<?php
	/* (C) DairyWindow 2012-2017 */
	
	require "inc/connect.php";
	
	$title = "Access levels";
	require "inc/head.php";
	$menu = "editaccess";
	require "inc/menu.php";
	
	if($debug) showdebug();
	
	function showlevels($id, $value){
		echo "<select name='".$id."' class='form-control'>
			<option value='1' "; if($value==1 || $value=='1') echo "selected"; echo ">Administrators only</option>
			<option value='2' "; if($value==2 || $value=='2') echo "selected"; echo ">Manager and above</option>
			<option value='3' "; if($value==3 || $value=='3') echo "selected"; echo ">Supervisor and above</option>
			<option value='4' "; if($value==4 || $value=='4') echo "selected"; echo ">Operator and above</option>
			<option value='5' "; if($value==5 || $value=='5') echo "selected"; echo ">Everyone</option>
		</select>";
	}
	
	if(isset($_POST['submit']) && ($_SESSION['userLevel']==1 || $_SESSION['userLevel']=='1')){
		$sql="
			Update dw_access Set
				admin_cypher_add            = ?,
				admin_cypher_edit           = ?,
				admin_cypher_delete         = ?,
				admin_unit_add              = ?,
				admin_unit_edit             = ?,
				admin_unit_delete           = ?,
				admin_location_add          = ?,
				admin_location_edit         = ?,
				admin_group_add             = ?,
				admin_group_edit            = ?,
				admin_test_add              = ?,
				admin_test_edit             = ?,
				admin_calc_add              = ?,
				admin_calc_edit             = ?,
				admin_coa_add               = ?,
				admin_coa_edit              = ?,
				admin_coa_delete            = ?,
				admin_limit_add             = ?,
				admin_limit_edit            = ?,
				admin_limit_delete          = ?,
				admin_spec_add              = ?,
				admin_spec_edit             = ?,
				admin_expiry_add            = ?,
				admin_expiry_edit           = ?,
				admin_user_add              = ?,
				admin_user_edit             = ?,
				admin_settings_edit         = ?,
				production_shiftnotes_edit  = ?,
				admin_form_add              = ?,
				admin_form_edit             = ?,
				production_subforms_add     = ?,
				production_subforms_edit    = ?,
				production_submod_add       = ?,
				production_submod_edit      = ?,
				production_submod_delete    = ?,
				production_prodrelease_add  = ?,
				production_prodrelease_edit = ?,
				production_pilot_add        = ?,
				production_pilot_edit       = ?,
				results_results_add         = ?,
				results_results_edit        = ?,
				results_results_delete      = ?,
				results_ivp_add             = ?,
				results_ivp_edit            = ?,
				results_ivp_delete          = ?,
				utils_import_add            = ?,
				utils_container_add         = ?,
				utils_container_edit        = ?,
				utils_container_delete      = ?,
				utils_store_add             = ?,
				utils_store_edit            = ?,
				utils_store_delete          = ?
			Where accessSite              = ?
		";
		if(!savesql($link, $sql, "iiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii", array(
			$_POST['admin_cypher_add'           ],
			$_POST['admin_cypher_edit'          ],
			$_POST['admin_cypher_delete'        ],
			$_POST['admin_unit_add'             ],
			$_POST['admin_unit_edit'            ],
			$_POST['admin_unit_delete'          ],
			$_POST['admin_location_add'         ],
			$_POST['admin_location_edit'        ],
			$_POST['admin_group_add'            ],
