dbxUser.class.php

Go to the documentation of this file.

<?php
namespace dbx\dbxAdmin;
 
dbx()->use_system_class('dbxReport');
 
class dbxReport_AdminUser extends \dbxReport {
}
 
class dbxUser {
 
   private string $ddUser = 'dbxUser';
   private string $ddGroup = 'dbxUser_groups';
   private string $actionError = '';
 
   private function url($run2, $params = array()) {
      $url = '?dbx_modul=dbxAdmin&dbx_run1=user&dbx_run2=' . rawurlencode((string)$run2);
      foreach ($params as $key => $value) {
         $url .= '&' . rawurlencode((string)$key) . '=' . rawurlencode((string)$value);
      }
      return $url;
   }
 
   private function action_url($run2, $params = array()) {
      $params['dbx_token'] = dbx()->action_token('dbxAdmin.user');
      return $this->url($run2, $params);
   }
 
   private function check_action_token(&$message = '') {
      $token = dbx()->get_modul_var('dbx_token', '', 'varchar|max=128');
      if (dbx()->check_action_token('dbxAdmin.user', $token)) {
         return true;
      }
 
      $message = 'Aktion abgelehnt: Sicherheits-Token fehlt oder ist ungueltig.';
      $this->actionError = $message;
      dbx()->sys_msg('security', 'dbxAdmin', dbx()->user(), 'invalid admin user action token', $_SERVER['REQUEST_URI'] ?? '');
      return false;
   }
 
   private function badge($label, $class = 'secondary') {
      return '<span class="badge bg-' . dbx()->esc($class) . '">' . dbx()->esc($label) . '</span>';
   }
 
   private function action_button($url, $icon, $title, $class = 'btn-outline-secondary') {
      return '<a class="btn btn-sm ' . dbx()->esc($class) . ' me-1 dbxAjax" href="' . dbx()->esc($url) . '" title="' . dbx()->esc($title) . '">'
           . '<i class="' . dbx()->esc($icon) . '"></i></a>';
   }
 
   private function ajax_url($url) {
      $sep = (strpos((string)$url, '?') === false) ? '?' : '&';
      return $url . $sep . 'dbx_ajax=1';
   }
 
   private function modal_button($url, $icon, $title, $class = 'btn-outline-primary', $label = '', $size = 'btn-sm') {
      $size = trim((string)$size);
      $sizeClass = $size !== '' ? $size . ' ' : '';
      $text = $label !== '' ? ' ' . dbx()->esc($label) : '';
      return '<a class="btn dbx-win ' . $sizeClass . dbx()->esc($class) . ' me-1" href="' . dbx()->esc($url) . '" '
           . 'data-url="' . dbx()->esc($url) . '" data-title="' . dbx()->esc($title) . '" role="button" title="' . dbx()->esc($title) . '">'
           . '<i class="' . dbx()->esc($icon) . '"></i>' . $text . '</a>';
   }
 
   private function delete_button($url, $title = 'Datensatz loeschen') {
      return '<a class="btn btn-sm btn-outline-danger me-1 dbxAjax dbxConfirm" href="' . dbx()->esc($url) . '" '
           . 'data-confirm-title="<i class=\'bi bi-trash\'></i> ' . dbx()->esc($title) . '" '
           . 'data-confirm="Datensatz wirklich loeschen?" '
           . 'data-confirm-hint="<small>Dieser Vorgang kann nicht rueckgaengig gemacht werden.</small>" '
           . 'data-confirm-buttons="yesno" title="' . dbx()->esc($title) . '">'
           . '<i class="bi bi-trash"></i></a>';
   }
 
   private function role_options() {
      $options = array(
         'admin'  => 'Admin',
         'owner'  => 'Owner',
         'member' => 'Member',
         'guest'  => 'Guest',
         'api'    => 'API',
      );
 
