aurweb/web/template/account_details.php
Eli Schwartz 3ac958ac01
Move permission for LIST_COMMENTS to dev/tu block
In commit 3578e77ad4 we implemented
listing of comments from the account details page , but this was
intended to only be available to TUs and Devs. As the comment says:
"display the comment list if they're a TU/dev"

The credential checking code, however, set this credential for all
users, contrary to the intention of the commit.

In order to preserve the ability to list a person's own comments, also
declare the allowed uids based on the profile being viewed.
2019-08-18 13:01:37 -04:00

93 lines
3 KiB
PHP

<table class="arch-bio-entry">
<tr>
<td>
<h3><?= htmlspecialchars($row["Username"], ENT_QUOTES) ?></h3>
<table class="bio">
<tr>
<th><?= __("Username") . ":" ?></th>
<td><?= $row["Username"] ?></td>
</tr>
<tr>
<th><?= __("Account Type") . ":" ?></th>
<td>
<?php
if ($row["AccountType"] == "User") {
print __("User");
} elseif ($row["AccountType"] == "Trusted User") {
print __("Trusted User");
} elseif ($row["AccountType"] == "Developer") {
print __("Developer");
} elseif ($row["AccountType"] == "Trusted User & Developer") {
print __("Trusted User & Developer");
}
?>
</td>
</tr>
<tr>
<th><?= __("Email Address") . ":" ?></th>
<td>
<?php
if ($row["HideEmail"] == 1 && !has_credential(CRED_ACCOUNT_SEARCH)):
print "<em>" . __("hidden") . "</em>";
else:
?>
<a href="mailto:<?= htmlspecialchars($row["Email"], ENT_QUOTES) ?>"><?= htmlspecialchars($row["Email"], ENT_QUOTES) ?></a>
<?php
endif;
?>
</td>
</tr>
<tr>
<th><?= __("Real Name") . ":" ?></th>
<td><?= htmlspecialchars($row["RealName"], ENT_QUOTES) ?></td>
</tr>
<tr>
<th><?= __("Homepage") . ":" ?></th>
<td><a href="<?= htmlspecialchars($row["Homepage"], ENT_QUOTES) ?>" rel="nofollow"><?= htmlspecialchars($row["Homepage"], ENT_QUOTES) ?></a></td>
</tr>
<tr>
<th><?= __("IRC Nick") . ":" ?></th>
<td><?= htmlspecialchars($row["IRCNick"], ENT_QUOTES) ?></td>
</tr>
<tr>
<th><?= __("PGP Key Fingerprint") . ":" ?></th>
<td><?= html_format_pgp_fingerprint($row["PGPKey"]) ?></td>
</tr>
<tr>
<th><?= __("Status") . ":" ?></th>
<td>
<?= $row["InactivityTS"] ? __("Inactive since") . ' ' . date("Y-m-d H:i", $row["InactivityTS"]) : __("Active"); ?>
</td>
</tr>
<tr>
<th><?= __("Registration date:") ?></th>
<?php if ($row["RegistrationTS"]): ?>
<td><?= (new DateTime($row["RegistrationTS"]))->format('Y-m-d') ?></td>
<?php else: ?>
<td><?= __("unknown") ?></td>
<?php endif; ?>
</tr>
<?php if (has_credential(CRED_ACCOUNT_LAST_LOGIN)): ?>
<tr>
<th><?= __("Last Login") . ":" ?></th>
<td>
<?= $row["LastLogin"] ? date("Y-m-d", $row["LastLogin"]) : __("Never"); ?>
</td>
</tr>
<?php endif; ?>
<tr>
<th>Links:</th>
<td><ul>
<li><a href="<?= get_uri('/packages/'); ?>?K=<?= $row['Username'] ?>&amp;SeB=m"><?= __("View this user's packages") ?></a></li>
<?php if (can_edit_account($row)): ?>
<li><a href="<?= get_user_uri($row['Username']); ?>edit"><?= __("Edit this user's account") ?></a></li>
<?php endif; ?>
<?php if (has_credential(CRED_ACCOUNT_LIST_COMMENTS, array($row['ID']))): ?>
<li><a href="<?= get_user_uri($row['Username']); ?>comments"><?= __("List this user's comments") ?></a></li>
<?php endif; ?>
</ul></td>
</tr>
</table>
</td>
</tr>
</table>