编辑站长.', '');
	}
	$module_name = safe_gpc_string($_GPC['m']);
	$module = pdo_fetch('SELECT * FROM ' . tablename('modules') . ' WHERE name = :m', array(':m' => $module_name));
	//获取模块权限
	$purview = pdo_fetch('SELECT * FROM ' . tablename('users_permission') . ' WHERE uniacid = :aid AND uid = :uid AND type = :type', array(':aid' => $uniacid, ':uid' => $uid, ':type' => $module_name));
	$user_module_permissions = permission_account_user_menu($uid, $uniacid, 'modules');
	if (!empty($purview['permission'])) {
		$purview['permission'] = explode('|', $purview['permission']);
	} else {
		$purview['permission'] = array();
	}

	$mineurl = array();
	$all = 0;
	if (!empty($mods)) {
		foreach ($mods as $mod) {
			if ('all' == $mod['url']) {
				$all = 1;
				break;
			} else {
				$mineurl[] = $mod['url'];
			}
		}
	}
	$data = array();
	if ($module['settings']) {
		$data[] = array('title' => '参数设置', 'permission' => $module_name . '_settings');
	}
	if ($module['isrulefields']) {
		$data[] = array('title' => '回复规则列表', 'permission' => $module_name . '_rule');
	}
	$entries = module_entries($module_name);
	if (!empty($entries['home'])) {
		$data[] = array('title' => '微站首页导航', 'permission' => $module_name . '_home');
	}
	if (!empty($entries['profile'])) {
		$data[] = array('title' => '个人中心导航', 'permission' => $module_name . '_profile');
	}
	if (!empty($entries['shortcut'])) {
		$data[] = array('title' => '快捷菜单', 'permission' => $module_name . '_shortcut');
	}
	if (!empty($entries['cover'])) {
		foreach ($entries['cover'] as $cover) {
			$data[] = array('title' => $cover['title'], 'permission' => $module_name . '_cover_' . $cover['do']);
		}
	}
	if (!empty($entries['menu'])) {
		foreach ($entries['menu'] as $menu) {
			if (!empty($menu['multilevel'])) {
				continue;
			}
			$data[] = array('title' => $menu['title'], 'permission' => $module_name . '_menu_' . $menu['do']);
		}
	}
	unset($entries);
	if (!empty($module['permissions'])) {
		$module['permissions'] = (array) iunserializer($module['permissions']);
		$data = array_merge($data, $module['permissions']);
	}
	foreach ($data as &$data_val) {
		$data_val['checked'] = 0;
		if (in_array($data_val['permission'], $purview['permission']) || in_array('all', $purview['permission']) || in_array('all', $user_module_permissions)) {
			$data_val['checked'] = 1;
		}
	}
	unset($data_val);
	if (empty($data)) {
		iajax(-1, '无子权限！', '');
	} else {
		iajax(0, $data, '');
	}
}
