--- loncom/interface/domainprefs.pm	2007/09/26 12:42:32	1.30
+++ loncom/interface/domainprefs.pm	2008/01/04 10:17:13	1.39
@@ -1,7 +1,7 @@
 # The LearningOnline Network with CAPA
 # Handler to set domain-wide configuration settings
 #
-# $Id: domainprefs.pm,v 1.30 2007/09/26 12:42:32 raeburn Exp $
+# $Id: domainprefs.pm,v 1.39 2008/01/04 10:17:13 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -68,10 +68,10 @@ sub handler {
     my %domconfig =
       &Apache::lonnet::get_dom('configuration',['login','rolecolors',
                 'quotas','autoenroll','autoupdate','directorysrch',
-                'usercreation','contacts'],$dom);
+                'usercreation','usermodification','contacts'],$dom);
     my @prefs_order = ('rolecolors','login','quotas','autoenroll',
                        'autoupdate','directorysrch','contacts',
-                       'usercreation');
+                       'usercreation','usermodification');
     my %prefs = (
         'rolecolors' =>
                    { text => 'Default color schemes',
@@ -127,11 +127,21 @@ sub handler {
         'usercreation' => 
                   { text => 'User creation',
                     help => 'Domain_User_Creation',
-                    header => [{col1 => 'Setting',
-                                col2 => 'Value',},
+                    header => [{col1 => 'Format Rule Type',
+                                col2 => 'Format Rules in force'},
+                               {col1 => 'User account creation',
+                                col2 => 'Usernames which may be created',},
                                {col1 => 'Context',
                                 col2 => 'Assignable Authentication Types'}],
                   },
+        'usermodification' => 
+                  { text => 'User modification',
+                    help => 'Domain_User_Modification',
+                    header => [{col1 => 'Target user has role',
+                                col2 => 'User information updateable in author context'},
+                               {col1 => 'Target user has role',
+                                col2 => 'User information updateable in course context'}],
+                  },
     );
     my @roles = ('student','coordinator','author','admin');
     my @actions = &Apache::loncommon::get_env_multiple('form.actions');
@@ -271,11 +281,24 @@ sub handler {
               ' />  '.
               '<input type="button" value="uncheck all" '.
               'onclick="javascript:uncheckAll(document.pickactions.actions)"'.
-              ' /></p>');
+              ' /></p><div class="LC_left_float">');
+        my ($numitems,$midpoint,$seconddiv,$count); 
+        $numitems = @prefs_order;
+        $midpoint = int($numitems/2);
+        if ($numitems%2) {
+            $midpoint ++;
+        }
+        $count = 0;
         foreach my $item (@prefs_order) {
-            $r->print('<p><label><input type="checkbox" name="actions" value="'.$item.'" />&nbsp;'.$prefs{$item}->{'text'}.'</label></p>');
+            $r->print('<h4><label><input type="checkbox" name="actions" value="'.$item.'" />&nbsp;'.$prefs{$item}->{'text'}.'</label></h4>');
+            $count ++;
+            if ((!$seconddiv) && ($count >= $midpoint)) {
+                $r->print('</div>'."\n".'<div class="LC_left_float">'."\n");
+                $seconddiv = 1;
+            }
         }
-        $r->print('<h3>'.&mt('Display options').'</h3>'."\n".
+        $r->print('</div><div class="LC_clear_float_footer"></div><h3>'.
+                  &mt('Display options').'</h3>'."\n".
                   '<p><span class="LC_nobreak">'.&mt('Display using: ')."\n".
                   '<label><input type="radio" name="numcols" value="1">'.
                   &mt('one column').'</label>&nbsp;&nbsp;'.
