access control

application/controllers/CostCenter.php

@@ -46,8 +46,17 @@ class CostCenter extends BaseController
 			       
             $this->global['pageTitle'] = 'Siddharth : Cost List';
 
-            $this->loadViews("costListing", $this->global, $data, NULL);
+             if($this->DEPCode == FINANCE )
+		   {
             
+            $this->loadViews("costListing", $this->global, $data, NULL);
+           }
+
+           else
+           {
+            $this->loadViews("access", $this->global, $data, NULL);
+
+           }
     }
 	
 	/**
@@ -177,8 +186,16 @@ class CostCenter extends BaseController
             
             $this->global['pageTitle'] = 'Siddharth : Edit Cost';
 
-            $this->loadViews("editOldcost", $this->global, $data,NULL);
+           if($this->DEPCode == FINANCE )
+		   {
             
+            $this->loadViews("editOldcost", $this->global, $data,NULL);
+           }
+
+           else
+           {
+           	 $this->loadViews("access", $this->global, $data,NULL);
+           }
     }
 	
 	function GetBudgetForYear()
@@ -238,6 +255,9 @@ class CostCenter extends BaseController
     function editcost()
     {
 
+
+      if($this->DEPCode == FINANCE )
+       {
             $this->form_validation->set_rules('CostCode','CostCode','trim|required');
             $this->form_validation->set_rules('CostName','CostName','trim|required');            
          
@@ -323,6 +343,17 @@ class CostCenter extends BaseController
           
             }
 
+
+         }  
+
+
+         else
+         {
+            //$this->loadViews("access");
+            $this->load->view('access');
+
+         }
+        
     }
 
 

application/controllers/MRIRcontroller.php

@@ -92,9 +92,18 @@ class MRIRcontroller extends BaseController
         $this->global['pageTitle'] = 'Siddharth : Billing ';
 		  $data['Billing'] = $this->mrir_model->view_mrir_Billing(); 
 		
+        if($this->DEPCode == FINANCE)
+        {
      
         $this->loadViews("viewmrirforbilling", $this->global,$data , NULL);
         }
+
+        else
+        {
+         $this->loadViews("access", $this->global,$data , NULL);
+        }   
+
+    }
 public function viewmMaterialDistributionList()
     {
         $this->global['pageTitle'] = 'Siddharth : Distribution list ';
@@ -102,9 +111,18 @@ public function viewmMaterialDistributionList()
 	    $data['Distribution'] = $this->mrir_model->ViewDistributionList(); 
 		$data['status']   = $this->mrir_model->getStatus(); 
 
+        if($this->DEPCode == STORE)
+        {
+     
         $this->loadViews("MaterialIssueList", $this->global,$data , NULL);
         }
 
+        else
+        {
+            $this->loadViews("access", $this->global,$data , NULL);
+        }
+    }
+
     
     /*FOR Displaying IGR Values (view folder- IGR view page (button link)) */
       function igrdatavalues()
@@ -126,9 +144,23 @@ public function viewmMaterialDistributionList()
 		
 		$data['IGR']= $this->mrir_model->ViewigrListing();
 
+
+
+       if($this->DEPCode == STORE || $this->DEPCode == QUALITY)
+       {
+		
 		$this->loadViews("viewinwardgateregister",$this->global,$data,NULL);
 	   }
 
+       else
+       {
+        $this->loadViews("access",$this->global,$data,NULL);
+
+       }
+
+
+    }
+	
     /* For View MRIR Screen (view folder - view page)*/
      function viewmaterialinspectionreport()
 
@@ -140,10 +172,20 @@ public function viewmMaterialDistributionList()
             //old name:mrirdatas2
             $this->global['pageTitle'] = 'Siddharth : View Material Inspection Report';
             //print_r( $data);
+
+             if($this->DEPCode == STORE || $this->DEPCode == QUALITY)
+        { 
             $this->loadViews("viewmaterialinspectionreport", $this->global,$data,NULL);
 
         }
 
+        else
+        {
+            $this->loadViews("access", $this->global,$data,NULL);
+        }
+    
+    }
+
     /* FOR Edit MRIR Screen (View folder - edit page)*/
      function editmaterialinspectionreport()
     {

application/controllers/emergencypurchaseorder.php

@@ -70,8 +70,19 @@ class emergencypurchaseorder extends BaseController
          $data['WorkStatus']=$this->purchaseorder_model->getStatus(7);
           $data['ServiceOption'] = $this->requistion_model->getConfigValue('C022'); 
           $data['PoTypeOptions'] = $this->purchaseorder_model->getConfigValue('C026');
+
+
+      if($this->DEPCode == PURCHASE )
+      {
         $this->loadViews("alterpurchaseorder", $this->global, $data,  Null);
 
