prcs_role.php

来自「通达OA2007SE源代码 非常好的」· PHP 代码 · 共 112 行

<?
  function prcs_role ($FLOW_ID, $PRCS_ID)
  {
    global $connection;
    global $LOGIN_USER_ID;
    global $LOGIN_DEPT_ID;
    global $LOGIN_USER_PRIV;
    $PRCS_ROLE = 0;
    $query_str = '';
    if (($FLOW_ID != 0))
    {
      ($query_str .= ((''.' and FLOW_ID=').$FLOW_ID));
    }
    if (($PRCS_ID != 0))
    {
      ($query_str .= ((''.' and PRCS_ID=').$PRCS_ID));
    }
    $query = 'SELECT * from FLOW_TYPE where FLOW_TYPE=2';
    if (($FLOW_ID != 0))
    {
      ($query .= ((''.' and FLOW_ID=').$FLOW_ID));
    }
    $cursor = exequery ($connection, $query);
    if ($ROW = mysql_fetch_array ($cursor))
    {
      if (($PRCS_ID != 1))
      {
        return 1;
      }
      else
      {
        $NEW_USER = $ROW['NEW_USER'];
        if (find_id ($NEW_USER, $LOGIN_USER_ID))
        {
          return 1;
        }
        else
        {
          return 0;
        }
      }
    }
    $query = ((((((''.'SELECT * from FLOW_PROCESS where (PRCS_USER like \'%,').$LOGIN_USER_ID).',%\' or PRCS_USER like \'').$LOGIN_USER_ID).',%\')').$query_str);
    $cursor = exequery ($connection, $query);
    if ($ROW = mysql_fetch_array ($cursor))
    {
      return 1;
    }
    $query = ((((((''.'SELECT * from FLOW_PROCESS where (InStr(PRCS_DEPT,\',').$LOGIN_DEPT_ID).',\')>0 or InStr(PRCS_DEPT,\'').$LOGIN_DEPT_ID).',\')=1)').$query_str);
    $cursor = exequery ($connection, $query);
    if ($ROW = mysql_fetch_array ($cursor))
    {
      return 1;
    }
    $query = ((((((''.'SELECT * from FLOW_PROCESS where (InStr(PRCS_PRIV,\',').$LOGIN_USER_PRIV).',\')>0 or InStr(PRCS_PRIV,\'').$LOGIN_USER_PRIV).',\')=1)').$query_str);
    $cursor = exequery ($connection, $query);
    if ($ROW = mysql_fetch_array ($cursor))
    {
      return 1;
    }
    if (($PRCS_ID == 0))
    {
      $query = ((((((((((''.'SELECT * from FLOW_TYPE where (MANAGE_USER like \'%,').$LOGIN_USER_ID).',%\' or MANAGE_USER like \'').$LOGIN_USER_ID).',%\' or QUERY_USER like \'%,').$LOGIN_USER_ID).',%\' or QUERY_USER like \'').$LOGIN_USER_ID).',%\') and FLOW_ID=').$FLOW_ID);
      $cursor = exequery ($connection, $query);
      if ($ROW = mysql_fetch_array ($cursor))
      {
        return 1;
      }
    }
    return 0;
  }
  function run_role ($RUN_ID, $PRCS_ID)
  {
    global $connection;
    global $LOGIN_USER_ID;
    global $LOGIN_USER_PRIV;
    $query_str = (((''.' and RUN_ID=\'').$RUN_ID).'\'');
    if ((($PRCS_ID != '0') AND ($PRCS_ID != '')))
    {
      ($query_str .= ((''.' and PRCS_ID=').$PRCS_ID));
    }
    $query = ((((''.'SELECT * from FLOW_RUN_PRCS where USER_ID=\'').$LOGIN_USER_ID).'\'').$query_str);
    $cursor = exequery ($connection, $query);
    if ($ROW = mysql_fetch_array ($cursor))
    {
      return 1;
    }
    if (($LOGIN_USER_PRIV == '1'))
    {
      return 3;
    }
    $query = (((''.'SELECT * from FLOW_RUN where RUN_ID=\'').$RUN_ID).'\'');
    $cursor = exequery ($connection, $query);
    if ($ROW = mysql_fetch_array ($cursor))
    {
      $FLOW_ID = $ROW['FLOW_ID'];
    }
    else
    {
      return 0;
    }
    $query = ((((((((((''.'SELECT * from FLOW_TYPE where (MANAGE_USER like \'%,').$LOGIN_USER_ID).',%\' or MANAGE_USER like \'').$LOGIN_USER_ID).',%\' or QUERY_USER like \'%,').$LOGIN_USER_ID).',%\' or QUERY_USER like \'').$LOGIN_USER_ID).',%\') and FLOW_ID=').$FLOW_ID);
    $cursor = exequery ($connection, $query);
    if ($ROW = mysql_fetch_array ($cursor))
    {
      return 2;
    }
    return 0;
  }
  include_once 'inc/auth.php';
?>