From c9f8ca67715ce5ba78e471670ff9161fbc27a06b Mon Sep 17 00:00:00 2001
From: FrancescoUK <francesco.lodolo.uk@gmail.com>
Date: Sat, 30 Apr 2016 22:06:32 +0100
Subject: [PATCH] disable the feature completely in case the permission is not
 granted (#472)

---
 application/helpers/table_helper.php | 32 ++++++++++++++++++++++------
 application/views/configs/manage.php | 26 ++++++++++++++++------
 2 files changed, 46 insertions(+), 12 deletions(-)

diff --git a/application/helpers/table_helper.php b/application/helpers/table_helper.php
index 31a2f5322..454839d3d 100644
--- a/application/helpers/table_helper.php
+++ b/application/helpers/table_helper.php
@@ -145,8 +145,11 @@ function get_people_manage_table($people,$controller)
 	$CI->lang->line('common_first_name'),
 	$CI->lang->line('common_email'),
 	$CI->lang->line('common_phone_number'),
-	'&nbsp',
 	'&nbsp');
+	if($CI->Employee->has_grant('messages', $CI->session->userdata('person_id')))
+	{
+		$headers[] = '&nbsp';
+	}
 	
 	$table.='<thead><tr>';
 	foreach($headers as $header)
@@ -192,8 +195,15 @@ function get_person_data_row($person,$controller)
 	$table_data_row.='<td width="20%">'.character_limiter($person->first_name,13).'</td>';
 	$table_data_row.='<td width="30%">'.mailto($person->email,character_limiter($person->email,22)).'</td>';
 	$table_data_row.='<td width="20%">'.character_limiter($person->phone_number,13).'</td>';
-	$table_data_row.='<td width="3%">'.anchor("Messages/view/$person->person_id", '<span class="glyphicon glyphicon-phone"></span>', array('class'=>"modal-dlg modal-btn-submit", 'title'=>$CI->lang->line('messages_sms_send'))).'</td>';
-	$table_data_row.='<td width="3%">'.anchor($controller_name."/view/$person->person_id", '<span class="glyphicon glyphicon-edit"></span>', array('class'=>"modal-dlg modal-btn-submit", 'title'=>$CI->lang->line($controller_name.'_update'))).'</td>';
+	if($CI->Employee->has_grant('messages', $CI->session->userdata('person_id')))
+	{
+		$table_data_row.='<td width="3%">'.anchor("Messages/view/$person->person_id", '<span class="glyphicon glyphicon-phone"></span>', array('class'=>"modal-dlg modal-btn-submit", 'title'=>$CI->lang->line('messages_sms_send'))).'</td>';
+		$table_data_row.='<td width="3%">'.anchor($controller_name."/view/$person->person_id", '<span class="glyphicon glyphicon-edit"></span>', array('class'=>"modal-dlg modal-btn-submit", 'title'=>$CI->lang->line($controller_name.'_update'))).'</td>';
+	}
+	else
+	{
+		$table_data_row.='<td width="6%">'.anchor($controller_name."/view/$person->person_id", '<span class="glyphicon glyphicon-edit"></span>', array('class'=>"modal-dlg modal-btn-submit", 'title'=>$CI->lang->line($controller_name.'_update'))).'</td>';		
+	}
 	$table_data_row.='</tr>';
 	
 	return $table_data_row;
@@ -230,8 +240,11 @@ function get_supplier_manage_table($suppliers,$controller)
 	$CI->lang->line('common_email'),
 	$CI->lang->line('common_phone_number'),
 	$CI->lang->line('suppliers_supplier_id'),
-	'&nbsp',
 	'&nbsp');
+	if($CI->Employee->has_grant('messages', $CI->session->userdata('person_id')))
+	{
+		$headers[] = '&nbsp';
+	}
 	
 	$table.='<thead><tr>';
 	foreach($headers as $header)
@@ -280,8 +293,15 @@ function get_supplier_data_row($supplier,$controller)
 	$table_data_row.='<td width="20%">'.mailto($supplier->email,character_limiter($supplier->email,22)).'</td>';
 	$table_data_row.='<td width="10%">'.character_limiter($supplier->phone_number,13).'</td>';
 	$table_data_row.='<td width="3%">'.character_limiter($supplier->person_id,5).'</td>';
-	$table_data_row.='<td width="3%">'.anchor("Messages/view/$supplier->person_id", '<span class="glyphicon glyphicon-phone"></span>', array('class'=>"modal-dlg modal-btn-submit", 'title'=>$CI->lang->line('messages_sms_send'))).'</td>';
-	$table_data_row.='<td width="3%">'.anchor($controller_name."/view/$supplier->person_id", '<span class="glyphicon glyphicon-edit"></span>', array('class'=>"modal-dlg modal-btn-submit",'title'=>$CI->lang->line($controller_name.'_update'))).'</td>';
+	if($CI->Employee->has_grant('messages', $CI->session->userdata('person_id')))
+	{
+		$table_data_row.='<td width="3%">'.anchor("Messages/view/$supplier->person_id", '<span class="glyphicon glyphicon-phone"></span>', array('class'=>"modal-dlg modal-btn-submit", 'title'=>$CI->lang->line('messages_sms_send'))).'</td>';
+		$table_data_row.='<td width="3%">'.anchor($controller_name."/view/$supplier->person_id", '<span class="glyphicon glyphicon-edit"></span>', array('class'=>"modal-dlg modal-btn-submit",'title'=>$CI->lang->line($controller_name.'_update'))).'</td>';
+	}
+	else
+	{
+		$table_data_row.='<td width="6%">'.anchor($controller_name."/view/$supplier->person_id", '<span class="glyphicon glyphicon-edit"></span>', array('class'=>"modal-dlg modal-btn-submit",'title'=>$CI->lang->line($controller_name.'_update'))).'</td>';		
+	}
 	$table_data_row.='</tr>';
 	
 	return $table_data_row;
diff --git a/application/views/configs/manage.php b/application/views/configs/manage.php
index 05e7d3470..08c615825 100644
--- a/application/views/configs/manage.php
+++ b/application/views/configs/manage.php
@@ -22,9 +22,16 @@
     <li role="presentation">
         <a data-toggle="tab" href="#invoice" title="<?php echo $this->lang->line('config_invoice_configuration'); ?>"><?php echo $this->lang->line('config_invoice'); ?></a>
     </li>
-    <li role="presentation">
-        <a data-toggle="tab" href="#message" title="<?php echo $this->lang->line('config_message_configuration'); ?>"><?php echo $this->lang->line('config_message'); ?></a>
-    </li>
+	<?php
+	if($this->Employee->has_grant('messages', $this->session->userdata('person_id')))
+	{
+	?>
+		<li role="presentation">
+			<a data-toggle="tab" href="#message" title="<?php echo $this->lang->line('config_message_configuration'); ?>"><?php echo $this->lang->line('config_message'); ?></a>
+		</li>
+	<?php
+	}
+	?>
 </ul>
 
 <div class="tab-content">
@@ -49,9 +56,16 @@
     <div class="tab-pane" id="invoice">
         <?php $this->load->view("configs/invoice_config"); ?>
     </div>
-    <div class="tab-pane" id="message">
-        <?php $this->load->view("configs/message_config"); ?>
-    </div>
+	<?php
+	if($this->Employee->has_grant('messages', $this->session->userdata('person_id')))
+	{
+	?>
+		<div class="tab-pane" id="message">
+			<?php $this->load->view("configs/message_config"); ?>
+		</div>
+	<?php
+	}
+	?>
 </div>
 
 <?php $this->load->view("partial/footer"); ?>