checkRoleAccess($type);
if ($checkRole == false) {
return view('errors.404');
}
switch ($type) {
case 'user_management':
$view = 'content.user_management.user';
$dataPage['title'] = 'List User Bank';
$dataPage['tableHead'] =
array(
["Role","all","role_name"],
["Username","all","username"],
["E-Mail","all","email"],
["Nama Lengkap","all","full_name"],
["Status","all","status_user"],
["Act","all","action"]
);
break;
}
//REF
$dataPage['ref_role'] = DB::table('groups_admin')->where('is_active','t')->get();
foreach($dataPage['tableHead'] as $v){
$arrHead[] = $v[2];
}
$dataPage['head'] = implode(",",$arrHead);
$dataPage['type'] = $type;
$dataPage['table'] = route('user.data_table',$type);
return $this->bsGetView('content.user.index',$dataPage);
}
public function data_table(Request $request, $type)
{
$checkRole = $this->checkRoleAccess($type);
if ($checkRole == false) {
return view('errors.404');
}
$SessionUser = Session::get('user');
switch ($type) {
case 'user_management':
$data = \DB::select("SELECT users_admin.*,full_name, users_admin.id as admin_id,rsu.description as role_name
FROM users_admin join groups_admin rsu on rsu.id = users_admin.role order by users_admin.id desc");
break;
}
return DataTables::of($data)
->addColumn('action', function ($data) {
$actBlock = '';
$id = Crypt::encryptString($data->admin_id);
if (Auth::user()->role == 1) {
// if ($data->role != 1) {
if ($data->status_user == 'f') {
$actBlock = '
Aktifkan User
';
}else{
$actBlock = '
Block User
';
}
// }
}
return '
';
})
->editColumn('status_user',function($data) {
return ($data->status_user == 't') ? 'Active':'Blocked';
})
->rawColumns(['status_user','action'])
->make(true);
}
public function act_any(Request $request, $type)
{
$bypassRole = ['changePassword','get_user_detail','store_logout','check_expired_password'];
if (!in_array($type, $bypassRole)) {
if (Auth::guard('admin')->user()->role != 1) {
return view('errors.404');
}
}
// USER
switch ($type) {
case 'user_store':
return $this->act_user_store($request);
break;
case 'user_delete':
return $this->act_user_delete(Crypt::decryptString($request->input('id')));
break;
case 'user_reset_password':
return $this->act_user_reset_password(Crypt::decryptString($request->input('id')));
break;
case 'get_user_detail':
return $this->act_get_user_detail(Crypt::decryptString($request->input('id')));
break;
case 'changePassword':
return $this->act_changePassword($request);
break;
case 'get_notif':
return $this->act_get_notif($request);
break;
case 'read_notif':
return $this->act_read_notif($request);
break;
case 'store_logout':
return $this->act_store_logout($request);
break;
case 'generate_key':
return $this->act_generate_key($request);
break;
case 'user_block':
return $this->act_user_block(Crypt::decryptString($request->input('id')));
break;
case 'user_aktif':
return $this->act_user_aktif(Crypt::decryptString($request->input('id')));
break;
case 'check_expired_password':
return $this->check_expired_password($request);
break;
}
}
public function act_user_store(Request $request)
{
$get = collect(\DB::select("SELECT max(id) as max_id FROM users_admin"))->first();
$id = $request->input('get_id');
if ($id) {
$id = Crypt::decryptString($id);
}
DB::beginTransaction();
try{
// VALIDATE
if ($id == '') {
$checkCode = DB::table('users_admin')->where('username', $request->username)->count();
$checkEmail = DB::table('users_admin')->where('email', $request->email)->count();
if ($checkCode > 0) {
return response()->json([
'rc' => 99,
'rm' => "Username ".$request->username." Sudah Terdaftar"
]);
}
if ($checkEmail > 0) {
return response()->json([
'rc' => 99,
'rm' => "email ".$request->email." Sudah Terdaftar"
]);
}
}else{
$dataCheck = DB::table('users_admin')->where('id',$id)->first();
if ($request->username == $dataCheck->username) {