      $db = dbx()->get_system_obj('dbxDB');
      $groups = $db->select($this->ddGroup, '', array('name', 'description', 'active'), 'name', 'ASC', '', 0, 0, 0);
      if (is_array($groups)) {
         foreach ($groups as $group) {
            $name = trim((string)($group['name'] ?? ''));
            if ($name === '') {
               continue;
            }
            $description = trim((string)($group['description'] ?? ''));
            $options[$name] = $description !== '' ? $description : $name;
         }
      }
 
      return $options;
   }
 
   private function status_label($status) {
      if ((string)$status === '0') {
         return $this->badge('gesperrt', 'danger');
      }
      if ((string)$status === '1') {
         return $this->badge('aktiv', 'success');
      }
      if ((string)$status === '2') {
         return $this->badge('wartet', 'warning');
      }
      return $this->badge('unbekannt', 'secondary');
   }
 
   private function verified_label($value) {
      return ((string)$value === '1')
         ? $this->badge('verified', 'success')
         : $this->badge('offen', 'warning');
   }
 
   private function roles_label($roles) {
      $items = array_filter(array_map('trim', explode(',', (string)$roles)));
      if (!$items) {
         return $this->badge('keine Rollen', 'secondary');
      }
 
      $html = '';
      foreach ($items as $role) {
         $class = ($role === 'admin') ? 'primary' : (($role === 'api') ? 'dark' : 'info');
         $html .= $this->badge($role, $class) . ' ';
      }
      return trim($html);
   }
 
   private function user_identity($row) {
      $name = trim((string)($row['name'] ?? ''));
      $uname = trim((string)($row['uname'] ?? ''));
      $email = trim((string)($row['email'] ?? ''));
 
      $title = $name !== '' ? $name : $uname;
      $html = '<div class="fw-semibold">' . dbx()->esc($title) . '</div>';
      $html .= '<div class="text-muted small">@' . dbx()->esc($uname) . '</div>';
      if ($email !== '') {
         $html .= '<div class="small"><a href="mailto:' . dbx()->esc($email) . '">' . dbx()->esc($email) . '</a></div>';
      }
      return $html;
   }
 
   private function user_actions($row) {
      $id = (int)($row['id'] ?? 0);
      if ($id <= 0) {
         return '';
      }
 
      $html = '';
      $protected = ($id <= 1 || $id == dbx()->user());
      $html .= $this->modal_button($this->url('edit_user', array('rid' => $id)), 'bi bi-pencil-square', 'Benutzer bearbeiten');
 
      if ($protected) {
         $html .= '<span class="badge bg-secondary me-1">geschuetzt</span>';
      } else {
         if ((string)($row['is_confirm'] ?? '') === '1') {
            $html .= $this->action_button($this->action_url('list_user', array('dbx_do' => 'unverify', 'rid' => $id)), 'bi bi-patch-minus', 'Verified entfernen');
         } else {
            $html .= $this->action_button($this->action_url('list_user', array('dbx_do' => 'verify', 'rid' => $id)), 'bi bi-patch-check', 'Benutzer verifizieren', 'btn-outline-success');
         }
 
         if ((string)($row['status'] ?? '') === '0') {
            $html .= $this->action_button($this->action_url('list_user', array('dbx_do' => 'unlock', 'rid' => $id)), 'bi bi-unlock', 'Login entsperren', 'btn-outline-success');
         } else {
            $html .= $this->action_button($this->action_url('list_user', array('dbx_do' => 'lock', 'rid' => $id)), 'bi bi-lock', 'Login sperren', 'btn-outline-danger');
         }
 
         $html .= $this->action_button($this->action_url('list_user', array('dbx_do' => 'reset_password', 'rid' => $id)), 'bi bi-key', 'Neues Passwort erzeugen', 'btn-outline-warning');
         $html .= $this->delete_button($this->action_url('list_user', array('dbx_do' => 'row_delete', 'rid' => $id)), 'Benutzer loeschen');
      }
      return $html;
   }
 
   private function stats_html() {
      $db = dbx()->get_system_obj('dbxDB');
      $all = (int)$db->count($this->ddUser);
      $active = (int)$db->count($this->ddUser, 'status = 1');
      $locked = (int)$db->count($this->ddUser, 'status = 0');
      $verified = (int)$db->count($this->ddUser, 'is_confirm = 1');
 
      $items = array(
         array('label' => 'Benutzer', 'value' => $all, 'class' => 'primary', 'filter' => ''),
         array('label' => 'Aktiv', 'value' => $active, 'class' => 'success', 'filter' => 'active'),
         array('label' => 'Gesperrt', 'value' => $locked, 'class' => 'danger', 'filter' => 'locked'),
         array('label' => 'Verified', 'value' => $verified, 'class' => 'info', 'filter' => 'verified'),
      );
 