+      }
+
+      else
+      {
+         $this->loadViews("access", $this->global, $data,  Null);
+      } 
+    
     }
     /**
      * this function used for get all material code  using request type
@@ -859,8 +870,18 @@ $RequestedBy = $this->input->post('drpDepartment');
 
         $this->global['pageTitle'] = 'Siddharth : Purchase Orders';
 
+        if($this->DEPCode == PURCHASE )
+        {
+
         $this->loadViews("POlist", $this->global, $data, NULL);
 
+        }
+
+         else
+        {
+          $this->loadViews("access", $this->global, $data, NULL);
+ 
+        }
     }
     function  Req_validate($selectValue)
     {

application/controllers/employeedetails.php

@@ -44,9 +44,24 @@ class employeedetails extends BaseController
 
             $this->global['pageTitle'] = 'Siddharth : Employee Listing';
 
+            if($this->role == ROLE_ADMIN || $this->DEPCode == HR)
+            {
+
+              if($this->DEPCode != HR)
+            {
+            
             $this->loadViews("employeeListing", $this->global, $data, NULL);
 
            }
+
+          }
+
+          else
+         {
+          $this->loadViews("access", $this->global, $data, NULL);
+         }
+        
+    }
   /*
    Validation for Gender status Dropdown
   */
@@ -385,8 +400,22 @@ echo "<script>alert('Record Not Saved!');</script>";redirect('employeeListing','
             
             $data['Department'] = $this->employeedetails_model->getDepartment();
        $this->global['pageTitle'] = 'Siddharth : Add New Employee';
+
+       if($this->role == ROLE_ADMIN || $this->DEPCode == HR)
+        {
+
+          if($this->DEPCode != HR)
+            {
             $this->loadViews("addemployee", $this->global, $data, NULL);
 
+            }
+         }
+         
+         else
+         {
+            $this->loadViews("access", $this->global, $data, NULL);
+         }   
+        
     } 
   /**
      * This function is used to check whether the Employee is existing in the database or not    */

application/controllers/inwardgateregister.php

@@ -41,7 +41,18 @@ class inwardgateregister extends BaseController
 		$this->global['pageTitle'] = 'Siddharth : Inward Gate Register Details';
 		$data['IGR']= $this->inwardgateregister_model->igrListing();
 
+		if($this->Designation == SECURITY) 
+	  {
+		
 		$this->loadViews("viewIGRDetails",$this->global,$data,NULL);
+
+	   }
+	   
+	   else
+	   {
+	   	$this->loadViews("access",$this->global,$data,NULL);
+
+	   }	
 	}
 	
 	 function addinwardgateregister()
@@ -54,9 +65,18 @@ class inwardgateregister extends BaseController
 		$data['PO_NO'] = $this->inwardgateregister_model->getpurchaseorder();
 		//print_r($data['PO_NO']);
 
+		if($this->Designation == SECURITY) 
+		 {
+			 
         $this->loadViews("inwardgateregister", $this->global, $data, NULL);
          }
 
+         else
+         {
+         	$this->loadViews("access", $this->global, $data, NULL);
+         }
+    }
+	
 	function getDateformat($Val)
 	{
 		       $date = new DateTime($Val,new DateTimeZone('Asia/Kolkata'));

application/controllers/purchaseorder.php

@@ -50,8 +50,17 @@ class purchaseorder extends BaseController
        $data['PONO']=$this->purchaseorder_model->getadvancePONO('ST026');
        //print_r($data['PONO']);   
        
+
+       if($this->DEPCode == PURCHASE)
+      {
        $this->loadViews("advancerequest", $this->global, $data, NULL);
       }
+
+      else
+      {
+        $this->loadViews("access", $this->global, $data, NULL);
+      }
+   }
 	function requisition()
 	 {
 		     $data['DeptList'] = $this->purchaseorder_model->getDepartmentListForAllReq();
@@ -65,7 +74,17 @@ class purchaseorder extends BaseController
 			 /* End Here */
 		    $this->global['pageTitle'] = 'Siddharth : Create PO from Requisition List';
 