}else{
$checkCode = DB::table('users_admin')->where('username',$request->username)->count();
$validNMID = ($checkCode > 0) ? false : true;
if ($validNMID == false) {
return response()->json([
'rc' => 99,
'rm' => "Username ".$request->username." Sudah Terdaftar"
]);
}
}
if ($request->email == $dataCheck->email) {
}else{
$checkEmail = DB::table('users_admin')->where('email',$request->email)->count();
$validName = ($checkEmail > 0) ? false : true;
if ($validName == false) {
return response()->json([
'rc' => 99,
'rm' => "email ".$request->email." Sudah Terdaftar"
]);
}
}
}
$oldData = null;
if ($id == "") {
$event = "Tambah User ".$request->input('username');
$data = new User();
$data->id = $get->max_id+1;
$data->status_user = 't';
$data->date_password = date('Y-m-d', strtotime("-62 days"));
$data->password = $this->hashPassword('Admin123');
}else{
$oldData = \DB::table('users_admin')->where('id',$id)->first();
$event = "Ubah User ".$request->input('username');
$data = User::find($id);
$rolename = DB::table('groups_admin')->where('id',$data->role)->first();
$rolename_new = DB::table('groups_admin')->where('id',$request->role)->first();
if ($data->role !== $request->post('role') ) {
$event = 'Change Privilege from '.$rolename->name.' to '.$rolename_new->name;
if ($request->post('role') != 1 && $data->role == 1) {
$this->auditTrailValue($event,"Downgrade Privilege",'users_admin',json_encode($data),json_encode($oldData));
}else{
$this->auditTrailValue($event,"elevation of privilege",'users_admin',json_encode($data),json_encode($oldData));
}
}
}
$data->role = $request->input('role');
$data->phone = $request->input('phone');
$data->email = $this->cleanString($request->input('email'));
$data->full_name = $this->cleanString($request->input('full_name'));
$data->username = $this->cleanString($request->input('username'));
$data->address = $request->input('address');
$data->mid = $request->input('mid');
$data->id_kota = $request->input('id_kota');
$data->save();
$this->auditTrailValue($event,"User Bank",'users_admin',json_encode($data),json_encode($oldData));
DB::commit();
return response()->json([
'rc' => 0,
'rm' => "sukses"
]);
}
catch (QueryException $e){
if($e->getCode() == '23505'){
$response = "Terjadi Duplikasi Data, Data Gagal Disimpan !";
}else{
$response = "Terjadi Kesalahan, Data Tidak Sesuai !";
}
DB::rollback();
return response()->json([
'rc' => 99,
'rm' => $response,
// // 'msg' => $e->getMessage()
]);
}
}
public function act_get_user_detail($id)
{
$data = collect(\DB::select("SELECT * FROM users_admin where id = ?",[$id]))->first();
$data->id = Crypt::encryptString($data->id);
return response()->json([
'rc' => 0,
'data' => $data
]);
}
public function act_user_delete($id)
{
$user = $this->getUserAdmin($id);
$event = "Hapus User ".$user[0]->username;
// $this->auditTrail($event,"User Admin");
$this->auditTrailValue($event,"User Bank",'users_admin',json_encode($user),'');
if ($id == 1) {
return response()->json([
'rc' => 99,
'rm' => "Super Admin Tidak Dapat Dihapus !"
]);
}else {
User::destroy($id);
return response()->json([
'rc' => 0,
'rm' => "Berhasil Dihapus !"
]);
}
}
public function act_user_reset_password($id)
{
$user = $this->getUserAdmin($id);
$event = "Reset Password User ".$user[0]->username;
$this->auditTrail($event,"User Admin");
$data = User::find($id);
$data->password = $this->hashPassword('Admin123');
$data->save();
return response()->json([
'rc' => 0,
'rm' => $user[0]->username." Berhasil di reset password !"
]);
}
public function act_user_block($id)
{
$user = $this->getUserAdmin($id);
$event = "Block User ".$user[0]->username;
$this->auditTrail($event,"User Bank");
$data = User::find($id);
$data->status_user = 'f';
$data->save();
return response()->json([
'rc' => 0,
'rm' => $user[0]->username." Berhasil di Block !"
