--- loncom/interface/loncreateuser.pm	2001/02/15 00:57:41	1.1
+++ loncom/interface/loncreateuser.pm	2001/03/17 15:06:57	1.7
@@ -16,7 +16,7 @@
 #
 # 2/14 Gerd Kortemeyer)
 #
-# 2/14 Gerd Kortemeyer
+# 2/14,2/17,2/19,2/20,2/21,2/22,2/23,3/2,3/17 Gerd Kortemeyer
 #
 package Apache::loncreateuser;
 
@@ -24,20 +24,11 @@ use strict;
 use Apache::Constants qw(:common :http);
 use Apache::lonnet;
 
-sub handler {
-    my $r = shift;
-
-    if ($r->header_only) {
-       $r->content_type('text/html');
-       $r->send_http_header;
-       return OK;
-    }
-
-    if (&Apache::lonnet::allowed('ccc',$ENV{'user.domain'})) {
-       $r->content_type('text/html');
-       $r->send_http_header;
-
+# =================================================================== Phase one
 
+sub phase_one {
+    my $r=shift;
+    my $defdom=$ENV{'user.domain'};
     $r->print(<<ENDDOCUMENT);
 <html>
 <head>
@@ -45,14 +36,346 @@ sub handler {
 </head>
 <body bgcolor="#FFFFFF">
 <h1>Create User, Change User Privileges</h1>
-<img src="/adm/lonKaputt/lonconstruct.gif">
+<form action=/adm/createuser method=post>
+<input type=hidden name=phase value=two>
+Username: <input type=text size=15 name=ccuname><br>
+Domain: <input type=text size=15 name=ccdomain value=$defdom><p>
+<input type=submit value="Continue">
+</form>
 </body>
 </html>
 ENDDOCUMENT
+}
+
+# =================================================================== Phase two
+
+sub phase_two {
+    my $r=shift;
+    my $ccuname=$ENV{'form.ccuname'};
+    my $ccdomain=$ENV{'form.ccdomain'};
+
+    $ENV{'SERVER_NAME'}=~/(\w+\.\w+)$/;
+    my $krbdefdom=$1;
+    $krbdefdom=~tr/a-z/A-Z/;
+
+    my $defdom=$ENV{'user.domain'};
+
+    $ccuname=~s/\W//g;
+    $ccdomain=~s/\W//g;
+    $r->print(<<ENDENHEAD);
+<html>
+<head>
+<title>The LearningOnline Network with CAPA</title>
+<script>
+
+    function pclose() {
+        parmwin=window.open("/adm/rat/empty.html","LONCAPAparms",
+                 "height=350,width=350,scrollbars=no,menubar=no");
+        parmwin.close();
+    }
+
+    function pjump(type,dis,value,marker,ret,call) {
+        parmwin=window.open("/adm/rat/parameter.html?type="+escape(type)
+                 +"&value="+escape(value)+"&marker="+escape(marker)
+                 +"&return="+escape(ret)
+                 +"&call="+escape(call)+"&name="+escape(dis),"LONCAPAparms",
+                 "height=350,width=350,scrollbars=no,menubar=no");
+
+    }
+
+    function dateset() {
+        eval("document.cu."+document.cu.pres_marker.value+
+            ".value=document.cu.pres_value.value");
+        pclose();
+    }
+
+</script>
+</head>
+<body bgcolor="#FFFFFF">
+<img align=right src=/adm/lonIcons/lonlogos.gif>
+<h1>Create User, Change User Privileges</h1>
+<form action=/adm/createuser method=post name=cu>
+<input type=hidden name=phase value=three>
+<input type=hidden name=ccuname value=$ccuname>
+<input type=hidden name=ccdomain value=$ccdomain>
+<input type="hidden" value='' name="pres_value">
+<input type="hidden" value='' name="pres_type">
+<input type="hidden" value='' name="pres_marker">
+<input type=hidden name=cuname value="$ccuname">
+<input type=hidden name=cdomain value="$ccdomain">
+
+ENDENHEAD
+    my $uhome=&Apache::lonnet::homeserver($ccuname,$ccdomain);
+    my %incdomains; 
+    my %inccourses;
+    $incdomains{$ENV{'user.domain'}}=1;
+    map {
+	if ($_=~/^user\.priv\.cm\.\/(\w+)\/(\w+)/) {
+	    $inccourses{$1.'_'.$2}=1;
+        }
+    } %ENV;
+    if ($uhome eq 'no_host') {
+	$r->print(<<ENDNUSER);
+<h2>New user $ccuname at $ccdomain</h2>