+        if($this->DEPCode== PURCHASE)
+       {
+            
             $this->loadViews("createPOfromRequistion", $this->global,  $data,Null);
+
+       }
+
+       else
+       {
+           $this->loadViews("access", $this->global,  $data,Null);
+       }
 	 }
 	
 	
@@ -87,9 +106,20 @@ class purchaseorder extends BaseController
             
             $this->global['pageTitle'] = 'Siddharth : Purchase Orders';
 
-            $this->loadViews("POlist", $this->global, $data, NULL);
+        if($this->DEPCode == PURCHASE )
+        {
             
+            $this->loadViews("POlist", $this->global, $data, NULL);
          }
+
+         else
+         {
+          $this->loadViews("access", $this->global, $data, NULL);
+         }
+    }
+
+
+
 	function  Req_validate($selectValue)
 {
 	//echo 'select_validate  method called';
@@ -111,6 +141,10 @@ class purchaseorder extends BaseController
    function CreatePurchaseOrder()
     {      
                
+      //  if( $DEPCode == PURCHASE)
+      // { 
+
+
             $this->form_validation->set_rules('txtReqNo', 'txtReqNo', 'callback_Req_validate'); 
             
             if($this->form_validation->run() == FALSE)
@@ -260,7 +294,12 @@ class purchaseorder extends BaseController
              }           
              $this->loadViews($ViewName, $this->global,$data, NULL); 
             }
+    // }
+
+
 }
+
+
 	 function CreatePOPrint()
 	 {
 		$PONO =  $_GET['PONO'];

application/controllers/requisitionform.php

@@ -39,7 +39,19 @@ class requisitionform extends BaseController
           $data['TotNoOfLine'] =$this->requistion_model->getRequistionList($userID);
 
 
+        if (($this->role == ROLE_MANAGER || $this->role == ROLE_EMPLOYEE || $this->role == ROLE_ADMIN  ) && $this->Designation != SECURITY)
+		{	
+
          $this->loadViews("requisitionlisting", $this->global, $data, NULL);
+
+        }
+
+        else
+        { 
+        	$this->loadViews("access", $this->global, $data, NULL);
+
+        }
+
      }
     /**
      * This function used to load the first screen of the requisition Form
@@ -75,11 +87,19 @@ class requisitionform extends BaseController
 		 
 		   $data['AppList'] = $this->requistion_model->getApproverRequistList($userID);  	  
 		
-		
+		if($this->role == ROLE_MANAGER )
+		{
            
          $this->loadViews("requisitionlistapproval", $this->global, $data, NULL);
         }
 
+        else
+        {
+        	$this->loadViews("access", $this->global, $data, NULL);
+        }
+
+     }
+	 
 	 
 	 /**
      * This function used to load the Edit Requistion Form

application/controllers/servicepurchaseorder.php

@@ -36,10 +36,21 @@ class servicepurchaseorder extends BaseController
 
 			//print_r($data["Billing"]);
 
+			if($this->DEPCode == FINANCE)
+        { 
+            
             $this->loadViews("serviceporeport", $this->global,$data,null);
 
         }
 
+        else
+        {
+        	  $this->loadViews("access", $this->global,$data,null);
+
+        }
+	 
+	 }
+	 
 	 function UpdateServicePOStatus()
 	 {
 			$this->global['pageTitle'] = 'Siddharth : Update Service PO Status';

application/controllers/storerequisitionlist.php

@@ -51,8 +51,17 @@ class storerequisitionlist extends BaseController
         $this->global['pageTitle'] = 'Siddharth : StoreRequisition Listing';     
      	$userId= $this->session->userdata ('userId');
      	$data['Store'] = $this->storerequistion_model->Storeall($userId);
+     	if ($this->Designation != SECURITY  && $this->DEPCode != HR )
+	   {
      	
         $this->loadViews("storerequisition", $this->global,$data,null);	
+
+      }
+
+      else
+      {
+      	 $this->loadViews("access", $this->global,$data,null);	
+      }
     }  
 
       /**
@@ -74,6 +83,9 @@ class storerequisitionlist extends BaseController
 
 /* The Function Edit Store Requistion list */
      function EditStoreRequistion()
+     {
+
+     	if ($this->Designation != SECURITY  && $this->DEPCode != HR )
 	   {
      	$StoreReqNo = $_GET['StoreReqNo'];
 
