Subversion Repositories PEEPS

#!/usr/bin/perl

# Redirect error messages to a log of my choosing. (it's annoying to filter for errors in the shared env)

#my $error_log_path = $ENV{SERVER_NAME} eq "volunteers.rollercon.com" ? "/home3/rollerco/logs/" : "/tmp/";

#close STDERR;

#open STDERR, '>>', $error_log_path.'vorc_error.log' or warn "Failed to open redirected logfile ($0): $!";

#warn "Redirecting errors to ${error_log_path}vorc_error.log";

use strict;

use PEEPS;

use CGI qw/param header start_html url/;

use CGI::Cookie;

our $h = HTML::Tiny->new( mode => 'html' );

my $dbh = getRCDBH ();

my $cookie_string = authenticate (1) || die;

my ($EML, $PWD, $LVL) = split /&/, $cookie_string;

my $user = $ORCUSER;

#my $activated = $ORCUSER->{access};

my %FIELDS = (

  id          => 5,

  policy_name => 10,

  fee         => 15,

  person_id   => 20,

  created     => 25,

  start       => 30,

  end         => 35,

  active      => 40,

  terminated  => 45,

  policy_id   => 50,

  square_id   => 55

);

sub byfield { $FIELDS{$a} <=> $FIELDS{$b}; }

#foreach (sort keys %ENV) {

#	warn "$_: $ENV{$_}";

#}

use DateTime;

my $dt = DateTime->today;

$dt =~ s/T00\:00\:00$//;

my $coverage_id = WebDB::trim scalar param ("id") // ERROR ("Missing PolicyID", "Can't view a policy without an ID to look for.", "No PolicyID provided to View Policy");

my $userid = WebDB::trim scalar param ("userid") // $user->{id};

my $terminate = WebDB::trim scalar param ("terminate") // undef;

my $reinstate = WebDB::trim scalar param ("reinstate") // undef;

my $coverage = getCoverageByID ($coverage_id, $userid) // ERROR ("PolicyID Not Found", "Can't find a policy (that belongs to this user) with that ID.", "PolicyID provided to View Policy not found");

if ($terminate) {

  ERROR ("Unauthorized", "Only System Admins can terminate a policy", "SECURITY: Attempt to terminate policy $coverage->{id} for $coverage->{person_id}") unless $user->{SYSADMIN};

  ERROR ("Invalid Policy", "You attempted to terminate a policy that isn't valid", "Attempted to terminate invalid policy $coverage->{id} for $coverage->{person_id}") unless isPersonCovered ($coverage->{person_id}) eq $coverage->{id};

  # We've checked that they're a SysAdmin and that this is the current valid policy.  Go ahead and terminate it.

  use WebDB;

  my $dbh = WebDB::connect;

  $dbh->do ("update coverage set coverage.terminated = date(now()), active = null where id = ? and person_id = ?", undef, $coverage->{id}, $coverage->{person_id});

  logit ($user->{id}, "Terminated policy $coverage->{id} for person $coverage->{person_id}");

  logit ($coverage->{person_id}, "Policy $coverage->{id} was terminated by a System Admin");

  $coverage = getCoverageByID ($coverage_id, $userid);

}

if ($reinstate) {

  ERROR ("Unauthorized", "Only System Admins can reinstate a policy", "SECURITY: Attempt to reinstate policy $coverage->{id} for $coverage->{person_id}") unless $user->{SYSADMIN};

  ERROR ("Invalid Policy", "You attempted to reinstate a policy that isn't valid", "Attempted to reinstate invalid policy $coverage->{id} for $coverage->{person_id}") unless $coverage->{terminated} =~ /^\d{4}-\d{2}-\d{2}$/;

  # We've checked that they're a SysAdmin and that this is the current valid policy.  Go ahead and terminate it.

  use WebDB;

  my $dbh = WebDB::connect;

  ($coverage->{still_valid}) = $dbh->selectrow_array ("select if(datediff(?, date(now())) >= 0, 1, 0)", undef, $coverage->{end});

