From a02e470970afe775608dc9d7b9ab838b077d2ea5 Mon Sep 17 00:00:00 2001
From: KarpAlex <karpen_ko@hotmail.com>
Date: Tue, 2 Nov 2021 11:28:10 +0100
Subject: [PATCH] displaying and editing BPK field in FAS with permission
 student/bpk

---
 content/student/studentDBDML.php             |  2 ++
 content/student/studentdetailoverlay.xul.php |  8 ++++++--
 content/student/studentoverlay.js.php        |  6 ++++++
 rdf/student.rdf.php                          |  5 ++++-
 system/dbupdate_3.3.php                      | 14 ++++++++++++++
 5 files changed, 32 insertions(+), 3 deletions(-)

diff --git a/content/student/studentDBDML.php b/content/student/studentDBDML.php
index dd3525d1d..d38587b30 100644
--- a/content/student/studentDBDML.php
+++ b/content/student/studentDBDML.php
@@ -428,6 +428,7 @@ if(!$error)
 				$student->geburtsnation = $_POST['geburtsnation'];
 				$student->sprache = $_POST['sprache'];
 				$student->matrikelnr = $_POST['matrikelnummer'];
+				$student->bpk = $_POST['bpk'];
 				$student->updateamum = date('Y-m-d H:i:s');
 				$student->updatevon = $user;
 
@@ -577,6 +578,7 @@ if(!$error)
 				$person->geburtsnation = $_POST['geburtsnation'];
 				$person->sprache = $_POST['sprache'];
 				$person->matr_nr = $_POST['matr_nr'];
+				$person->bpk = $_POST['bpk'];
 				$person->updateamum = date('Y-m-d H:i:s');
 				$person->updatevon = $user;
 
diff --git a/content/student/studentdetailoverlay.xul.php b/content/student/studentdetailoverlay.xul.php
index 813805886..2154e91ac 100644
--- a/content/student/studentdetailoverlay.xul.php
+++ b/content/student/studentdetailoverlay.xul.php
@@ -31,7 +31,9 @@ require_once('../../include/variable.class.php');
 require_once('../../include/functions.inc.php');
 require_once('../../include/benutzerberechtigung.class.php');
 
-$user=get_uid();
+$user = get_uid();
+$rechte = new benutzerberechtigung();
+$rechte->getBerechtigungen($user);
 
 $variable = new variable();
 if(!$variable->loadVariables($user))
@@ -72,7 +74,9 @@ echo '<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>';
 							<label value="Zugangscode" control="student-detail-zugangscode"/>
 							<label id="label-student-detail-link_bewerbungstool" hidden="true" value=""></label>
 							<label class="text-link" href="#" id="label-student-detail-zugangscode" value="" onclick="window.open(document.getElementById('label-student-detail-link_bewerbungstool').value)"/>
-
+							<?php $hideBpk = $rechte->isBerechtigt('student/bpk') ? '':' hidden="true"'; ?>
+                            <label value="BPK" control="student-detail-textbox-bpk"<?php echo $hideBpk; ?>/>
+                            <hbox><textbox id="student-detail-textbox-bpk" disabled="true" maxlength="255"<?php echo $hideBpk; ?>/></hbox>
 						</row>
 						<row>
 							<label value="Anrede" control="student-detail-textbox-anrede"/>
diff --git a/content/student/studentoverlay.js.php b/content/student/studentoverlay.js.php
index 3be031879..92fcb19cd 100644
--- a/content/student/studentoverlay.js.php
+++ b/content/student/studentoverlay.js.php
@@ -704,6 +704,7 @@ function StudentDetailReset()
 	document.getElementById('student-detail-menulist-sprache').value='German';
 	document.getElementById('student-detail-textbox-matrikelnummer').value='';
 	document.getElementById('student-detail-textbox-matr_nr').value='';
+	document.getElementById('student-detail-textbox-bpk').value='';
 	document.getElementById('student-detail-image').src='';
 }
 
@@ -742,6 +743,7 @@ function StudentDetailDisableFields(val)
 	document.getElementById('student-detail-textbox-alias').disabled=val;
 	document.getElementById('student-detail-button-save').disabled=val;
 	document.getElementById('student-detail-textbox-matr_nr').disabled=val;
+	document.getElementById('student-detail-textbox-bpk').disabled=val;
 }
 
 // ****
@@ -779,6 +781,7 @@ function StudentDetailSave()
 	gruppe = document.getElementById('student-detail-textbox-gruppe').value;
 	alias = document.getElementById('student-detail-textbox-alias').value;
 	matr_nr = document.getElementById('student-detail-textbox-matr_nr').value;
+	bpk = document.getElementById('student-detail-textbox-bpk').value;
 
 	//Wenn es noch kein Student ist, dann wird die Studiengang_kz vom Prestudent genommen
 	if(studiengang_kz=='')
@@ -836,6 +839,7 @@ function StudentDetailSave()
 	req.add('gruppe', gruppe);
 	req.add('alias', alias);
 	req.add('matr_nr',matr_nr);
+	req.add('bpk',bpk);
 
 	var response = req.executePOST();
 
@@ -1084,6 +1088,7 @@ function StudentAuswahl()
 	matr_nr=getTargetHelper(dsource,subject,rdfService.GetResource( predicateNS + "#matr_nr" ));
 	zugangscode=getTargetHelper(dsource,subject,rdfService.GetResource( predicateNS + "#zugangscode" ));
 	link_bewerbungstool=getTargetHelper(dsource,subject,rdfService.GetResource( predicateNS + "#link_bewerbungstool" ));
+	bpk=getTargetHelper(dsource,subject,rdfService.GetResource( predicateNS + "#bpk" ));
 