@@ -92,6 +104,12 @@ class storerequisitionlist extends BaseController
         $this->loadViews("editstorerequisition", $this->global,$data,null);  	
        }
 
+       else
+       {
+       	$this->load->view('access');
+       } 
+    }
+
 
 
     
@@ -197,8 +215,15 @@ class storerequisitionlist extends BaseController
 		$data['Status']= $this->storerequistion_model->getStatus();
 		$data['TotNoOfLine']=$this->storerequistion_model->getRequistionList();
 		//print_r($data['TotNoOfLine']);
+        if ( $this->Designation != SECURITY  &&  $this->DEPCode != HR )
+	    {
          $this->loadViews("storerequisitionlisting", $this->global,$data,null);	
+        }
 
+      else
+      {
+        $this->loadViews("access", $this->global,$data,null);
+      } 
 
     } 
 	
@@ -214,8 +239,16 @@ class storerequisitionlist extends BaseController
         $data['ReqItem'] =  $this->storerequistion_model->getRequistItemList($StoreReqNo);
 		 $data['ReqListDetails'] = $this->storerequistion_model->getRequistDetails($StoreReqNo);
 		//print_r($data['ReqItem']);
-        $this->loadViews("issueStoreRequistion", $this->global,$data,null);	
 
+		if($this->DEPCode == STORE)
+		{
+        $this->loadViews("issueStoreRequistion", $this->global,$data,null);	
+		}
+
+		else
+		{
+			$this->loadViews("access", $this->global,$data,null);	
+		}
     } 
 	
 		function UpdateIssueRequistion()
@@ -362,10 +395,19 @@ class storerequisitionlist extends BaseController
 		 $this->global['pageTitle'] = 'Siddharth :  ApprovalStoreRequisitionSlip';	
 			$data['Status']= $this->storerequistion_model->getStatus();
 
+		if ($this->Designation != SECURITY  && $this->DEPCode != HR )
+		{	  		
+           
 			$this->loadViews("approvalstorerequisitionslip", $this->global, $data, NULL);
 			
 		}
 
+		else
+		{
+			$this->loadViews("access", $this->global, $data, NULL);
+		}
+	 } 
+
 	 /*Approve Completed*/  
 	 function ApproveRequest()
 	{

application/controllers/storestatus.php

@@ -51,8 +51,16 @@ class storestatus extends BaseController
            // print_r($data['Stock']);
 			 $data['MaterialList'] =  $this->store_model->GetAllMaterialList();
 			 $data['StockStatus'] = $this->store_model->GetConfigValue('C021');
-            $this->loadViews("storestatus", $this->global, $data,null);
 
+			 if($this->DEPCode == STORE)
+		    {
+            $this->loadViews("storestatus", $this->global, $data,null);
+            }
+
+            else
+            {
+            	$this->loadViews("access", $this->global, $data,null);
+            }
     }
  
  /**

application/controllers/supplier.php

@@ -45,9 +45,22 @@ class supplier extends BaseController
             
             $this->global['pageTitle'] = 'Siddharth Industries : Supplier Listing';
 
+            if($this->role == ROLE_ADMIN || $this->DEPCode == SALES || $this->DEPCode == FINANCE ||$this->DEPCode == HR)
+            {
+
+              if($this->DEPCode != FINANCE && $this->DEPCode != HR)
+            {
+            
             $this->loadViews("supplierListing", $this->global, $data, NULL);
 
            }
+          }
+
+         else
+         {
+            $this->loadViews("access", $this->global, $data, NULL);
+         }        
+    }
     /**
      * This function is used to load the add new supplier    */
     function addsupplier()
@@ -59,8 +72,21 @@ class supplier extends BaseController
             
             $this->global['pageTitle'] = 'siddharth : Add New Supplier';
 
+
+            if($this->role == ROLE_ADMIN || $this->DEPCode == SALES || $this->DEPCode == FINANCE ||$this->DEPCode == HR)
+            {
+
+              if($this->DEPCode != FINANCE && $this->DEPCode != HR)
+            {
             $this->loadViews("addsupplier", $this->global,$data,  NULL);
         
+            }
+            }
+
+            else
+            {
+              $this->loadViews("access", $this->global,$data,  NULL);
+            }
     }
     /**
      * This function is used to check whether PAN already exist or not