			$_POST['admin_group_edit'           ],
			$_POST['admin_test_add'             ],
			$_POST['admin_test_edit'            ],
			$_POST['admin_calc_add'             ],
			$_POST['admin_calc_edit'            ],
			$_POST['admin_coa_add'              ],
			$_POST['admin_coa_edit'             ],
			$_POST['admin_coa_delete'           ],
			$_POST['admin_limit_add'            ],
			$_POST['admin_limit_edit'           ],
			$_POST['admin_limit_delete'         ],
			$_POST['admin_spec_add'             ],
			$_POST['admin_spec_edit'            ],
			$_POST['admin_expiry_add'           ],
			$_POST['admin_expiry_edit'          ],
			$_POST['admin_user_add'             ],
			$_POST['admin_user_edit'            ],
			$_POST['admin_settings_edit'        ],
			$_POST['production_shiftnotes_edit' ],
			$_POST['admin_form_add'             ],
			$_POST['admin_form_edit'            ],
			$_POST['production_subforms_add'    ],
			$_POST['production_subforms_edit'   ],
			$_POST['production_submod_add'      ],
			$_POST['production_submod_edit'     ],
			$_POST['production_submod_delete'   ],
			$_POST['production_prodrelease_add' ],
			$_POST['production_prodrelease_edit'],
			$_POST['production_pilot_add'       ],
			$_POST['production_pilot_edit'      ],
			$_POST['results_results_add'        ],
			$_POST['results_results_edit'       ],
			$_POST['results_results_delete'     ],
			$_POST['results_ivp_add'            ],
			$_POST['results_ivp_edit'           ],
			$_POST['results_ivp_delete'         ],
			$_POST['utils_import_add'           ],
			$_POST['utils_container_add'        ],
			$_POST['utils_container_edit'       ],
			$_POST['utils_container_delete'     ],
			$_POST['utils_store_add'            ],
			$_POST['utils_store_edit'           ],
			$_POST['utils_store_delete'         ],
			$_SESSION['userSite']
		), __FILE__, __LINE__)) reporterror(get_error(), $sql, $_SERVER['REQUEST_URI'], __FILE__, __LINE__);
		$message['type']="ok";
		$message['text']="Settings have been saved";
		$_SESSION['admin_cypher_add'           ] = clean($_POST['admin_cypher_add'           ]);
		$_SESSION['admin_cypher_edit'          ] = clean($_POST['admin_cypher_edit'          ]);
		$_SESSION['admin_cypher_delete'        ] = clean($_POST['admin_cypher_delete'        ]);
		$_SESSION['admin_unit_add'             ] = clean($_POST['admin_unit_add'             ]);
		$_SESSION['admin_unit_edit'            ] = clean($_POST['admin_unit_edit'            ]);
		$_SESSION['admin_unit_delete'          ] = clean($_POST['admin_unit_delete'          ]);
		$_SESSION['admin_location_add'         ] = clean($_POST['admin_location_add'         ]);
		$_SESSION['admin_location_edit'        ] = clean($_POST['admin_location_edit'        ]);
		$_SESSION['admin_group_add'            ] = clean($_POST['admin_group_add'            ]);
		$_SESSION['admin_group_edit'           ] = clean($_POST['admin_group_edit'           ]);
		$_SESSION['admin_test_add'             ] = clean($_POST['admin_test_add'             ]);
		$_SESSION['admin_test_edit'            ] = clean($_POST['admin_test_edit'            ]);
		$_SESSION['admin_calc_add'             ] = clean($_POST['admin_calc_add'             ]);
		$_SESSION['admin_calc_edit'            ] = clean($_POST['admin_calc_edit'            ]);
		$_SESSION['admin_coa_add'              ] = clean($_POST['admin_coa_add'              ]);