+<script>
+function setkrb(vf) {
+    if (vf.krbdom.value!='') {
+       vf.login[0].checked=true;
+       vf.krbdom.value=vf.krbdom.value.toUpperCase();
+       vf.intpwd.value='';
+   }
+}
+
+function setint(vf) {
+    if (vf.intpwd.value!='') {
+       vf.login[1].checked=true;
+       vf.krbdom.value='';
+   }
+}
 
+function clickkrb(vf) {
+    vf.krbdom.value='$krbdefdom';
+    vf.intpwd.value='';
+}
+
+function clickint(vf) {
+    vf.krbdom.value='';
+}
+</script>
+<input type=hidden name=makeuser value=1>
+<h3>Personal Data</h3>
+First Name: <input type=text name=cfirst size=15><br>
+Middle Name: <input type=text name=cmiddle size=15><br>
+Last Name: <input type=text name=clast size=15><br>
+Generation: <input type=text name=cgen size=5><p>
+
+ID/Student Number: <input type=text name=cstid size=10><p>
+
+<h3>Login Data</h3>
+<input type=radio name=login value=krb onClick="clickkrb(this.form);">
+Kerberos authenticated with domain
+<input type=text size=10 name=krbdom onChange="setkrb(this.form);"><p>
+<input type=radio name=login value=int onClick="clickint(this.form);"> 
+Internally authenticated (with initial password 
+<input type=text size=10 name=intpwd onChange="setint(this.form);">)
+ENDNUSER
+    } else {
+	$r->print('<h2>Existing user '.$ccuname.' at '.$ccdomain.'</h2>');
+
+        my $rolesdump=&Apache::lonnet::reply(
+                                  "dump:$ccdomain:$ccuname:roles",$uhome);
+        unless ($rolesdump eq 'con_lost') { 
+           my $now=time;
+           $r->print('<h4>Revoke Existing Roles</h4>'.
+             '<table border=2><tr><th>Revoke</th><th>Role</th><th>Extent</th>'.
+		     '<th>Start</th><th>End</th>');
+           map {
+             if ($_!~/^rolesdef\&/) {
+
+              my ($area,$role)=split(/=/,$_);
+              my $thisrole=$area;
+              $area=~s/\_\w\w$//;
+              my ($trole,$tend,$tstart)=split(/_/,$role);
+              my $bgcol='ffffff';
+              my $allows=0;
+              if ($area=~/^\/(\w+)\/(\d\w+)/) {
+                 my %coursedata=&Apache::lonnet::coursedescription($1.'_'.$2);
+                 my $carea='Course: '.$coursedata{'description'};
+                 $inccourses{$1.'_'.$2}=1;
+                 if (&Apache::lonnet::allowed('c'.$trole,$1.'/'.$2)) {
+		     $allows=1;
+                 }
+                 $bgcol=$1.'_'.$2;
+                 $bgcol=~s/[^8-9b-e]//g;
+                 $bgcol=substr($bgcol.$bgcol.$bgcol.'ffffff',0,6);
+                 if ($area=~/^\/(\w+)\/(\d\w+)\/(\w+)/) {
+                     $carea.='<br>Section/Group: '.$3;
+		 }
+                 $area=$carea;
+	      } else {
+                 if ($area=~/^\/(\w+)\//) {
+		     $incdomains{$1}=1;
+                     if (&Apache::lonnet::allowed('c'.$trole,$1)) {
+			 $allows=1;
+                     }
+                 } else {
+                     if (&Apache::lonnet::allowed('c'.$trole,'/')) {
+			 $allows=1;
+                     }
+                 }
+	      }
+
+              my $active=1;
+              if (($tend) && ($now>$tend)) { $active=0; }
+
+              $r->print('<tr bgcolor=#'.$bgcol.'><td>');
+              if ($active) {
+                  if ($allows) {
+		     $r->print(
+                             '<input type=checkbox name="rev:'.$thisrole.'">');
+		 } else {
+                     $r->print('&nbsp;');
+                 }
+              } else {
+                  $r->print('&nbsp;');
+              }
+              $r->print('</td><td>'.&Apache::lonnet::plaintext($trole).