      $html = '<div class="row g-2 mb-3">';
      foreach ($items as $item) {
         $url = $item['filter'] === '' ? $this->url('list_user') : $this->url('list_user', array('filter' => $item['filter']));
         $html .= '<div class="col-6 col-lg-3"><a class="text-decoration-none" href="' . dbx()->esc($url) . '"><div class="border rounded p-3 bg-light h-100">'
               . '<div class="text-muted small">' . dbx()->esc($item['label']) . '</div>'
               . '<div class="fs-4 fw-semibold text-' . dbx()->esc($item['class']) . '">' . dbx()->esc($item['value']) . '</div>'
               . '</div></a></div>';
      }
      $html .= '</div>';
      return $html;
   }
 
   private function nav_html($active = 'users') {
      $tabs = array(
         'users'  => array('label' => 'Benutzer', 'url' => $this->url('list_user')),
         'groups' => array('label' => 'Rollen / Gruppen', 'url' => $this->url('list_groups')),
      );
 
      $html = '<ul class="nav nav-tabs mb-3">';
      foreach ($tabs as $key => $tab) {
         $class = ($key === $active) ? ' active' : '';
         $html .= '<li class="nav-item"><a class="nav-link' . $class . '" href="' . dbx()->esc($tab['url']) . '">' . dbx()->esc($tab['label']) . '</a></li>';
      }
      $html .= '</ul>';
      return $html;
   }
 
   private function handle_user_action(&$message = '') {
      $db = dbx()->get_system_obj('dbxDB');
      $do = dbx()->get_modul_var('dbx_do', '', 'parameter');
      if (!$do) {
         $do = dbx()->get_modul_var('dbx_run3', '', 'parameter');
      }
 
      $rid = dbx()->get_modul_var('rid', 0, 'int');
      if (!$do || !$rid) {
         return '';
      }
 
      if ($do === 'row_edit') {
         return $this->edit_user($rid);
      }
 
      if (!$this->check_action_token($message)) {
         return '';
      }
 
      if ($do === 'row_delete') {
         if ($rid <= 1 || $rid == dbx()->user()) {
            $message = 'Dieser Benutzer wird nicht geloescht.';
            return '';
         }
         $ok = $db->delete($this->ddUser, $rid);
         $message = $ok ? 'Benutzer geloescht.' : 'Benutzer konnte nicht geloescht werden.';
         return '';
      }
 
      $data = array();
      if ($do === 'verify') {
         $data['is_confirm'] = 1;
      }
      if ($do === 'unverify') {
         $data['is_confirm'] = 0;
      }
      if ($do === 'lock') {
         if ($rid <= 1 || $rid == dbx()->user()) {
            $message = 'Dieser Benutzer wird nicht gesperrt.';
            return '';
         }
         $data['status'] = 0;
      }
      if ($do === 'unlock') {
         $data['status'] = 1;
      }
      if ($do === 'reset_password') {
         $newPassword = dbx()->new_password(12);
         $data['pass'] = password_hash($newPassword, PASSWORD_DEFAULT);
      }
 
      if ($data) {
         $ok = $db->update($this->ddUser, $data, $rid);
         if ($ok && $do === 'reset_password') {
            $message = 'Neues Passwort fuer Benutzer #' . $rid . ': ' . $newPassword;
         } else {
            $message = $ok ? 'Benutzer aktualisiert.' : 'Benutzer konnte nicht aktualisiert werden.';
         }
      }
 
      return '';
   }
 
   private function decorate_users($rows) {
      $out = array();
      foreach ((array)$rows as $row) {
         $row['user'] = $this->user_identity($row);
         $row['roles_view'] = $this->roles_label($row['roles'] ?? '');
         $row['verified'] = $this->verified_label($row['is_confirm'] ?? '');
         $row['login'] = $this->status_label($row['status'] ?? '');
         $row['profile'] = '<span class="small text-muted">'
                         . dbx()->esc(trim((string)($row['language'] ?? '')))
                         . ' / ' . dbx()->esc(trim((string)($row['design'] ?? '')))
                         . ' / ' . dbx()->esc(trim((string)($row['color'] ?? '')))
                         . '</span>';
         $row['ops'] = $this->user_actions($row);
         $out[] = $row;
      }
      return $out;
   }
 
   private function report_users() {
      $message = '';
      $content = $this->handle_user_action($message);
      if ($content !== '') {
         return $content;
      }
 
