View Code - 20260920

functional_role_permissions.php | 20260920_164915.php Initial Domain Snapshot

<?php
require_once __DIR__ . '/modules/auth/page_acl.php';
require_once __DIR__ . '/modules/activity/activity_logger.php';

$ctx = page_require_access('functional_role_permissions');

$u = $ctx['user'] ?? null;
$company_id = (int)($ctx['company_id'] ?? 0);
$pdo = $ctx['pdo'] ?? null;

if (!$pdo) {
    require_once __DIR__ . '/core/db.php';
}

function h($v){
    return htmlspecialchars((string)$v, ENT_QUOTES, 'UTF-8');
}

/* =========================
   FUNCTIONAL ROLES
========================= */

$roles = [];

$stmt = $pdo->prepare("
    SELECT id, role_name
    FROM functional_roles
    WHERE company_id = ?
    AND is_active = 1
    ORDER BY role_name ASC
");

$stmt->execute([$company_id]);

$roles = $stmt->fetchAll(PDO::FETCH_ASSOC);

/* =========================
   MENU ITEMS & SUBMENUS
========================= */

$menu_items = [];

$stmt = $pdo->prepare("
    SELECT
        nms.id AS section_id,
        nms.name AS section_name,

nmi.id,
        nmi.title,
        nmi.url,
        nmi.is_enabled,
        nmi.parent_id,
        parent_nmi.title AS parent_title

FROM nav_menu_items nmi

INNER JOIN nav_menu_sections nms
        ON nms.id = nmi.section_id

LEFT JOIN nav_menu_items parent_nmi
        ON parent_nmi.id = nmi.parent_id

WHERE (nmi.company_id = 0 OR nmi.company_id = ?)

ORDER BY
        nms.sort_order,
        COALESCE(parent_nmi.sort_order, nmi.sort_order),
        COALESCE(parent_nmi.title, nmi.title),
        nmi.parent_id ASC,
        nmi.sort_order,
        nmi.title
");

$stmt->execute([$company_id]);

$raw_menu_items = $stmt->fetchAll(PDO::FETCH_ASSOC);

/* Group items by Section and Parent Menu */
$grouped_menu = [];

foreach ($raw_menu_items as $item) {
    $url = trim((string)$item['url']);
    if ($url === '' || $url === '#') {
        // Grouping anchor parent items if any
    }

$sec_id = $item['section_id'];
    $sec_name = $item['section_name'];

if (!isset($grouped_menu[$sec_id])) {
        $grouped_menu[$sec_id] = [
            'name' => $sec_name,
            'parents' => []
        ];
    }

$parent_id = (int)($item['parent_id'] ?? 0);

if ($parent_id === 0) {
        $p_key = 'main_' . $item['id'];
        if (!isset($grouped_menu[$sec_id]['parents'][$p_key])) {
            $grouped_menu[$sec_id]['parents'][$p_key] = [
                'parent_item' => $item,
                'submenus' => []
            ];
        } else {
            $grouped_menu[$sec_id]['parents'][$p_key]['parent_item'] = $item;
        }
    } else {
        $p_key = 'main_' . $parent_id;
        if (!isset($grouped_menu[$sec_id]['parents'][$p_key])) {
            $grouped_menu[$sec_id]['parents'][$p_key] = [
                'parent_item' => [
                    'id' => $parent_id,
                    'title' => $item['parent_title'] ?: 'Main Menu',
                    'url' => '',
                    'is_enabled' => 1
                ],
                'submenus' => []
            ];
        }
        $grouped_menu[$sec_id]['parents'][$p_key]['submenus'][] = $item;
    }
}

/* =========================
   SELECTED ROLE
========================= */

$selected_role = (int)($_GET['role_id'] ?? $_POST['role_id'] ?? 0);

$success = '';
$error   = '';

/* =========================
   SAVE PERMISSIONS
========================= */

if ($_SERVER['REQUEST_METHOD'] === 'POST' && $selected_role > 0) {

$menu_ids = array_unique(
        array_map(
            'intval',
            $_POST['menu_ids'] ?? []
        )
    );

try {

$pdo->beginTransaction();

/* =========================
           DELETE OLD PERMISSIONS
        ========================= */

$stmt = $pdo->prepare("
            DELETE FROM functional_role_menu_items
            WHERE company_id = ?
            AND functional_role_id = ?
        ");

$stmt->execute([
            $company_id,
            $selected_role
        ]);