+                        '</td><td>'.$area.'</td><td>'.
+                        ($tstart?localtime($tstart):'&nbsp;').'</td><td>'.
+                        ($tend?localtime($tend):'&nbsp;')."</td></tr>\n");
+	     }
+	   } split(/&/,$rolesdump);
+	   $r->print('</table>');
+         }   
+    }
+    $r->print('<hr><h3>Add Roles</h3><h4>System Level</h4>');
+    $r->print('<h4>Domain Level</h4>');
+    map {
+	my $thisdomain=$_;
+        map {
+            if (&Apache::lonnet::allowed('c'.$_,$thisdomain)) {
+		$r->print($_.' - '.$thisdomain.'<br>');
+            }
+        } ('dc','cc','li','dg','au');
+    } sort keys %incdomains;
+    $r->print('<h4>Course Level</h4>'.
+    '<table border=2><tr><th>Activate</th><th>Role</th><th>Extent</th>'.
+    '<th>Group/Section</th><th>Start</th><th>End</th></tr>');
+    map {
+	my $thiscourse=$_;
+        my %coursedata=&Apache::lonnet::coursedescription($thiscourse);
+        my $area=$coursedata{'description'};
+        my $bgcol=$thiscourse;
+        $bgcol=~s/[^8-9b-e]//g;
+        $bgcol=substr($bgcol.$bgcol.$bgcol.'ffffff',0,6);
+        map {
+            if (&Apache::lonnet::allowed('c'.$_,$thiscourse)) {
+               my $plrole=&Apache::lonnet::plaintext($_);
+               $r->print(<<ENDROW);
+<tr bgcolor=#$bgcol>
+<td><input type=checkbox name="act_$thiscourse\_$_"></td>
+<td>$plrole</td>
+<td>$area</td>
+<td><input type=text size=5 name="sec_$thiscourse\_$_"></td>
+<td><input type=hidden name="start_$thiscourse\_$_" value=''>
+<a href=
+"javascript:pjump('date_start','Start Date $plrole',document.cu.start_$thiscourse\_$_.value,'start_$thiscourse\_$_','cu.pres','dateset')">Set Start Date</a></td>
+<td><input type=hidden name="end_$thiscourse\_$_" value=''>
+<a href=
+"javascript:pjump('date_end','End Date $plrole',document.cu.end_$thiscourse\_$_.value,'end_$thiscourse\_$_','cu.pres','dateset')">Set End Date</a></td>
+</tr>
+ENDROW
+
+            }
+        } ('st','ta','ep','ad','in');
+    } sort keys %inccourses;
+    $r->print('</table>');
+    $r->print('<input type=submit value="Modify User">');
+    $r->print('</form></body></html>');
+}
+
+# ================================================================= Phase Three
+
+sub phase_three {
+    my $r=shift;
+    $r->print(<<ENDTHREEHEAD);
+<html>
+<head>
+<title>The LearningOnline Network with CAPA</title>
+</head>
+<body bgcolor="#FFFFFF">
+<img align=right src=/adm/lonIcons/lonlogos.gif>
+<h1>Create User, Change User Privileges</h1>
+ENDTHREEHEAD
+   $r->print('<h2>'.$ENV{'form.cuname'}.' at '.$ENV{'form.cdomain'}.'</h2>');
+   if ($ENV{'form.makeuser'}) {
+    $r->print('<h3>Creating User</h3>');
+    if (($ENV{'form.cuname'})&&($ENV{'form.cuname'}!~/\W/)&&
+        ($ENV{'form.cdomain'})&&($ENV{'form.cdomain'}!~/\W/)) {
+	my $amode='';
+        my $genpwd='';
+        if ($ENV{'form.login'} eq 'krb') {
+           $amode='krb4';
+           $genpwd=$ENV{'form.krbdom'};
+        } elsif ($ENV{'form.login'} eq 'int') {
+           $amode='internal';