      $db = dbx()->get_system_obj('dbxDB');
      $oReport = new dbxReport_AdminUser;
      $oReport->init('report-admin-user', 'report-admin-user');
      $oReport->add_rep('frame_use_form', '0');
      $oReport->add_rep('report_shell_class', 'dbx-admin-users');
      $oReport->add_rep('report_shell_attrs', 'data-dbx="lib=report|form=0"');
      $oReport->_dd = $this->ddUser;
      $oReport->_action = $this->url('list_user');
      $oReport->_pages = true;
      $oReport->_create_row_select = true;
      $oReport->_create_row_edit = false;
      $oReport->_create_row_delete = false;
      $oReport->_create_sel_flds = true;
      $oReport->_but_pagination = 7;
      $oReport->_fld_id = 'id';
      $oReport->_data = array('dbx_rrows' => 25, 'dbx_rsort' => 'id', 'dbx_rdesc' => 'ASC');
      $oReport->_msg_info = '';
      $oReport->_rpt_format = array(
         'id' => 'html-chars',
         'uname' => 'html-chars',
         'name' => 'html-chars',
         'email' => 'html-chars',
         'user' => 'html',
         'roles_view' => 'html',
         'verified' => 'html',
         'login' => 'html',
         'profile' => 'html',
         'ops' => 'html',
         'lastvisit' => 'php-datetime-usr',
         'update_date' => 'php-datetime-usr',
      );
 
      $newUserBtn = $this->modal_button(
         $this->url('edit_user', array('rid' => 'new')),
         'bi bi-person-plus',
         'Neuer Benutzer',
         'btn-success',
         'Neuer Benutzer',
         ''
      );
      $oReport->add_obj('new_user', 'obj-value', $newUserBtn);
      $oReport->add_obj('bar_actions', 'obj-value', $newUserBtn);
      $oReport->add_obj('stats', 'obj-value', $this->stats_html());
      $oReport->add_obj('tabs', 'obj-value', $this->nav_html('users'));
      $oReport->add_obj('rows_delete', 'obj-value', '');
      $oReport->create_selection_fields('dbxAdmin|rpt-admin-user-selection');
 
      if ($message !== '') {
         if ($this->actionError !== '') {
            $oReport->_msg_error = $message;
         } else {
            $oReport->_msg_success = $message;
         }
      }
 
      if ($oReport->submit()) {
         if (!$oReport->errors()) {
            $oReport->_msg_success = $message ?: '';
         } else {
            $oReport->_msg_error = 'Pruefen sie bitte ihre Eingaben.';
         }
      }
 
      $search = $oReport->get_fld_val('dbx_rwhere', '', 'sqlsearch|max=64');
      $rrows  = $oReport->get_fld_val('dbx_rrows', 25, 'int');
      $rpos   = $oReport->get_fld_val('dbx_rpos', 0, 'int');
      $rsort  = $oReport->get_fld_val('dbx_rsort', 'id', 'parameter');
      $rdesc  = $oReport->get_fld_val('dbx_rdesc', 'ASC', 'parameter');
      $select = $oReport->get_fld_val('dbx_rselect', 0, 'int');
      $filter = dbx()->get_modul_var('filter', '', 'parameter');
 
      $where = array();
      if ($search !== '') {
         $where['search'] = array(
            'value' => $search,
            'like'  => array('uname', 'name', 'name2', 'email', 'roles', 'ort'),
            'equal' => array('id'),
            'mode'  => 'contains',
         );
      }
      if ($filter === 'locked') {
         $where['status'] = 0;
      } elseif ($filter === 'active') {
         $where['status'] = 1;
      } elseif ($filter === 'unverified') {
         $where['is_confirm'] = 0;
      } elseif ($filter === 'admin') {
         $where['roles'] = array('op' => 'LIKE', 'value' => '%admin%');
      } elseif ($filter === 'verified') {
         $where['is_confirm'] = 1;
      }
      if (!$where) {
         $where = '';
      }
      if ($select) {
         if (is_array($where)) {
            $where = $db->normalize_where($this->ddUser, $where);
         }
         $where = $oReport->add_rwhere_select($where);
      }
 
      $dbFields = array('id', 'uname', 'name', 'name2', 'email', 'roles', 'is_confirm', 'status', 'language', 'design', 'color', 'lastvisit', 'update_date');
      $flds = array(
         'id'         => 'ID',
         'user'       => 'Benutzer',
         'roles_view' => 'Rollen',
         'verified'   => 'Verified',
         'login'      => 'Login',
         'profile'    => 'Profil',
         'lastvisit'  => 'Letzter Besuch',
         'update_date'=> 'Update',
         'ops'        => 'Aktionen',
      );
 