@@ -306,6 +329,8 @@ sub process_changes {
         $output = &modify_directorysrch($dom,%domconfig);
     } elsif ($action eq 'usercreation') {
         $output = &modify_usercreation($dom,%domconfig);
+    } elsif ($action eq 'usermodification') {
+        $output = &modify_usermodification($dom,%domconfig);
     } elsif ($action eq 'contacts') {
         $output = &modify_contacts($dom,%domconfig);
     }
@@ -327,7 +352,7 @@ sub print_config_box {
 #          </tr>');
     $rowtotal ++;
     if (($action eq 'autoupdate') || ($action eq 'rolecolors') || 
-        ($action eq 'usercreation')) {
+        ($action eq 'usercreation') || ($action eq 'usermodification')) {
         my $colspan = ($action eq 'rolecolors')?' colspan="2"':'';
         $output .= '
           <tr>
@@ -341,7 +366,9 @@ sub print_config_box {
         if ($action eq 'autoupdate') {
             $output .= &print_autoupdate('top',$dom,$settings,\$rowtotal);
         } elsif ($action eq 'usercreation') {
-            $output .= &print_usercreation('top',$dom,$settings,\$rowtotal); 
+            $output .= &print_usercreation('top',$dom,$settings,\$rowtotal);
+        } elsif ($action eq 'usermodification') {
+            $output .= &print_usermodification('top',$dom,$settings,\$rowtotal);
         } else {
             $output .= &print_rolecolors($phase,'student',$dom,$confname,$settings,\$rowtotal);
         }
@@ -360,7 +387,20 @@ sub print_config_box {
         if ($action eq 'autoupdate') {
             $output .= &print_autoupdate('bottom',$dom,$settings,\$rowtotal);
         } elsif ($action eq 'usercreation') {
-            $output .= &print_usercreation('bottom',$dom,$settings,\$rowtotal);
+            $output .= &print_usercreation('middle',$dom,$settings,\$rowtotal).'
+           </table>
+          </td>
+         </tr>
+         <tr>
+           <td>
+            <table class="LC_nested">
+             <tr class="LC_info_row">
+              <td class="LC_left_item"'.$colspan.'>'.$item->{'header'}->[2]->{'col1'}.'</td>
+              <td class="LC_right_item">'.$item->{'header'}->[2]->{'col2'}.'</td>             </tr>'.
+            &print_usercreation('bottom',$dom,$settings,\$rowtotal);
+            $rowtotal ++;
+        } elsif ($action eq 'usermodification') {
+            $output .= &print_usermodification('bottom',$dom,$settings,\$rowtotal);
         } else {
             $output .= &print_rolecolors($phase,'coordinator',$dom,$confname,$settings,\$rowtotal).'
            </table>
@@ -460,18 +500,18 @@ function changePage(formname,newphase) {
     } elsif ($phase eq 'display') {
         $js .= &color_pick_js()."\n";
     }
-    $js .= &Apache::lonhtmlcommon::javascript_window_dims().'
+    $js .= &Apache::loncommon::viewport_size_js().'
 </script>
 ';
     my $additem;
     if ($phase eq 'pickactions') {
         my %loaditems = (
-                    'onload' => "javascript:;getDimensions(document.$phase.width,document.$phase.height);setDisplayColumns();setFormElements(document.pickactions);",
+                    'onload' => "javascript:getViewportDims(document.$phase.width,document.$phase.height);setDisplayColumns();setFormElements(document.pickactions);",
                         );
         $additem = {'add_entries' => \%loaditems,};
     } else {
         my %loaditems = (
-                    'onload' => "javascript:getDimensions(document.$phase.width,document.$phase.height)",
+                    'onload' => "javascript:getViewportDims(document.$phase.width,document.$phase.height);",
                         );
         $additem = {'add_entries' => \%loaditems,};
     }
@@ -995,6 +1035,10 @@ sub print_autoenroll {
         }
     }
     my $domform = &Apache::loncommon::select_dom_form($defdom,'sender_domain',1);
+    my $notif_sender;
+    if (ref($settings) eq 'HASH') {
+        $notif_sender = $settings->{'sender_uname'};
+    }
     my $datatable='<tr class="LC_odd_row">'.
                   '<td>'.&mt('Auto-enrollment active?').'</td>'.
                   '<td class="LC_right_item"><span class="LC_nobreak"><label>'.
@@ -1007,8 +1051,7 @@ sub print_autoenroll {
                   '</td><td class="LC_right_item"><span class="LC_nobreak">'.
                   &mt('username').':&nbsp;'.