 	//Bei Incoming wird das Menue zur Statusaenderung deaktiviert
 	if(status=='Incoming')
@@ -1130,6 +1135,7 @@ function StudentAuswahl()
 	document.getElementById('student-detail-textbox-matr_nr').value=matr_nr;
 	document.getElementById('label-student-detail-zugangscode').value=zugangscode;
 	document.getElementById('label-student-detail-link_bewerbungstool').value=link_bewerbungstool;
+	document.getElementById('student-detail-textbox-bpk').value=bpk;
 
 	//PreStudent Daten holen
 
diff --git a/rdf/student.rdf.php b/rdf/student.rdf.php
index 1836ae55b..b8e28e4d4 100644
--- a/rdf/student.rdf.php
+++ b/rdf/student.rdf.php
@@ -214,6 +214,7 @@ function draw_content_liste($row)
 			<STUDENT:status_datum_iso><![CDATA['.$datum_obj->formatDatum($prestudent->datum,'Y-m-d').']]></STUDENT:status_datum_iso>
 			<STUDENT:status_bestaetigung_iso><![CDATA['.($prestudent->bestaetigtam!=''?$datum_obj->formatDatum($prestudent->bestaetigtam,'Y-m-d'):'-').']]></STUDENT:status_bestaetigung_iso>
 			<STUDENT:zugangscode><![CDATA['.$row->zugangscode.']]></STUDENT:zugangscode>
+			<STUDENT:bpk><![CDATA['.$row->bpk.']]></STUDENT:bpk>
 
 			<STUDENT:anmerkungen>'.($row->anmerkungen==''?'&#xA0;':'<![CDATA['.$row->anmerkungen.']]>').'</STUDENT:anmerkungen>
 			<STUDENT:anmerkungpre>'.($row->anmerkung==''?'&#xA0;':'<![CDATA['.$row->anmerkung.']]>').'</STUDENT:anmerkungpre>
@@ -330,6 +331,7 @@ function draw_content($row)
 			<STUDENT:mail_intern><![CDATA['.(isset($row->uid)?$row->uid.'@'.DOMAIN:'').']]></STUDENT:mail_intern>
 			<STUDENT:zugangscode><![CDATA['.$row->zugangscode.']]></STUDENT:zugangscode>
 			<STUDENT:link_bewerbungstool><![CDATA['.CIS_ROOT.'addons/bewerbung/cis/registration.php?code='.$row->zugangscode.'&emailAdresse='.$mail_privat.']]></STUDENT:link_bewerbungstool>
+			<STUDENT:bpk><![CDATA['.$row->bpk.']]></STUDENT:bpk>
 
 			<STUDENT:aktiv><![CDATA['.$aktiv.']]></STUDENT:aktiv>
 			<STUDENT:uid><![CDATA['.(isset($row->uid)?$row->uid:'').']]></STUDENT:uid>
@@ -441,6 +443,7 @@ function draw_empty_content()
 			<STUDENT:mail_intern><![CDATA[]]></STUDENT:mail_intern>
 			<STUDENT:zugangscode><![CDATA[]]></STUDENT:zugangscode>
 			<STUDENT:link_bewerbungstool><![CDATA[]]></STUDENT:link_bewerbungstool>
+			<STUDENT:bpk><![CDATA[]]></STUDENT:bpk>
 
 			<STUDENT:aktiv><![CDATA[]]></STUDENT:aktiv>
 			<STUDENT:uid><![CDATA[]]></STUDENT:uid>
@@ -608,7 +611,7 @@ if($xmlformat=='rdf')
 			AS email_privat,
 			(SELECT rt_gesamtpunkte as punkte FROM public.tbl_prestudent WHERE prestudent_id=tbl_student.prestudent_id) as punkte,
 			 tbl_prestudent.dual as dual, tbl_prestudent.reihungstest_id, tbl_prestudent.anmeldungreihungstest, p.matr_nr,
-			 tbl_prestudent.gsstudientyp_kurzbz, tbl_prestudent.aufnahmegruppe_kurzbz, tbl_prestudent.priorisierung, p.zugangscode
+			 tbl_prestudent.gsstudientyp_kurzbz, tbl_prestudent.aufnahmegruppe_kurzbz, tbl_prestudent.priorisierung, p.zugangscode, p.bpk
 		FROM
 			public.tbl_student
 			JOIN public.tbl_benutzer ON (student_uid=uid)
diff --git a/system/dbupdate_3.3.php b/system/dbupdate_3.3.php
index bb8f250fd..9c9a7e3e4 100644
--- a/system/dbupdate_3.3.php
+++ b/system/dbupdate_3.3.php
@@ -5507,6 +5507,20 @@ if($result = @$db->db_query("SELECT 1 FROM system.tbl_berechtigung WHERE berecht
 	}
 }
 
+// Add permission to manage bpk in FAS
+if($result = @$db->db_query("SELECT 1 FROM system.tbl_berechtigung WHERE berechtigung_kurzbz = 'student/bpk';"))
+{
+	if($db->db_num_rows($result) == 0)
+	{
+		$qry = "INSERT INTO system.tbl_berechtigung(berechtigung_kurzbz, beschreibung) VALUES('student/bpk', 'BPK verwalten');";
+
+		if(!$db->db_query($qry))
+			echo '<strong>system.tbl_berechtigung '.$db->db_last_error().'</strong><br>';
+		else
+			echo '<br>system.tbl_berechtigung: Added permission for student/bpk';
+	}
+}
+
 // *** Pruefung und hinzufuegen der neuen Attribute und Tabellen
 echo '<H2>Pruefe Tabellen und Attribute!</H2>';