nickpons666/contenedor_ibiza
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat: limitar permisos de coordinador en usuarios y habilitar panel de generacion en rotaciones

Browse Source
This commit is contained in:
nickpons666
2026-02-02 19:15:55 -06:00
parent 300a5bede4
commit b73cd6a32f
6 changed files with 69 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files

38
public/admin/usuarios.php
View File

@@ -89,18 +89,26 @@ $users = $controller->index(); // Maneja POST internamente y retorna lista para
</td>
<td>
<div class="flex">
<button onclick='editUser(<?= json_encode($u) ?>)' class="btn btn-sm btn-secondary">Editar</button>
<?php
$canManage = $_SESSION['role'] === 'admin' || ($_SESSION['role'] === 'coordinador' && $u['role'] !== 'admin');
?>
<form method="POST" style="display:inline;">
<input type="hidden" name="csrf_token" value="<?= csrfToken() ?>">
<input type="hidden" name="action" value="toggle">
<input type="hidden" name="id" value="<?= $u['id'] ?>">
<?php if ($u['active']): ?>
<button type="submit" class="btn btn-sm btn-danger">Desactivar</button>
<?php else: ?>
<button type="submit" class="btn btn-sm btn-success">Activar</button>
<?php endif; ?>
</form>
<?php if ($canManage): ?>
<button onclick='editUser(<?= json_encode($u) ?>)' class="btn btn-sm btn-secondary">Editar</button>
<form method="POST" style="display:inline;">
<input type="hidden" name="csrf_token" value="<?= csrfToken() ?>">
<input type="hidden" name="action" value="toggle">
<input type="hidden" name="id" value="<?= $u['id'] ?>">
<?php if ($u['active']): ?>
<button type="submit" class="btn btn-sm btn-danger">Desactivar</button>
<?php else: ?>
<button type="submit" class="btn btn-sm btn-success">Activar</button>
<?php endif; ?>
</form>
<?php else: ?>
<span class="badge badge-secondary">Solo lectura</span>
<?php endif; ?>
</div>
</td>
</tr>
@@ -139,7 +147,9 @@ $users = $controller->index(); // Maneja POST internamente y retorna lista para
<select name="role" class="form-control">
<option value="ayudante">Ayudante</option>
<option value="coordinador">Coordinador</option>
<option value="admin">Administrador</option>
<?php if ($_SESSION['role'] === 'admin'): ?>
<option value="admin">Administrador</option>
<?php endif; ?>
</select>
</div>
@@ -180,7 +190,9 @@ $users = $controller->index(); // Maneja POST internamente y retorna lista para
<select name="role" id="edit_role" class="form-control">
<option value="ayudante">Ayudante</option>
<option value="coordinador">Coordinador</option>
<option value="admin">Administrador</option>
<?php if ($_SESSION['role'] === 'admin'): ?>
<option value="admin">Administrador</option>
<?php endif; ?>
</select>
</div>

4
public/partials/navbar.php
View File

@@ -17,8 +17,10 @@ $user = $auth->getCurrentUser();
<a href="<?= siteUrl('rotaciones.php') ?>" class="nav-link">Rotaciones</a>
<a href="<?= siteUrl('horarios.php') ?>" class="nav-link">Horarios</a>
<?php if ($auth->isAdmin()): ?>
<?php if ($auth->hasRole(['admin', 'coordinador'])): ?>
<a href="<?= siteUrl('admin/usuarios.php') ?>" class="nav-link">Usuarios</a>
<?php endif; ?>
<?php if ($auth->isAdmin()): ?>
<a href="<?= siteUrl('admin/telegram.php') ?>" class="nav-link">Telegram</a>
<?php endif; ?>

10
public/rotaciones.php
View File

@@ -12,8 +12,8 @@ $auth = new AuthService();
$controller = new AssignmentController();
$assignments = $controller->index();
// Si se envia formulario de generación (Solo Admin)
if (isPost() && $auth->isAdmin()) {
// Si se envia formulario de generación (Admin o Coordinador)
if (isPost() && ($auth->isAdmin() || $auth->isCoordinador())) {
$controller->generate();
}
?>
@@ -42,10 +42,10 @@ if (isPost() && $auth->isAdmin()) {
<div class="alert alert-error"><?= e($msg) ?></div>
<?php endif; ?>
<!-- Panel de Administración (Solo Admin) -->
<?php if ($auth->isAdmin()): ?>
<!-- Panel de Administración (Admin y Coordinador) -->
<?php if ($auth->isAdmin() || $auth->isCoordinador()): ?>
<div class="card" style="border: 1px solid #cbd5e1; background: #f8fafc;">
<h3 class="card-title" style="font-size: 1rem; margin-bottom: 1rem;">⚙️ Panel de Generación (Solo Administrador)</h3>
<h3 class="card-title" style="font-size: 1rem; margin-bottom: 1rem;">⚙️ Panel de Generación</h3>
<form method="POST" onsubmit="return confirm('¿Estás seguro de generar nuevas rotaciones?')">
<input type="hidden" name="csrf_token" value="<?= csrfToken() ?>">
<div style="display: flex; gap: 1rem; align-items: center;">