                   '<input type="text" name="sender_uname" value="'.
-                  $settings->{'sender_uname'}.
-                  '" size="10" />&nbsp;&nbsp;'.&mt('domain').
+                  $notif_sender.'" size="10" />&nbsp;&nbsp;'.&mt('domain').
                   ':&nbsp;'.$domform.'</span></td></tr>';
     $$rowtotal += 2;
     return $datatable;
@@ -1056,14 +1099,7 @@ sub print_autoupdate {
         my ($othertitle,$usertypes,$types) = &sorted_inst_types($dom);
         my @fields = ('lastname','firstname','middlename','gen',
                       'permanentemail','id');
-        my %fieldtitles = &Apache::lonlocal::texthash (
-                            id => 'Student/Employee ID',
-                            permanentemail => 'E-mail address',
-                            lastname => 'Last Name',
-                            firstname => 'First Name',
-                            middlename => 'Middle Name',
-                            gen => 'Generation',
-                      );
+        my %fieldtitles = &Apache::loncommon::personal_data_fieldtitles();
         my $numrows = 0;
         if (ref($types) eq 'ARRAY') {
             if (@{$types} > 0) {
@@ -1158,9 +1194,11 @@ sub print_directorysrch {
     foreach my $title (@{$titleorder}) {
         if (defined($searchtitles->{$title})) {
             my $check = ' ';
-            if (ref($settings->{'searchby'}) eq 'ARRAY') {
-                if (grep(/^\Q$title\E$/,@{$settings->{'searchby'}})) {
-                    $check = ' checked="checked" ';
+            if (ref($settings) eq 'HASH') { 
+                if (ref($settings->{'searchby'}) eq 'ARRAY') {
+                    if (grep(/^\Q$title\E$/,@{$settings->{'searchby'}})) {
+                        $check = ' checked="checked" ';
+                    }
                 }
             }
             $datatable .= '<td class="LC_left_item">'.
@@ -1289,39 +1327,85 @@ sub contact_titles {
 sub print_usercreation {
     my ($position,$dom,$settings,$rowtotal) = @_;
     my $numinrow = 4;
-    my ($rules,$ruleorder) = &Apache::lonnet::inst_userrules($dom);
     my $datatable;
-    my %lt = &Apache::lonlocal::texthash (
-                        nondc => 'User creation other than by Domain Coordinator: ',
-                        author => 'When adding a co-author/assistant author',
-                        course => 'When adding users to a course',
-    );
     if ($position eq 'top') {
+        $$rowtotal ++;
+        my $rowcount = 0;
+        my ($rules,$ruleorder) = &Apache::lonnet::inst_userrules($dom,'username');
+        if (ref($rules) eq 'HASH') {
+            if (keys(%{$rules}) > 0) {
+                $datatable .= &user_formats_row('username',$settings,$rules,
+                                                $ruleorder,$numinrow,$rowcount);
+                $$rowtotal ++;
+                $rowcount ++;
+            }
+        }
+        my ($idrules,$idruleorder) = &Apache::lonnet::inst_userrules($dom,'id');
+        if (ref($idrules) eq 'HASH') {
+            if (keys(%{$idrules}) > 0) {
+                $datatable .= &user_formats_row('id',$settings,$idrules,
+                                                $idruleorder,$numinrow,$rowcount);
+                $$rowtotal ++;
+                $rowcount ++;
+            }
+        }
+        if ($rowcount == 0) {
+            $datatable .= '<tr><td colspan="2">'.&mt('No format rules have been defined for usernames or IDs in this domain.').'</td></tr>';  
+            $$rowtotal ++;
+            $rowcount ++;
+        }
+    } elsif ($position eq 'middle') {
+        my @creators = ('author','course');
+        my ($rules,$ruleorder) =
+            &Apache::lonnet::inst_userrules($dom,'username');
+        my %lt = &usercreation_types();
         my %checked;
         if (ref($settings) eq 'HASH') {
-            if (ref($settings->{'cancreate'}) eq 'ARRAY') {
-                foreach my $item (@{$settings->{'cancreate'}}) {
-                    $checked{$item} = ' checked="checked" ';
+            if (ref($settings->{'cancreate'}) eq 'HASH') {
+                foreach my $item (@creators) {
+                    $checked{$item} = $settings->{'cancreate'}{$item};
+                }
+            } elsif (ref($settings->{'cancreate'}) eq 'ARRAY') {
+                foreach my $item (@creators) {
+                    if (grep(/^\Q$item\E$/,@{$settings->{'cancreate'}})) {
+                        $checked{$item} = 'none';
+                    }
                 }
             }
         }
-        $datatable = '<tr class="LC_odd_row">'.