/* =========================
           INSERT NEW PERMISSIONS
        ========================= */

if (!empty($menu_ids)) {

$stmt = $pdo->prepare("
                INSERT INTO functional_role_menu_items
                (
                    company_id,
                    functional_role_id,
                    menu_item_id,
                    created_by
                )
                VALUES
                (
                    :cid,
                    :rid,
                    :mid,
                    :by
                )
            ");

foreach ($menu_ids as $mid) {

if ($mid <= 0) {
                    continue;
                }

$stmt->execute([
                    ':cid' => $company_id,
                    ':rid' => $selected_role,
                    ':mid' => $mid,
                    ':by'  => (int)($u['id'] ?? 0),
                ]);
            }
        }

$pdo->commit();

activity_log([
            'company_id'  => $company_id,
            'user_id'     => (int)($u['id'] ?? 0),
            'module'      => 'functional_roles',
            'action_name' => 'edit',
            'entity_type' => 'functional_role_permission',
            'entity_id'   => $selected_role,
            'remarks'     => 'Updated functional role menu permissions'
        ]);

header("Location: ?role_id=".$selected_role."&success=1");
        exit;

} catch (Throwable $e) {

$pdo->rollBack();

$error = $e->getMessage();
    }
}

if (isset($_GET['success'])) {
    $success = 'Functional role permissions updated successfully.';
}

/* =========================
   CURRENT ROLE ACCESS
========================= */

$current_permissions = [];

if ($selected_role > 0) {

$stmt = $pdo->prepare("
        SELECT menu_item_id
        FROM functional_role_menu_items
        WHERE company_id = ?
        AND functional_role_id = ?
    ");

$stmt->execute([
        $company_id,
        $selected_role
    ]);

$current_permissions = $stmt->fetchAll(PDO::FETCH_COLUMN);
}

/* =========================
   HEADER AFTER LOGIC
========================= */

require_once __DIR__ . '/partials/header.php';
?>

<div class="card-header bg-primary text-white">
            <h4 class="mb-0">
                Functional Role Permissions
            </h4>
        </div>

<?php if ($success) { ?>

<?php } ?>

<?php if ($error) { ?>

<?php } ?>

<label class="form-label fw-bold">
                            Select Functional Role
                        </label>

<option value="">
                                Select Role
                            </option>

<?php foreach ($roles as $r) { ?>

<?php } ?>

</select>

</div>

</form>

<?php if ($selected_role > 0) { ?>

<?php foreach ($grouped_menu as $sec_id => $section_data) { ?>

<?php foreach ($section_data['parents'] as $p_info) { 
                                        $parent = $p_info['parent_item'];
                                        $submenus = $p_info['submenus'];
                                        $parent_url = trim((string)($parent['url'] ?? ''));
                                        $has_parent_checkbox = ($parent_url !== '' && $parent_url !== '#');
                                    ?>

<?php if ((int)($parent['is_enabled'] ?? 1) === 0) { ?>
                                                        <span class="badge bg-secondary ms-1" style="font-size: 0.65rem;">Disabled</span>
                                                    <?php } ?>
                                                </div>

<?php if (!empty($submenus)) { ?>

<div class="ps-2">
                                                            <div class="small text-muted fw-bold mb-2">Submenus:</div>
                                                            <?php foreach ($submenus as $sub) { ?>

<div class="form-check mb-2">
                                                                    <input
                                                                        class="form-check-input"
                                                                        type="checkbox"
                                                                        name="menu_ids[]"
                                                                        value="<?= (int)$sub['id'] ?>"
                                                                        id="menu_<?= (int)$sub['id'] ?>"
                                                                        <?= in_array($sub['id'], $current_permissions) ? 'checked' : '' ?>
                                                                    >
                                                                    <label class="form-check-label small" for="menu_<?= (int)$sub['id'] ?>">
                                                                        ↳ <?= h($sub['title']) ?>
                                                                        <?php if ((int)$sub['is_enabled'] === 0) { ?>
                                                                            <span class="badge bg-secondary ms-1" style="font-size: 0.6rem;">Disabled</span>
                                                                        <?php } ?>
                                                                    </label>
                                                                </div>

<?php } ?>
                                                        </div>

<?php } else { ?>

<div class="text-muted small ps-2 py-1">
                                                            <em>No Submenus</em>
                                                        </div>

<?php } ?>

</div>

<?php } ?>

</div>

<?php } ?>

<div class="mt-4">
                        <button
                            type="submit"
                            class="btn btn-primary fw-bold px-4 fs-6"
                        >
                            Save Permissions
                        </button>
                    </div>

</form>

<?php } ?>

</div>

<?php require_once __DIR__ . '/partials/footer.php'; ?>