View Code - 20260722

functional_role_permissions.php | 20260722_120325.php Initial Domain Snapshot

<?php
require_once __DIR__ . '/modules/auth/page_acl.php';
require_once __DIR__ . '/modules/activity/activity_logger.php';

$ctx = page_require_access('functional_role_permissions');

$u = $ctx['user'] ?? null;
$company_id = (int)($ctx['company_id'] ?? 0);
$pdo = $ctx['pdo'] ?? null;

if (!$pdo) {
    require_once __DIR__ . '/core/db.php';
}

function h($v){
    return htmlspecialchars((string)$v, ENT_QUOTES, 'UTF-8');
}

/* =========================
   FUNCTIONAL ROLES
========================= */

$roles = [];

$stmt = $pdo->prepare("
    SELECT id, role_name
    FROM functional_roles
    WHERE company_id = ?
    AND is_active = 1
    ORDER BY role_name ASC
");

$stmt->execute([$company_id]);

$roles = $stmt->fetchAll(PDO::FETCH_ASSOC);

/* =========================
   MENU ITEMS
========================= */

$menu_items = [];

$stmt = $pdo->prepare("
    SELECT
        nms.id AS section_id,
        nms.name AS section_name,

nmi.id,
        nmi.title,
        nmi.url

FROM nav_menu_items nmi

INNER JOIN nav_menu_sections nms
        ON nms.id = nmi.section_id

WHERE nmi.is_enabled = 1
    AND (nmi.company_id = 0 OR nmi.company_id = ?)

ORDER BY
        nms.sort_order,
        nmi.sort_order,
        nmi.title
");

$stmt->execute([$company_id]);

$menu_items = $stmt->fetchAll(PDO::FETCH_ASSOC);

/* =========================
   SELECTED ROLE
========================= */

$selected_role = (int)($_GET['role_id'] ?? $_POST['role_id'] ?? 0);

$success = '';
$error   = '';

/* =========================
   SAVE
========================= */

if ($_SERVER['REQUEST_METHOD'] === 'POST' && $selected_role > 0) {

$menu_ids = array_unique(
        array_map(
            'intval',
            $_POST['menu_ids'] ?? []
        )
    );

try {

$pdo->beginTransaction();

/* =========================
           DELETE OLD
        ========================= */

$stmt = $pdo->prepare("
            DELETE FROM functional_role_menu_items
            WHERE company_id = ?
            AND functional_role_id = ?
        ");

$stmt->execute([
            $company_id,
            $selected_role
        ]);

/* =========================
           INSERT NEW
        ========================= */

if (!empty($menu_ids)) {

$stmt = $pdo->prepare("
                INSERT INTO functional_role_menu_items
                (
                    company_id,
                    functional_role_id,
                    menu_item_id,
                    created_by
                )
                VALUES
                (
                    :cid,
                    :rid,
                    :mid,
                    :by
                )
            ");

foreach ($menu_ids as $mid) {

if ($mid <= 0) {
                    continue;
                }

$stmt->execute([
                    ':cid' => $company_id,
                    ':rid' => $selected_role,
                    ':mid' => $mid,
                    ':by'  => (int)($u['id'] ?? 0),
                ]);
            }
        }

$pdo->commit();

activity_log([
            'company_id'  => $company_id,
            'user_id'     => (int)($u['id'] ?? 0),
            'module'      => 'functional_roles',
            'action_name' => 'edit',
            'entity_type' => 'functional_role_permission',
            'entity_id'   => $selected_role,
            'remarks'     => 'Updated functional role menu permissions'
        ]);

header("Location: ?role_id=".$selected_role."&success=1");
        exit;

} catch (Throwable $e) {

$pdo->rollBack();

$error = $e->getMessage();
    }
}

if (isset($_GET['success'])) {
    $success = 'Functional role permissions updated successfully.';
}

/* =========================
   CURRENT ROLE ACCESS
========================= */

$current_permissions = [];

if ($selected_role > 0) {

$stmt = $pdo->prepare("
        SELECT menu_item_id
        FROM functional_role_menu_items
        WHERE company_id = ?
        AND functional_role_id = ?
    ");

$stmt->execute([
        $company_id,
        $selected_role
    ]);

$current_permissions = $stmt->fetchAll(PDO::FETCH_COLUMN);
}

/* =========================
   HEADER AFTER LOGIC
========================= */

require_once __DIR__ . '/partials/header.php';
?>

<div class="card-header bg-primary text-white">
            <h4 class="mb-0">
                Functional Role Permissions
            </h4>
        </div>

<?php if ($success) { ?>

<?php } ?>

<?php if ($error) { ?>

<?php } ?>

<label class="form-label">
                            Select Functional Role
                        </label>

<option value="">
                                Select Role
                            </option>

<?php foreach ($roles as $r) { ?>

<?php } ?>

</select>

</div>

</form>

<?php if ($selected_role > 0) { ?>

<div class="card-header bg-light">
                            <strong>
                                Menu Access Permissions
                            </strong>
                        </div>

<?php
                                $current_section = '';
                                $shown_urls = [];
                                ?>

<?php foreach ($menu_items as $item) { ?>

<?php
                                    $url = trim((string)$item['url']);

if ($url === '' || $url === '#') {
                                        continue;
                                    }

if (in_array($url, $shown_urls, true)) {
                                        continue;
                                    }

$shown_urls[] = $url;

$section = trim((string)$item['section_name']);
                                    ?>

<?php if ($current_section !== $section) { ?>

<?php
                                        $current_section = $section;
                                        ?>

<?php } ?>

</div>

<?php } ?>

</div>

<button
                            type="submit"
                            class="btn btn-primary"
                        >
                            Save Permissions
                        </button>

</div>

</form>

<?php } ?>

</div>

<?php require_once __DIR__ . '/partials/footer.php'; ?>