-                     '<td><span class="LC_nobreak">'.$lt{'nondc'}.
-                     '</span></td><td class="LC_left_item"><table>';
-        foreach my $item ('author','course') {
-            $datatable .= '<tr><td><span class="LC_nobreak"><label>'.
-                          '<input type="checkbox" name="can_createuser" '.
-                          $checked{$item}.' value="'.$item.'" />'.
-                          $lt{$item}.'</label><span></td></tr>';
-        }
-        $datatable .= '</table></td></tr>';
-        $$rowtotal ++;
-        if (ref($rules) eq 'HASH') {
-            if (keys(%{$rules}) > 0) {
-                $datatable .= &username_formats_row($settings,$rules,
-                                                    $ruleorder,$numinrow);
-                $$rowtotal ++;
+        my $rownum = 0;
+        foreach my $item (@creators) {
+            $rownum ++;
+            if ($checked{$item} eq '') {
+                $checked{$item} = 'any';
             }
+            my $css_class;
+            if ($rownum%2) {
+                $css_class = '';
+            } else {
+                $css_class = ' class="LC_odd_row" ';
+            }
+            $datatable .= '<tr'.$css_class.'>'.
+                         '<td><span class="LC_nobreak">'.$lt{$item}.
+                         '</span></td><td align="right">';
+            my @options = ('any');
+            if (ref($rules) eq 'HASH') {
+                if (keys(%{$rules}) > 0) {
+                    push(@options,('official','unofficial'));
+                }
+            }
+            push(@options,'none');
+            foreach my $option (@options) {
+                my $check = ' ';
+                if ($checked{$item} eq $option) {
+                    $check = ' checked="checked" ';
+                } 
+                $datatable .= '<span class="LC_nobreak"><label>'.
+                              '<input type="radio" name="can_createuser_'.
+                              $item.'" value="'.$option.'"'.$check.'/>&nbsp;'.
+                              $lt{$option}.'</label>&nbsp;&nbsp;</span>';
+            }
+            $datatable .= '</td></tr>';
         }
     } else {
         my @contexts = ('author','course','domain');
@@ -1339,8 +1423,13 @@ sub print_usercreation {
                     }
                 }
             }
+        } else {
+            foreach my $item (@contexts) {
+                foreach my $auth (@authtypes) {
+                    $checked{$item}{$auth} = ' checked="checked" ';
+                }
+            }
         }
-        my @authtypes = ('int','krb4','krb5','loc');
         my %title = &context_names();
         my %authname = &authtype_names();
         my $rownum = 0;
@@ -1369,13 +1458,19 @@ sub print_usercreation {
     return $datatable;
 }
 
-sub username_formats_row {
-    my ($settings,$rules,$ruleorder,$numinrow) = @_;
-    my $output =  '<tr>'.
-                  '<td><span class="LC_nobreak">'.
-                  &mt('Format rules to check for new usernames: ').
-                  '</span></td>'.
-                  '<td class="LC_left_item" colspan="2"><table>';
+sub user_formats_row {
+    my ($type,$settings,$rules,$ruleorder,$numinrow,$rowcount) = @_;
+    my $output;
+    my %text = (
+                   'username' => 'new usernames',
+                   'id'       => 'IDs',
+               );
+    my $css_class = $rowcount%2?' class="LC_odd_row"':'';
+    $output = '<tr '.$css_class.'>'.
+              '<td><span class="LC_nobreak">'.
+              &mt("Format rules to check for $text{$type}: ").
+              '</span></td>'.