      $oReport->_rflds = $flds;
      $oReport->_rrows = $rrows;
      $oReport->_rpos = $rpos;
      $oReport->_count_all = $db->count($this->ddUser);
      $oReport->_rcount = $db->count($this->ddUser, $where);
      $rows = $db->select($this->ddUser, $where, $dbFields, $rsort, $rdesc, '', $rrows, $rpos, 0);
      $oReport->_rdata = $this->decorate_users($rows);
 
      return $oReport->run();
   }
 
   private function edit_user($rid = 'new') {
      $db = dbx()->get_system_obj('dbxDB');
      $isNew = ($rid === 'new' || !$rid);
      $data = array(
         'status' => 1,
         'is_confirm' => 1,
         'language' => 'de',
         'roles' => 'member',
         'edit' => 0,
         'password_new' => '',
      );
 
      if (!$isNew) {
         $record = $db->select1($this->ddUser, (int)$rid, '*', 0);
         if (is_array($record)) {
            $data = array_merge($data, $record);
         }
      }
 
      $oForm = dbx()->get_system_obj('dbxForm');
      $oForm->init('form-admin-user');
      $oForm->add_rep('bar_title', $isNew ? 'Neuer Benutzer' : 'Benutzer bearbeiten');
      $oForm->add_rep('bar_subtitle', $isNew ? 'Login, Profil und Rollen anlegen' : 'Benutzerdaten pflegen');
      $oForm->add_obj('bar_actions', 'obj-value', '<button class="btn btn-primary btn-sm" type="submit"><i class="bi bi-save"></i> Speichern</button>');
      $oForm->_dd = $this->ddUser;
      $oForm->_fld_id = 'id';
      $oForm->_data = $data;
      $oForm->_msg_info = $isNew ? 'Neuen Benutzer anlegen.' : 'Benutzer bearbeiten.';
      $oForm->_action = $this->url('edit_user', array('rid' => ($isNew ? 'new' : (int)$rid)));
      $oForm->set_activ_id($isNew ? 0 : (int)$rid);
 
      $oForm->add_fld('uname', 'text-label', 'Loginname', 'alphanum|min=4|max=60');
      $oForm->add_fld('password_new', 'password-label', 'Neues Passwort', 'varchar|max=128', placeholder: 'Leer lassen, um das Passwort nicht zu aendern');
      $oForm->add_fld('name', 'text-label', 'Name', 'parameter|max=255');
      $oForm->add_fld('name2', 'text-label', 'Zusatz', 'parameter|max=255');
      $oForm->add_fld('email', 'text-label', 'E-Mail', 'email|max=255');
      $oForm->add_fld('roles', 'multi-select', 'Rollen', 'array|parameter', data: array('size' => 7), options: $this->role_options());
      $oForm->add_fld('status', 'select-single-label', 'Loginstatus', 'int', options: array('1' => 'Aktiv', '0' => 'Gesperrt', '2' => 'Wartet'));
      $oForm->add_fld('is_confirm', 'select-single-label', 'Verified', 'int', options: array('1' => 'Verified', '0' => 'Offen'));
      $oForm->add_fld('edit', 'select-single-label', 'Editor', 'int', options: array('1' => 'Ja', '0' => 'Nein'));
      $oForm->add_fld('language', 'select-single-label', 'Sprache', 'parameter|max=3', options: array('de' => 'Deutsch', 'en' => 'English'));
      $oForm->add_fld('design', 'text-label', 'Design', 'parameter|max=32');
      $oForm->add_fld('color', 'text-label', 'Farbe', 'parameter|max=32');
      $oForm->add_fld('telefon', 'text-label', 'Telefon', 'parameter|max=64');
      $oForm->add_fld('handy', 'text-label', 'Mobil', 'parameter|max=64');
      $oForm->add_fld('strasse', 'text-label', 'Strasse', 'parameter|max=255');
      $oForm->add_fld('plz', 'text-label', 'PLZ', 'parameter|max=16');
      $oForm->add_fld('ort', 'text-label', 'Ort', 'parameter|max=255');
      $oForm->add_fld('land', 'text-label', 'Land', 'parameter|max=32');
      $oForm->add_fld('settings', 'textarea-label', 'Einstellungen', '*', data: array('rows' => 8));
 
      if ($oForm->submit()) {
         if (!$oForm->errors()) {
            $roles = $oForm->get_post('roles', array(), 'array|parameter');
            if (!is_array($roles)) {
               $roles = array_filter(array_map('trim', explode(',', (string)$roles)));
            }
 