		$_SESSION['admin_coa_edit'             ] = clean($_POST['admin_coa_edit'             ]);
		$_SESSION['admin_coa_delete'           ] = clean($_POST['admin_coa_delete'           ]);
		$_SESSION['admin_limit_add'            ] = clean($_POST['admin_limit_add'            ]);
		$_SESSION['admin_limit_edit'           ] = clean($_POST['admin_limit_edit'           ]);
		$_SESSION['admin_limit_delete'         ] = clean($_POST['admin_limit_delete'         ]);
		$_SESSION['admin_spec_add'             ] = clean($_POST['admin_spec_add'             ]);
		$_SESSION['admin_spec_edit'            ] = clean($_POST['admin_spec_edit'            ]);
		$_SESSION['admin_expiry_add'           ] = clean($_POST['admin_expiry_add'           ]);
		$_SESSION['admin_expiry_edit'          ] = clean($_POST['admin_expiry_edit'          ]);
		$_SESSION['admin_user_add'             ] = clean($_POST['admin_user_add'             ]);
		$_SESSION['admin_user_edit'            ] = clean($_POST['admin_user_edit'            ]);
		$_SESSION['admin_settings_edit'        ] = clean($_POST['admin_settings_edit'        ]);
		$_SESSION['production_shiftnotes_edit' ] = clean($_POST['production_shiftnotes_edit' ]);
		$_SESSION['admin_form_add'             ] = clean($_POST['admin_form_add'             ]);
		$_SESSION['admin_form_edit'            ] = clean($_POST['admin_form_edit'            ]);
		$_SESSION['production_subforms_add'    ] = clean($_POST['production_subforms_add'    ]);
		$_SESSION['production_subforms_edit'   ] = clean($_POST['production_subforms_edit'   ]);
		$_SESSION['production_submod_add'      ] = clean($_POST['production_submod_add'      ]);
		$_SESSION['production_submod_edit'     ] = clean($_POST['production_submod_edit'     ]);
		$_SESSION['production_submod_delete'   ] = clean($_POST['production_submod_delete'   ]);
		$_SESSION['production_prodrelease_add' ] = clean($_POST['production_prodrelease_add' ]);
		$_SESSION['production_prodrelease_edit'] = clean($_POST['production_prodrelease_edit']);
		$_SESSION['production_pilot_add'       ] = clean($_POST['production_pilot_add'       ]);
		$_SESSION['production_pilot_edit'      ] = clean($_POST['production_pilot_edit'      ]);
		$_SESSION['results_results_add'        ] = clean($_POST['results_results_add'        ]);
		$_SESSION['results_results_edit'       ] = clean($_POST['results_results_edit'       ]);
		$_SESSION['results_results_delete'     ] = clean($_POST['results_results_delete'     ]);
		$_SESSION['results_ivp_add'            ] = clean($_POST['results_ivp_add'            ]);
		$_SESSION['results_ivp_edit'           ] = clean($_POST['results_ivp_edit'           ]);
		$_SESSION['results_ivp_delete'         ] = clean($_POST['results_ivp_delete'         ]);
		$_SESSION['utils_import_add'           ] = clean($_POST['utils_import_add'           ]);
		$_SESSION['utils_container_add'        ] = clean($_POST['utils_container_add'        ]);
		$_SESSION['utils_container_edit'       ] = clean($_POST['utils_container_edit'       ]);
		$_SESSION['utils_container_delete'     ] = clean($_POST['utils_container_delete'     ]);
		$_SESSION['utils_store_add'            ] = clean($_POST['utils_store_add'            ]);
		$_SESSION['utils_store_edit'           ] = clean($_POST['utils_store_edit'           ]);
		$_SESSION['utils_store_delete'         ] = clean($_POST['utils_store_delete'         ]);
	}
	