+              '<td class="LC_left_item" colspan="2"><table>';
     my $rem;
     if (ref($ruleorder) eq 'ARRAY') {
         for (my $i=0; $i<@{$ruleorder}; $i++) {
@@ -1388,14 +1483,16 @@ sub username_formats_row {
                     $output .= '<tr>';
                 }
                 my $check = ' ';
-                if (ref($settings->{'username_rule'}) eq 'ARRAY') {
-                    if (grep(/^\Q$ruleorder->[$i]\E$/,@{$settings->{'username_rule'}})) {
-                        $check = ' checked="checked" ';
+                if (ref($settings) eq 'HASH') {
+                    if (ref($settings->{$type.'_rule'}) eq 'ARRAY') {
+                        if (grep(/^\Q$ruleorder->[$i]\E$/,@{$settings->{$type.'_rule'}})) {
+                            $check = ' checked="checked" ';
+                        }
                     }
                 }
                 $output .= '<td class="LC_left_item">'.
                            '<span class="LC_nobreak"><label>'.
-                           '<input type="checkbox" name="username_rule" '.
+                           '<input type="checkbox" name="'.$type.'_rule" '.
                            'value="'.$ruleorder->[$i].'"'.$check.'/>'.
                            $rules->{$ruleorder->[$i]}{'name'}.'</label></span></td>';
             }
@@ -1413,6 +1510,18 @@ sub username_formats_row {
     return $output;
 }
 
+sub usercreation_types {
+    my %lt = &Apache::lonlocal::texthash (
+                    author     => 'When adding a co-author',
+                    course     => 'When adding a user to a course',
+                    any        => 'Any',
+                    official   => 'Institutional only ',
+                    unofficial => 'Non-institutional only',
+                    none       => 'None',
+    );
+    return %lt;
+} 
+
 sub authtype_names {
     my %lt = &Apache::lonlocal::texthash(
                       int    => 'Internal',
@@ -1432,6 +1541,96 @@ sub context_names {
     return %context_title;
 }
 
+sub print_usermodification {
+    my ($position,$dom,$settings,$rowtotal) = @_;
+    my $numinrow = 4;
+    my ($context,$datatable,$rowcount);
+    if ($position eq 'top') {
+        $rowcount = 0;
+        $context = 'author'; 
+        foreach my $role ('ca','aa') {
+            $datatable .= &modifiable_userdata_row($context,$role,$settings,
+                                                   $numinrow,$rowcount);
+            $$rowtotal ++;
+            $rowcount ++;
+        }
+    } else {
+        $context = 'course';
+        $rowcount = 0;
+        foreach my $role ('st','ep','ta','in','cr') {
+            $datatable .= &modifiable_userdata_row($context,$role,$settings,
+                                                   $numinrow,$rowcount);
+            $$rowtotal ++;
+            $rowcount ++;
+        }
+    }
+    return $datatable;
+}
+
+sub modifiable_userdata_row {
+    my ($context,$role,$settings,$numinrow,$rowcount) = @_;
+    my $rolename;
+    if ($role eq 'cr') {
+        $rolename = &mt('Custom role');
+    } else {
+        $rolename = &Apache::lonnet::plaintext($role);
+    }
+    my @fields = ('lastname','firstname','middlename','generation',
+                  'permanentemail','id');
+    my %fieldtitles = &Apache::loncommon::personal_data_fieldtitles();
+    my $output;
+    my $css_class = $rowcount%2?' class="LC_odd_row"':'';
+    $output = '<tr '.$css_class.'>'.
+              '<td><span class="LC_nobreak">'.$rolename.'</span></td>'.