            $values = array(
               'uname'      => $oForm->get_post('uname', '', 'alphanum|max=60'),
               'name'       => $oForm->get_post('name', '', 'parameter|max=255'),
               'name2'      => $oForm->get_post('name2', '', 'parameter|max=255'),
               'email'      => $oForm->get_post('email', '', 'email|max=255'),
               'roles'      => implode(',', array_filter(array_map('trim', $roles))),
               'status'     => $oForm->get_post('status', 1, 'int'),
               'is_confirm' => $oForm->get_post('is_confirm', 0, 'int'),
               'edit'       => $oForm->get_post('edit', 0, 'int'),
               'language'   => $oForm->get_post('language', 'de', 'parameter|max=3'),
               'design'     => $oForm->get_post('design', '', 'parameter|max=32'),
               'color'      => $oForm->get_post('color', '', 'parameter|max=32'),
               'telefon'    => $oForm->get_post('telefon', '', 'parameter|max=64'),
               'handy'      => $oForm->get_post('handy', '', 'parameter|max=64'),
               'strasse'    => $oForm->get_post('strasse', '', 'parameter|max=255'),
               'plz'        => $oForm->get_post('plz', '', 'parameter|max=16'),
               'ort'        => $oForm->get_post('ort', '', 'parameter|max=255'),
               'land'       => $oForm->get_post('land', '', 'parameter|max=32'),
               'settings'   => $oForm->get_post('settings', '', '*'),
            );
 
            $password = $oForm->get_post_data('password_new', '', '*');
            if ($password !== '') {
               $values['pass'] = password_hash($password, PASSWORD_DEFAULT);
            }
 
            $server = $db->get_dd_server($this->ddUser);
            $uname = $db->escape($values['uname'], $server);
            $duplicateWhere = "uname='$uname'";
            if (!$isNew) {
               $duplicateWhere .= ' AND id <> ' . (int)$rid;
            }
            if ($db->count($this->ddUser, $duplicateWhere) > 0) {
               $oForm->add_fld_error('uname', 'Loginname existiert bereits.');
               $oForm->_msg_error = 'Loginname existiert bereits.';
            } else {
               $ok = $db->save($this->ddUser, $values, $isNew ? 0 : (int)$rid);
               $oForm->_msg_success = $ok ? 'Benutzer gespeichert.' : 'Benutzer konnte nicht gespeichert werden.';
            }
         } else {
            $oForm->_msg_error = 'Pruefen sie bitte ihre Eingaben.';
         }
      }
 
      return $oForm->run();
   }
 
   private function group_actions($row) {
      $id = (int)($row['id'] ?? 0);
      if ($id <= 0) {
         return '';
      }
      $html = $this->modal_button($this->url('edit_group', array('rid' => $id)), 'bi bi-pencil-square', 'Gruppe bearbeiten');
      if ((string)($row['active'] ?? '') === '1') {
         $html .= $this->action_button($this->action_url('list_groups', array('dbx_do' => 'group_deactivate', 'rid' => $id)), 'bi bi-pause-circle', 'Gruppe deaktivieren', 'btn-outline-warning');
      } else {
         $html .= $this->action_button($this->action_url('list_groups', array('dbx_do' => 'group_activate', 'rid' => $id)), 'bi bi-check-circle', 'Gruppe aktivieren', 'btn-outline-success');
      }
      $html .= $this->delete_button($this->action_url('list_groups', array('dbx_do' => 'row_delete', 'rid' => $id)), 'Gruppe loeschen');
      return $html;
   }
 
   private function handle_group_action(&$message = '') {
      $db = dbx()->get_system_obj('dbxDB');
      $do = dbx()->get_modul_var('dbx_do', '', 'parameter');
      if (!$do) {
         $do = dbx()->get_modul_var('dbx_run3', '', 'parameter');
      }
      $rid = dbx()->get_modul_var('rid', 0, 'int');
 