?>

	<div id="topDIV" class="page-header"><h1 class="text-center"><?php echo $title; ?></h1></div>
	
	<div id="main" class="container" >
		<form method="post">
			<div class="row">
				<div class="col-md-3"><strong>Area</strong></div>
				<div class="col-md-3"><strong>Add/Create/Insert</strong></div>
				<div class="col-md-3"><strong>Edit/Modify/Change</strong></div>
				<div class="col-md-3"><strong>Delete/Remove</strong></div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Cyphers/Batches</p></div>
				<div class="col-md-3"><?php showlevels('admin_cypher_add'             , $_SESSION['admin_cypher_add'             ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_cypher_edit'            , $_SESSION['admin_cypher_edit'            ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_cypher_delete'          , $_SESSION['admin_cypher_delete'          ]); ?></div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Samples</p></div>
				<div class="col-md-3"><?php showlevels('admin_unit_add'               , $_SESSION['admin_unit_add'               ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_unit_edit'              , $_SESSION['admin_unit_edit'              ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_unit_delete'            , $_SESSION['admin_unit_delete'            ]); ?></div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Sample locations</p></div>
				<div class="col-md-3"><?php showlevels('admin_location_add'           , $_SESSION['admin_location_add'           ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_location_edit'          , $_SESSION['admin_location_edit'          ]); ?></div>
				<div class="col-md-3">&nbsp;</div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Test groups</p></div>
				<div class="col-md-3"><?php showlevels('admin_group_add'              , $_SESSION['admin_group_add'              ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_group_edit'             , $_SESSION['admin_group_edit'             ]); ?></div>
				<div class="col-md-3">&nbsp;</div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Tests</p></div>
				<div class="col-md-3"><?php showlevels('admin_test_add'               , $_SESSION['admin_test_add'               ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_test_edit'              , $_SESSION['admin_test_edit'              ]); ?></div>
				<div class="col-md-3">&nbsp;</div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Calculations</p></div>
				<div class="col-md-3"><?php showlevels('admin_calc_add'               , $_SESSION['admin_calc_add'               ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_calc_edit'              , $_SESSION['admin_calc_edit'              ]); ?></div>
				<div class="col-md-3">&nbsp;</div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Tests on COA</p></div>
				<div class="col-md-3"><?php showlevels('admin_coa_add'                , $_SESSION['admin_coa_add'                ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_coa_edit'               , $_SESSION['admin_coa_edit'               ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_coa_delete'             , $_SESSION['admin_coa_delete'             ]); ?></div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Test limits</p></div>
				<div class="col-md-3"><?php showlevels('admin_limit_add'              , $_SESSION['admin_limit_add'              ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_limit_edit'             , $_SESSION['admin_limit_edit'             ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_limit_delete'           , $_SESSION['admin_limit_delete'           ]); ?></div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Products</p></div>
				<div class="col-md-3"><?php showlevels('admin_spec_add'               , $_SESSION['admin_spec_add'               ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_spec_edit'              , $_SESSION['admin_spec_edit'              ]); ?></div>
				<div class="col-md-3">&nbsp;</div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Expirys</p></div>
				<div class="col-md-3"><?php showlevels('admin_expiry_add'             , $_SESSION['admin_expiry_add'             ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_expiry_edit'            , $_SESSION['admin_expiry_edit'            ]); ?></div>
				<div class="col-md-3">&nbsp;</div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Users</p></div>
				<div class="col-md-3"><?php showlevels('admin_user_add'               , $_SESSION['admin_user_add'               ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_user_edit'              , $_SESSION['admin_user_edit'              ]); ?></div>
				<div class="col-md-3">&nbsp;</div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Settings</p></div>
				<div class="col-md-3">&nbsp;</div>
