Check(); $g_user->check_dossier($gDossier); set_language(); /* Show the document */ if ($action == 'sh') { if ($g_user->check_action(VIEWDOC) == 1) { // retrieve the document $doc = new Document($cn, $_REQUEST['d_id']); $doc->Send(); } } /* remove the document */ if ($action == 'rm') { $json='{"d_id":"-1"}'; if ($g_user->check_action(RMDOC) == 1) { $doc = new Document($cn, $_REQUEST['d_id']); $doc->remove(); $json = sprintf('{"d_id":"%s"}', $_REQUEST['d_id']); } header("Content-type: text/html; charset: utf8", true); print $json; } /* update the description of the document */ if ( $action == "upd_doc") { if ($g_user->check_action(VIEWDOC) == 1) { $doc = new Document($cn, $_REQUEST['d_id']); $doc->get(); if ( $g_user->can_write_action($doc->ag_id)) // retrieve the document $doc->update_description(strip_tags ($_REQUEST['value'])); } } /* remove the operation from action_gestion_operation */ if ($action == 'rmop') { $json = '{"ago_id":"-1"}'; $dt_id = $cn->get_value("select ag_id from action_gestion_operation where ago_id=$1",array( $_REQUEST['id'])); if ($g_user->check_action(RMDOC) == 1 && $g_user->can_write_action($dt_id) == true) { $cn->exec_sql("delete from action_gestion_operation where ago_id=$1", array($_REQUEST['id'])); $json = sprintf('{"ago_id":"%s"}', $_REQUEST['id']); } header("Content-type: text/html; charset: utf8", true); print $json; } /* remove the comment from action_gestion_operation */ if ($action == 'rmcomment') { $json = '{"agc_id":"-1"}'; $dt_id = $cn->get_value("select ag_id from action_gestion_comment where agc_id=$1", array($_REQUEST['id'])); if ($g_user->check_action(RMDOC) == 1 && $g_user->can_write_action($dt_id) == true) { $cn->exec_sql("delete from action_gestion_comment where agc_id=$1", array($_REQUEST['id'])); $json = sprintf('{"agc_id":"%s"}', $_REQUEST['id']); } header("Content-type: text/html; charset: utf8", true); print $json; } /* remove the action from action_gestion_operation */ if ($action == 'rmaction') { $json = '{"act_id":"-1"}'; if ($g_user->check_action(RMDOC) == 1 && $g_user->can_write_action($_REQUEST['id']) == true && $g_user->can_write_action($_REQUEST['ag_id']) == true) { $cn->exec_sql("delete from action_gestion_related where aga_least=$1 and aga_greatest=$2", array($_REQUEST['id'], $_REQUEST['ag_id'])); $cn->exec_sql("delete from action_gestion_related where aga_least=$2 and aga_greatest=$1", array($_REQUEST['id'], $_REQUEST['ag_id'])); $json = sprintf('{"act_id":"%s"}', $_REQUEST['id']); } header("Content-type: text/html; charset: utf8", true); print $json; }