      if ($do === 'row_edit' && $rid) {
         return $this->edit_group($rid);
      }
      if ($do && $rid && !$this->check_action_token($message)) {
         return '';
      }
      if ($do === 'row_delete' && $rid) {
         $ok = $db->delete($this->ddGroup, $rid);
         $message = $ok ? 'Gruppe geloescht.' : 'Gruppe konnte nicht geloescht werden.';
      }
      if ($do === 'group_activate' && $rid) {
         $ok = $db->update($this->ddGroup, array('active' => 1), $rid);
         $message = $ok ? 'Gruppe aktiviert.' : 'Gruppe konnte nicht aktiviert werden.';
      }
      if ($do === 'group_deactivate' && $rid) {
         $ok = $db->update($this->ddGroup, array('active' => 0), $rid);
         $message = $ok ? 'Gruppe deaktiviert.' : 'Gruppe konnte nicht deaktiviert werden.';
      }
 
      return '';
   }
 
   private function decorate_groups($rows) {
      $users = dbx()->get_system_obj('dbxDB')->select($this->ddUser, '', array('roles'), 'id', 'ASC', '', 0, 0, 0);
      $out = array();
      foreach ((array)$rows as $row) {
         $name = (string)($row['name'] ?? '');
         $count = 0;
         foreach ((array)$users as $user) {
            $roles = array_filter(array_map('trim', explode(',', (string)($user['roles'] ?? ''))));
            if (in_array($name, $roles, true)) {
               $count++;
            }
         }
         $row['active_view'] = ((string)($row['active'] ?? '') === '1') ? $this->badge('aktiv', 'success') : $this->badge('inaktiv', 'secondary');
         $row['users'] = (string)$count;
         $row['ops'] = $this->group_actions($row);
         $out[] = $row;
      }
      return $out;
   }
 
   private function report_groups() {
      $message = '';
      $content = $this->handle_group_action($message);
      if ($content !== '') {
         return $content;
      }
 
      $db = dbx()->get_system_obj('dbxDB');
      $oReport = new dbxReport_AdminUser;
      $oReport->init('report-admin-groups', 'report-admin-groups');
      $oReport->add_rep('frame_use_form', '0');
      $oReport->add_rep('report_shell_class', 'dbx-admin-groups');
      $oReport->add_rep('report_shell_attrs', 'data-dbx="lib=report|form=0"');
      $oReport->_dd = $this->ddGroup;
      $oReport->_action = $this->url('list_groups');
      $oReport->_pages = true;
      $oReport->_create_row_select = true;
      $oReport->_create_row_edit = false;
      $oReport->_create_row_delete = false;
      $oReport->_create_sel_flds = true;
      $oReport->_but_pagination = 7;
      $oReport->_fld_id = 'id';
      $oReport->_data = array('dbx_rrows' => 25, 'dbx_rsort' => 'name', 'dbx_rdesc' => 'ASC');
      $oReport->_msg_info = '';
      $oReport->_rpt_format = array(
         'id' => 'html-chars',
         'name' => 'html-chars',
         'description' => 'html-chars',
         'active_view' => 'html',
         'ops' => 'html',
      );
      $newGroupBtn = $this->modal_button(
         $this->url('edit_group', array('rid' => 'new')),
         'bi bi-plus-circle',
         'Neue Gruppe',
         'btn-success',
         'Neue Gruppe',
         ''
      );
      $oReport->add_obj('new_group', 'obj-value', $newGroupBtn);
      $oReport->add_obj('bar_actions', 'obj-value', $newGroupBtn);
      $oReport->add_obj('tabs', 'obj-value', $this->nav_html('groups'));
      $oReport->add_obj('rows_delete', 'obj-value', '');
      $oReport->create_selection_fields('dbxAdmin|rpt-admin-groups-selection');
      if ($message !== '') {
         if ($this->actionError !== '') {
            $oReport->_msg_error = $message;
         } else {
            $oReport->_msg_success = $message;
         }
      }
 
      $search = $oReport->get_fld_val('dbx_rwhere', '', 'sqlsearch|max=64');
      $rrows  = $oReport->get_fld_val('dbx_rrows', 25, 'int');
      $rpos   = $oReport->get_fld_val('dbx_rpos', 0, 'int');
      $rsort  = $oReport->get_fld_val('dbx_rsort', 'name', 'parameter');
      $rdesc  = $oReport->get_fld_val('dbx_rdesc', 'ASC', 'parameter');
      $where = '';
      if ($search !== '') {
         $where = array('search' => array('value' => $search, 'like' => array('name', 'description'), 'mode' => 'contains'));
      }
 
      $flds = array(
         'id' => 'ID',
         'name' => 'Gruppe',
         'description' => 'Beschreibung',
         'active_view' => 'Status',
         'users' => 'Benutzer',
         'ops' => 'Aktionen',
      );
 