+           $genpwd=$ENV{'form.intpwd'};
+        }
+        if (($amode) && ($genpwd)) {
+          $r->print('Generating user: '.&Apache::lonnet::modifyuser(
+                      $ENV{'form.cdomain'},$ENV{'form.cuname'},
+                      $ENV{'form.cstid'},$amode,$genpwd,
+ 	              $ENV{'form.cfirst'},$ENV{'form.cmiddle'},
+                      $ENV{'form.clast'},$ENV{'form.cgen'}));
+          $r->print('<br>Home server: '.&Apache::lonnet::homeserver
+                      ($ENV{'form.cuname'},$ENV{'form.cdomain'}));
+
+	} else {
+           $r->print('Invalid login mode or password');    
+        }          
+    } else {
+        $r->print('Invalid username or domain');
+    }
+   }
+    my $now=time;
+    $r->print('<h3>Modifying Roles</h3>');
+    map {
+	if (($_=~/^form\.rev\:([^\_]+)\_([^\_]+)$/) && ($ENV{$_})) {
+           $r->print('Revoking '.$2.' in '.$1.': '.
+          &Apache::lonnet::assignrole($ENV{'form.cdomain'},$ENV{'form.cuname'},
+                                      $1,$2,$now).'<br>');
+	}
+    } keys %ENV;
+    map {
+	if (($_=~/^form\.act\_([^\_]+)\_([^\_]+)\_([^\_]+)$/) && ($ENV{$_})) {
+            my $url='/'.$1.'/'.$2;
+            if ($ENV{'form.sec_'.$1.'_'.$2.'_'.$3}) {
+		$url.='/'.$ENV{'form.sec_'.$1.'_'.$2.'_'.$3};
+            }
+            my $start=$now;
+            if ($ENV{'form.start_'.$1.'_'.$2.'_'.$3}) {
+		$start=$ENV{'form.start_'.$1.'_'.$2.'_'.$3};
+            }
+            my $end=0;
+            if ($ENV{'form.end_'.$1.'_'.$2.'_'.$3}) {
+		$end=$ENV{'form.end_'.$1.'_'.$2.'_'.$3};
+            }
+            $r->print('Assigning: '.$3.' in '.$url.': '.
+          &Apache::lonnet::assignrole($ENV{'form.cdomain'},$ENV{'form.cuname'},
+                                      $url,$3,$end,$start).'<br>');
+	}
+    } keys %ENV;
+    $r->print('</body></html>');
+}
+
+# ================================================================ Main Handler
+sub handler {
+    my $r = shift;
+
+    if ($r->header_only) {
+       $r->content_type('text/html');
+       $r->send_http_header;
+       return OK;
+    }
+
+    if ((&Apache::lonnet::allowed('cta',$ENV{'request.course.id'})) ||
+        (&Apache::lonnet::allowed('cin',$ENV{'request.course.id'})) || 
+        (&Apache::lonnet::allowed('ccr',$ENV{'request.course.id'})) || 
+        (&Apache::lonnet::allowed('cep',$ENV{'request.course.id'})) ||
+        (&Apache::lonnet::allowed('mau',$ENV{'user.domain'}))) {
+       $r->content_type('text/html');
+       $r->send_http_header;
+       unless ($ENV{'form.phase'}) {
+	   &phase_one($r);
+       }
+       if ($ENV{'form.phase'} eq 'two') {
+           &phase_two($r);
+       } elsif ($ENV{'form.phase'} eq 'three') {
+           &phase_three($r);
+       }
    } else {
       $ENV{'user.error.msg'}=
-        "/adm/createcourse:ccc:0:0:Cannot create courses";
+        "/adm/createcourse:mau:0:0:Cannot modify user data";
       return HTTP_NOT_ACCEPTABLE; 
    }
    return OK;
@@ -60,3 +383,5 @@ ENDDOCUMENT
 
 1;
 __END__
+
+