				<div class="col-md-3"><?php showlevels('admin_settings_edit'          , $_SESSION['admin_settings_edit'          ]); ?></div>
				<div class="col-md-3">&nbsp;</div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Shift notes</p></div>
				<div class="col-md-3">&nbsp;</div>
				<div class="col-md-3"><?php showlevels('production_shiftnotes_edit'   , $_SESSION['production_shiftnotes_edit'   ]); ?></div>
				<div class="col-md-3">&nbsp;</div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Sub form names</p></div>
				<div class="col-md-3"><?php showlevels('admin_form_add'               , $_SESSION['admin_form_add'               ]); ?></div>
				<div class="col-md-3"><?php showlevels('admin_form_edit'              , $_SESSION['admin_form_edit'              ]); ?></div>
				<div class="col-md-3">&nbsp;</div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Submission forms</p></div>
				<div class="col-md-3"><?php showlevels('production_subforms_add'      , $_SESSION['production_subforms_add'      ]); ?></div>
				<div class="col-md-3"><?php showlevels('production_subforms_edit'     , $_SESSION['production_subforms_edit'     ]); ?></div>
				<div class="col-md-3">&nbsp;</div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Tests on sub form</p></div>
				<div class="col-md-3"><?php showlevels('production_submod_add'        , $_SESSION['production_submod_add'        ]); ?></div>
				<div class="col-md-3"><?php showlevels('production_submod_edit'       , $_SESSION['production_submod_edit'       ]); ?></div>
				<div class="col-md-3"><?php showlevels('production_submod_delete'     , $_SESSION['production_submod_delete'     ]); ?></div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Production release</p></div>
				<div class="col-md-3"><?php showlevels('production_prodrelease_add'   , $_SESSION['production_prodrelease_add'   ]); ?></div>
				<div class="col-md-3"><?php showlevels('production_prodrelease_edit'  , $_SESSION['production_prodrelease_edit'  ]); ?></div>
				<div class="col-md-3">&nbsp;</div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Pilot results</p></div>
				<div class="col-md-3"><?php showlevels('production_pilot_add'         , $_SESSION['production_pilot_add'         ]); ?></div>
				<div class="col-md-3"><?php showlevels('production_pilot_edit'        , $_SESSION['production_pilot_edit'        ]); ?></div>
				<div class="col-md-3">&nbsp;</div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Results</p></div>
				<div class="col-md-3"><?php showlevels('results_results_add'          , $_SESSION['results_results_add'          ]); ?></div>
				<div class="col-md-3"><?php showlevels('results_results_edit'         , $_SESSION['results_results_edit'         ]); ?></div>
				<div class="col-md-3"><?php showlevels('results_results_delete'       , $_SESSION['results_results_delete'       ]); ?></div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Comparisons</p></div>
				<div class="col-md-3"><?php showlevels('results_ivp_add'              , $_SESSION['results_ivp_add'              ]); ?></div>
				<div class="col-md-3"><?php showlevels('results_ivp_edit'             , $_SESSION['results_ivp_edit'             ]); ?></div>
				<div class="col-md-3"><?php showlevels('results_ivp_delete'           , $_SESSION['results_ivp_delete'           ]); ?></div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Import results</p></div>
				<div class="col-md-3"><?php showlevels('utils_import_add'             , $_SESSION['utils_import_add'             ]); ?></div>
				<div class="col-md-3">&nbsp;</div>
				<div class="col-md-3">&nbsp;</div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">Container</p></div>
				<div class="col-md-3"><?php showlevels('utils_container_add'          , $_SESSION['utils_container_add'          ]); ?></div>
				<div class="col-md-3"><?php showlevels('utils_container_edit'         , $_SESSION['utils_container_edit'         ]); ?></div>
				<div class="col-md-3"><?php showlevels('utils_container_delete'       , $_SESSION['utils_container_delete'       ]); ?></div>
			</div>
			<div class="row">
				<div class="col-md-2"><p class="form-control-static">File store</p></div>
				<div class="col-md-3"><?php showlevels('utils_store_add'              , $_SESSION['utils_store_add'              ]); ?></div>
				<div class="col-md-3"><?php showlevels('utils_store_edit'             , $_SESSION['utils_store_edit'             ]); ?></div>
				<div class="col-md-3"><?php showlevels('utils_store_delete'           , $_SESSION['utils_store_delete'           ]); ?></div>
			</div>
			
			<div class="text-center">
				<button type="submit" name="submit" class="btn btn-default btn-primary"><span class='glyphicon glyphicon-save' aria-hidden='true'></span>&nbsp;Save</button>
			</div>
		</form>
	</div>
	<?php
		require "inc/footer.php";
	?>