Subversion Repositories PEEPS

my $userid = WebDB::trim scalar param ("userid") // $user->{id};

my $terminate = WebDB::trim scalar param ("terminate") // undef;

my $coverage = getCoverageByID ($coverage_id, $userid) // ERROR ("PolicyID Not Found", "Can't find a policy (that belongs to this user) with that ID.", "PolicyID provided to View Policy not found");

if ($terminate) {

  ERROR ("Unauthorized", "Only System Admins can terminate a policy", "SECURITY: Attempt to terminate policy $coverage->{id} for $coverage->{person_id}") unless $user->{SYSADMIN};

  ERROR ("Invalid Policy", "You attempted to terminate a policy that isn't valid", "Attempted to terminate invalid policy $coverage->{id} for $coverage->{person_id}") unless isPersonCovered ($coverage->{person_id}) eq $coverage->{id};

  # We've checked that they're a SysAdmin and that this is the current valid policy.  Go ahead and terminate it.

  use WebDB;

  my $dbh = WebDB::connect;

  $dbh->do ("update coverage set coverage.terminated = date(now()), active = null where id = ? and person_id = ?", undef, $coverage->{id}, $coverage->{person_id});

  logit ($user->{id}, "Terminated policy $coverage->{id} for person $coverage->{person_id}");

  logit ($coverage->{person_id}, "Policy $coverage->{id} was terminated by a System Admin");

  $coverage = getCoverageByID ($coverage_id, $userid);

}

if ($reinstate) {

  ERROR ("Unauthorized", "Only System Admins can reinstate a policy", "SECURITY: Attempt to reinstate policy $coverage->{id} for $coverage->{person_id}") unless $user->{SYSADMIN};

  ERROR ("Invalid Policy", "You attempted to reinstate a policy that isn't valid", "Attempted to reinstate invalid policy $coverage->{id} for $coverage->{person_id}") unless $coverage->{terminated} =~ /^\d{4}-\d{2}-\d{2}$/;

  # We've checked that they're a SysAdmin and that this is the current valid policy.  Go ahead and terminate it.

  use WebDB;

  my $dbh = WebDB::connect;

  ($coverage->{still_valid}) = $dbh->selectrow_array ("select if(datediff(?, date(now())) >= 0, 1, 0)", undef, $coverage->{end});

  ERROR ("Invalid Policy", "You attempted to reinstate a policy that ended before today", "Attempted to reinstate already ended policy $coverage->{id} for $coverage->{person_id}") unless $coverage->{still_valid};

  $dbh->do ("update coverage set coverage.terminated = null, active = 1 where id = ? and person_id = ?", undef, $coverage->{id}, $coverage->{person_id});

  logit ($user->{id}, "Reinstated policy $coverage->{id} for person $coverage->{person_id}");

  logit ($coverage->{person_id}, "Policy $coverage->{id} was reinstated by a System Admin");

  $coverage = getCoverageByID ($coverage_id, $userid);

}

if ($coverage->{terminated}) {

  use WebDB;

  my $dbh = WebDB::connect;

}

$coverage->{active} = isPersonCovered ($coverage->{person_id}) eq $coverage->{id} ? "True" : "False";

$coverage->{terminated} = "False" unless $coverage->{terminated};

$coverage->{created} .= " UTC";

$coverage->{terminated} .= ($user->{SYSADMIN} and isPersonCovered ($coverage->{person_id}) eq $coverage->{id}) ? "  ".$h->button ({onClick=>"if (confirm('Are you sure you want to terminate this policy?')) { window.location.href='view_policy?terminate=true&id=$coverage->{id}&userid=$coverage->{person_id}'; } else { return false; }"}, "Terminate") : "";