]);
}
public function act_user_aktif($id)
{
$user = $this->getUserAdmin($id);
$event = "Aktif User ".$user[0]->username;
$this->auditTrail($event,"User Bank");
$data = User::find($id);
$data->status_user = 't';
$data->wrong_password = 0;
$data->save();
return response()->json([
'rc' => 0,
'rm' => $user[0]->username." Berhasil di Aktif !"
]);
}
function act_changePassword(Request $request)
{
$user = $this->getUserAdmin(Auth::guard('admin')->user()->id);
$data = User::find(Auth::guard('admin')->user()->id);
$checkPassword = $this->hashPasswordCheck($request->input('oldPassword'),$data->password);
if ($checkPassword == $data->password) {
if (!preg_match('/^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9]).{8,}$/',$request->input('newPassword')))
{
return response()->json([
'rc' => 99,
'rm' => 'Aturan Password Tidak Sesuai !'
]);
}
$getLimit = DB::table('config_map')->where('config_map_id','pass_max_history')->first();
$checkHistoryPassword = DB::table('password_history')
->where('user_admin',Auth::guard('admin')->user()->id)
->limit($getLimit->config_map_val)
->orderByDesc('crtdt')
->get();
foreach ($checkHistoryPassword as $k => $v) {
$checkPasswordOld = $this->hashPasswordCheck($request->input('newPassword'),$v->password);
if ($checkPasswordOld == $v->password) {
return response()->json([
'rc' => 99,
'rm' => 'Password sudah pernah digunakan, gunakan passsword lain.'
]);
}
}
$checkSame = $this->hashPasswordCheck($request->input('newPassword'),$data->password);
if ($checkSame == $data->password) {
return response()->json([
'rc' => 99,
'rm' => 'Password harus berbeda dengan password sebelumnya.'
]);
}
$data->password = $this->hashPassword($request->input('newPassword'));
$data->date_password = date('Y-m-d');
$data->save();
DB::table('password_history')->insert([
'password' => $this->hashPassword($request->input('oldPassword')),
'crtdt' => date('Y-m-d'),
'user_admin' => Auth::guard('admin')->user()->id
]);
$event = "Ubah Password User ".$user[0]->username;
$this->auditTrail($event,"User Admin");
return response()->json([
'rc' => 0,
'rm' => 'Berhasil Merubah Password !'
]);
}
else{
return response()->json([
'rc' => 99,
'rm' => 'Password Lama Tidak Sesuai !'
]);
}
}
public function act_generate_key(Request $request)
{
$data = User::find(Auth::guard('admin')->user()->id);
$data->key = $request->key;
$data->save();
return response()->json([
'rc' => 0,
'rm' => 'Berhasil Generate Key Baru !',
'data' => $request->key
]);
}
function act_get_notif(Request $request)
{
return response()->json([
'rc' => 0
]);
}
public function act_read_notif(Request $request)
{
DB::table('mst_notif')
->where('is_admin', 't')
->update(['is_read' => 1]);
$c_notif = collect(\DB::select("SELECT count(cust_id) as j FROM mst_notif where is_read is null and is_admin = 't' GROUP BY cust_id"))->first();
$numNotif = 0;
if ($c_notif) {
$numNotif = $c_notif->j;
}
return response()->json([
'rc' => 0,
'jumlah' => $numNotif
]);
}
public function act_store_logout(Request $request)
{
$user = DB::table('users_admin')->where('id',Auth::guard('admin')->user()->id)->first();
$event = "Logout User ID:".Auth::guard('admin')->user()->id;
$this->auditTrailLog($event,"Logout Log WEBMIN_BANK",'',json_encode($user),'');
Session::flush();
Auth::guard('admin')->logout();
return response()->json([
'rc' => 0,
'rm' => 'success'
]);
}
public function check_expired_password(Request $request)
{
$check = DB::selectOne('SELECT CURRENT_DATE - date_password + 1 AS days
FROM users_admin
where id = ?',[Auth::guard('admin')->user()->id]);
if ($check->days > 60) {
return response()->json([
'rc' => 99,
'rm' => 'Change Password'
]);
}else{
}
return response()->json([
'rc' => 0,
'rm' => 'success'
]);
}
}