kaffeekasse-saas/mandant-einstellungen.php

<?php

require_once __DIR__ . '/functions.php';
require_once __DIR__ . '/app/audit.php';

$pdo = app_db_pdo();
$user = saas_require_login();
$canManageSettings = saas_can_manage_tenant_settings($user);
$errors = [];
$saved = false;
$settings = null;

if ($canManageSettings) {
    if ($_SERVER['REQUEST_METHOD'] === 'POST') {
        app_require_csrf();
        $result = saas_update_tenant_settings($pdo, (int)$user['tenant_id'], $_POST);
        if ($result['ok']) {
            $saved = true;
            $settings = $result['settings'];
            app_audit_log($pdo, (int)$user['tenant_id'], (int)$user['user_id'], 'tenant_settings.updated', 'tenant', (int)$user['tenant_id']);
        } else {
            $errors = $result['errors'];
            $settings = [
                'name' => $_POST['tenant_name'] ?? '',
                'timezone' => $_POST['timezone'] ?? 'Europe/Berlin',
                'locale' => $_POST['locale'] ?? 'de-DE',
                'currency_code' => $_POST['currency_code'] ?? 'EUR',
                'mark_price_cents' => saas_parse_money_cents($_POST['mark_price'] ?? '') ?? 0,
                'self_entry_enabled' => !empty($_POST['self_entry_enabled']) ? 1 : 0,
                'paypal_enabled' => !empty($_POST['paypal_enabled']) ? 1 : 0,
                'paypal_url_template' => $_POST['paypal_url_template'] ?? '',
                'sheet_window_days' => $_POST['sheet_window_days'] ?? 100,
                'negative_warning_cents' => -abs(saas_parse_money_cents($_POST['negative_warning'] ?? '') ?? 0),
            ];
        }
    } else {
        $settings = saas_fetch_tenant_settings($pdo, (int)$user['tenant_id']);
    }

    $auditLog = app_fetch_audit_log($pdo, (int)$user['tenant_id'], 50);
}

include 'header.php';
include 'headerline.php';
include 'nav.php';
?>

<section id="banner">
    <div class="content">
        <h2>Mandant-Einstellungen</h2>

        <?php if (!$canManageSettings): ?>
            <?php http_response_code(403); ?>
            <div class="hint-box error"><p>Du hast keine Berechtigung für diese Einstellungen.</p></div>
        <?php elseif ($settings === null): ?>
            <div class="hint-box error"><p>Die Einstellungen konnten nicht geladen werden.</p></div>
        <?php else: ?>
            <?php if ($saved): ?>
                <div class="hint-box success"><p>Die Einstellungen wurden gespeichert.</p></div>
            <?php endif; ?>

            <?php if ($errors !== []): ?>
                <div class="hint-box error">
                    <?php foreach ($errors as $error): ?>
                        <p><?php echo saas_html($error); ?></p>
                    <?php endforeach; ?>
                </div>
            <?php endif; ?>

            <form method="post" action="mandant-einstellungen.php">
                <?php echo app_csrf_field(); ?>
                <div class="row">
                    <div class="col-6 col-12-small">
                        <label for="tenant_name">Kundenname</label>
                        <input type="text" name="tenant_name" id="tenant_name" value="<?php echo saas_html($settings['name']); ?>" required>
                    </div>
                    <div class="col-6 col-12-small">
                        <label for="timezone">Zeitzone</label>
                        <input type="text" name="timezone" id="timezone" value="<?php echo saas_html($settings['timezone']); ?>" required>
                    </div>
                    <div class="col-6 col-12-small">
                        <label for="locale">Locale</label>
                        <input type="text" name="locale" id="locale" value="<?php echo saas_html($settings['locale']); ?>" required>
                    </div>
                    <div class="col-6 col-12-small">
                        <label for="currency_code">Währung</label>
                        <input type="text" name="currency_code" id="currency_code" value="<?php echo saas_html($settings['currency_code']); ?>" maxlength="3" required>
                    </div>
                    <div class="col-6 col-12-small">
                        <label for="mark_price">Preis pro Strich</label>
                        <input type="text" name="mark_price" id="mark_price" value="<?php echo saas_html(saas_format_money_cents($settings['mark_price_cents'])); ?>" required>
                    </div>
                    <div class="col-6 col-12-small">
                        <label for="sheet_window_days">Listenfenster in Tagen</label>
                        <input type="number" name="sheet_window_days" id="sheet_window_days" min="1" max="365" value="<?php echo saas_html($settings['sheet_window_days']); ?>" required>
                    </div>
                    <div class="col-6 col-12-small">
                        <label for="negative_warning">Schulden-Warnschwelle</label>
                        <input type="text" name="negative_warning" id="negative_warning" value="<?php echo saas_html(saas_format_money_cents(abs((int)$settings['negative_warning_cents']))); ?>" required>
                    </div>
                    <div class="col-12">
                        <label for="paypal_url_template">PayPal-Link</label>
                        <input type="text" name="paypal_url_template" id="paypal_url_template" value="<?php echo saas_html($settings['paypal_url_template']); ?>">
                    </div>
                    <div class="col-6 col-12-small">
                        <input type="checkbox" id="self_entry_enabled" name="self_entry_enabled" value="1" <?php echo (int)$settings['self_entry_enabled'] === 1 ? 'checked' : ''; ?>>
                        <label for="self_entry_enabled">Web-Striche erlauben</label>
                    </div>
                    <div class="col-6 col-12-small">
                        <input type="checkbox" id="paypal_enabled" name="paypal_enabled" value="1" <?php echo (int)$settings['paypal_enabled'] === 1 ? 'checked' : ''; ?>>
                        <label for="paypal_enabled">PayPal anzeigen</label>
                    </div>
                </div>
                <ul class="actions">
                    <li><button type="submit">Speichern</button></li>
                    <li><a href="konto.php" class="button alt">Zurück</a></li>
                </ul>
            </form>

            <h3>Protokoll</h3>
            <p>Die letzten Admin-Aktionen für diesen Mandanten.</p>
            <table>
                <tr><th>Datum</th><th>Wer</th><th>Aktion</th><th>Betrifft</th></tr>
                <?php if ($auditLog === []): ?>
                    <tr><td colspan="4">Noch keine protokollierten Aktionen.</td></tr>
                <?php endif; ?>
                <?php foreach ($auditLog as $eintrag): ?>
                    <tr>
                        <td><?php echo saas_html($eintrag['created_at']); ?></td>
                        <td><?php echo saas_html($eintrag['actor_name'] ?? '—'); ?></td>
                        <td><?php echo saas_html($eintrag['action']); ?></td>
                        <td><?php echo saas_html($eintrag['subject_type']); ?><?php echo $eintrag['subject_id'] !== null ? ' #' . (int)$eintrag['subject_id'] : ''; ?></td>
                    </tr>
                <?php endforeach; ?>
            </table>
        <?php endif; ?>
    </div>
</section>

<?php include 'footer.php'; ?>