  ERROR ("Invalid Policy", "You attempted to reinstate a policy that ended before today", "Attempted to reinstate already ended policy $coverage->{id} for $coverage->{person_id}") unless $coverage->{still_valid};

  $dbh->do ("update coverage set coverage.terminated = null, active = 1 where id = ? and person_id = ?", undef, $coverage->{id}, $coverage->{person_id});

  logit ($user->{id}, "Reinstated policy $coverage->{id} for person $coverage->{person_id}");

  logit ($coverage->{person_id}, "Policy $coverage->{id} was reinstated by a System Admin");

  $coverage = getCoverageByID ($coverage_id, $userid);

}

if ($coverage->{terminated}) {

  use WebDB;

  my $dbh = WebDB::connect;

  ($coverage->{still_valid}) = $dbh->selectrow_array ("select if(datediff(?, date(now())) >= 0, 1, 0)", undef, $coverage->{end});

}

#$coverage->{active} = $coverage->{active} ? "True" : "False";

$coverage->{active} = isPersonCovered ($coverage->{person_id}) eq $coverage->{id} ? "True" : "False";

$coverage->{terminated} = "False" unless $coverage->{terminated};

$coverage->{created} .= " UTC";

$coverage->{terminated} .= ($user->{SYSADMIN} and isPersonCovered ($coverage->{person_id}) eq $coverage->{id}) ? "  ".$h->button ({onClick=>"if (confirm('Are you sure you want to terminate this policy?')) { window.location.href='view_policy?terminate=true&id=$coverage->{id}&userid=$coverage->{person_id}'; } else { return false; }"}, "Terminate") : "";

$coverage->{terminated} .= ($user->{SYSADMIN} and $coverage->{terminated} =~ /^\d{4}-\d{2}-\d{2}$/ and $coverage->{still_valid}) ? "  ".$h->button ({onClick=>"if (confirm('Are you sure you want to reinstate this policy?')) { window.location.href='view_policy?reinstate=true&id=$coverage->{id}&userid=$coverage->{person_id}'; } else { return false; }"}, "Reinstate") : "";

$coverage->{person_id} = $coverage->{person_id} ? $h->a ({ href=>"view_user?person_id=$coverage->{person_id}" }, $coverage->{person_id}." [".getUser ($coverage->{person_id})->{derby_name}."]") : "";

print header (-cookie=>CGI::Cookie->new(-name=>'PEEPSAUTH',-value=>"$cookie_string"));

printRCHeader("View Policy: ".$coverage_id);

print $h->div ({ class=>"index" }, [$h->p ({ class=>"heading" }, "Policy Details:"),

        $h->div ({ class=>"rTable", style=>"min-width: 0%;" }, [

          $h->div ({ class=>"rTableRow" }, map { [$h->div ({ class=>"rTableCellr", style=>"font-size: unset;" }, ucfirst ($_).": ", $coverage->{$_})] } sort byfield grep { exists $FIELDS{$_} } keys %{$coverage})]),

          $h->p ($h->input ({ type=>"button", onClick=>"window.location.href='$ENV{HTTP_REFERER}'", value=>"Back"}))]);

print $h->close ("body"), $h->close ("html");

sub ERROR {

  my $header = shift // "Unknown Error";

  my $text   = shift // "Something unexpectedly bad happened.";

  my $logmsg = shift // "Unknown Error happened while viewing the Attestation page";

  print header (-cookie=>CGI::Cookie->new(-name=>'PEEPSAUTH',-value=>"$cookie_string"));

  printRCHeader("Atttestation");

  print $h->close ("table");

  print $h->h2 ($header);

  print $h->div ({ style=>"max-width:450px;" }, $text, " ");

  print $h->button ({onclick => "window.location.href='/';"}, "Home");

  print $h->close ("BODY", "HTML");

  logit ($user->{id}, $logmsg);

  exit;

}