      $oReport->_rflds = $flds;
      $oReport->_rrows = $rrows;
      $oReport->_rpos = $rpos;
      $oReport->_count_all = $db->count($this->ddGroup);
      $oReport->_rcount = $db->count($this->ddGroup, $where);
      $rows = $db->select($this->ddGroup, $where, array('id', 'name', 'description', 'active'), $rsort, $rdesc, '', $rrows, $rpos, 0);
      $oReport->_rdata = $this->decorate_groups($rows);
 
      return $oReport->run();
   }
 
   private function edit_group($rid = 'new') {
      $db = dbx()->get_system_obj('dbxDB');
      $isNew = ($rid === 'new' || !$rid);
      $data = array('active' => 1);
      if (!$isNew) {
         $record = $db->select1($this->ddGroup, (int)$rid, '*', 0);
         if (is_array($record)) {
            $data = array_merge($data, $record);
         }
      }
 
      $oForm = dbx()->get_system_obj('dbxForm');
      $oForm->init('form-admin-group');
      $oForm->add_rep('bar_title', $isNew ? 'Neue Gruppe' : 'Gruppe bearbeiten');
      $oForm->add_rep('bar_subtitle', 'Rollen und Modulrechte');
      $actionUrl = $this->url('edit_group', array('rid' => ($isNew ? 'new' : (int)$rid)));
      $oForm->add_module_bar_form_actions(array(
         'save'       => true,
         'reload'     => true,
         'reload_url' => $actionUrl,
         'delete'     => !$isNew,
         'delete_url' => $isNew ? '' : $this->action_url('list_groups', array('dbx_do' => 'row_delete', 'rid' => (int)$rid)),
         'delete_title' => 'Gruppe loeschen',
      ));
      $oForm->add_obj('bar_actions', 'obj-value',
         '<a class="btn btn-outline-secondary btn-sm" href="' . dbx()->esc($this->url('list_groups')) . '" title="Zur Gruppenliste"><i class="bi bi-list-ul"></i></a>'
      );
      $oForm->_dd = $this->ddGroup;
      $oForm->_fld_id = 'id';
      $oForm->_data = $data;
      $oForm->_msg_info = $isNew ? 'Neue Rolle / Gruppe anlegen.' : 'Rolle / Gruppe bearbeiten.';
      $oForm->_action = $this->url('edit_group', array('rid' => ($isNew ? 'new' : (int)$rid)));
 
      $oForm->add_fld('name', 'text-label', 'Gruppe', 'parameter|min=2|max=255');
      $oForm->add_fld('description', 'textarea-label', 'Beschreibung', 'parameter|max=1000', data: array('rows' => 5));
      $oForm->add_fld('active', 'select-single-label', 'Aktiv', 'int', options: array('1' => 'Aktiv', '0' => 'Inaktiv'));
 
      if ($oForm->submit()) {
         if (!$oForm->errors()) {
            $values = array(
               'name' => $oForm->get_post('name', '', 'parameter|max=255'),
               'description' => $oForm->get_post('description', '', 'parameter|max=1000'),
               'active' => $oForm->get_post('active', 0, 'int'),
            );
            $ok = $db->save($this->ddGroup, $values, $isNew ? 0 : (int)$rid);
            $oForm->_msg_success = $ok ? 'Gruppe gespeichert.' : 'Gruppe konnte nicht gespeichert werden.';
         } else {
            $oForm->_msg_error = 'Pruefen sie bitte ihre Eingaben.';
         }
      }
 
      return $oForm->run();
   }
 
   public function run($action = '') {
      $run = dbx()->get_modul_var('dbx_run2', 'list_user', 'parameter');
 
      switch ($run) {
         case '':
         case 'list_user':
            return $this->report_users();
 
         case 'edit_user':
            return $this->edit_user(dbx()->get_modul_var('rid', 'new', 'parameter'));
 
         case 'list_groups':
         case 'groups':
            return $this->report_groups();
 
         case 'edit_group':
            return $this->edit_group(dbx()->get_modul_var('rid', 'new', 'parameter'));
      }
 
      $oTPL = dbx()->get_system_obj('dbxTPL');
      return $oTPL->get_tpl('dbx|alert-warning', array('msg' => 'User Admin Work (' . dbx()->esc($run) . ') ist undefiniert.'));
   }
}
?>