+              '<td class="LC_left_item" colspan="2"><table>';
+    my $rem;
+    my %checks;
+    if (ref($settings) eq 'HASH') {
+        if (ref($settings->{$context}) eq 'HASH') {
+            if (ref($settings->{$context}->{$role}) eq 'HASH') {
+                foreach my $field (@fields) {
+                    if ($settings->{$context}->{$role}->{$field}) {
+                        $checks{$field} = ' checked="checked" ';
+                    }
+                }
+            }
+        }
+    }
+    for (my $i=0; $i<@fields; $i++) {
+        my $rem = $i%($numinrow);
+        if ($rem == 0) {
+            if ($i > 0) {
+                $output .= '</tr>';
+            }
+            $output .= '<tr>';
+        }
+        my $check = ' ';
+        if (exists($checks{$fields[$i]})) {
+            $check = $checks{$fields[$i]}
+        } else {
+            if ($role eq 'st') {
+                if (ref($settings) ne 'HASH') {
+                    $check = ' checked="checked" '; 
+                }
+            }
+        }
+        $output .= '<td class="LC_left_item">'.
+                   '<span class="LC_nobreak"><label>'.
+                   '<input type="checkbox" name="canmodify_'.$role.'" '.
+                   'value="'.$fields[$i].'"'.$check.'/>'.$fieldtitles{$fields[$i]}.
+                   '</label></span></td>';
+        $rem = @fields%($numinrow);
+    }
+    my $colsleft = $numinrow - $rem;
+    if ($colsleft > 1 ) {
+        $output .= '<td colspan="'.$colsleft.'" class="LC_left_item">'.
+                   '&nbsp;</td>';
+    } elsif ($colsleft == 1) {
+        $output .= '<td class="LC_left_item">&nbsp;</td>';
+    }
+    $output .= '</tr></table></td></tr>';
+    return $output;
+}
 
 sub users_cansearch_row {
     my ($settings,$types,$usertypes,$dom,$numinrow,$othertitle) = @_;
@@ -1543,10 +1742,12 @@ sub usertype_update_row {
                     $datatable .= '<tr>';
                 }
                 my $check = ' ';
-                if (ref($settings->{'fields'}) eq 'HASH') {
-                    if (ref($settings->{'fields'}{$type}) eq 'ARRAY') {
-                        if (grep(/^\Q$fields->[$i]\E$/,@{$settings->{'fields'}{$type}})) {
-                            $check = ' checked="checked" ';
+                if (ref($settings) eq 'HASH') {
+                    if (ref($settings->{'fields'}) eq 'HASH') {
+                        if (ref($settings->{'fields'}{$type}) eq 'ARRAY') {
+                            if (grep(/^\Q$fields->[$i]\E$/,@{$settings->{'fields'}{$type}})) {
+                                $check = ' checked="checked" ';
+                            }
                         }
                     }
                 }
@@ -1944,7 +2145,7 @@ sub check_configuser {
 sub check_authorstatus {
     my ($dom,$confname,%currroles) = @_;
     my $author_ok;
-    if (!$currroles{':'.$dom.':au'}) {
+    if (!$currroles{$confname.':'.$dom.':au'}) {
         my $start = time;
         my $end = 0;
         $author_ok = 
@@ -2706,7 +2907,7 @@ sub modify_contacts {
             }
             $resulttext .= '</ul>';
         } else {
-            $resulttext = &mt('No changes made to contact information.');
+            $resulttext = &mt('No changes made to contact information');
         }
     } else {
         $resulttext = '<span class="LC_error">'.
@@ -2717,7 +2918,7 @@ sub modify_contacts {
 
 sub modify_usercreation {
     my ($dom,%domconfig) = @_;
-    my ($resulttext,%curr_usercreation,%changes,%authallowed);
+    my ($resulttext,%curr_usercreation,%changes,%authallowed,%cancreate);
     if (ref($domconfig{'usercreation'}) eq 'HASH') {
         foreach my $key (keys(%{$domconfig{'usercreation'}})) {
             $curr_usercreation{$key} = $domconfig{'usercreation'}{$key};
@@ -2728,21 +2929,35 @@ sub modify_usercreation {
                    course => 'adding users to a course',
                 );
     my @username_rule = &Apache::loncommon::get_env_multiple('form.username_rule');
-    my @cancreate = &Apache::loncommon::get_env_multiple('form.can_createuser');
-    if (ref($curr_usercreation{'cancreate'}) eq 'ARRAY') {
-        foreach my $type (@{$curr_usercreation{'cancreate'}}) {
-            if (!grep(/^\Q$type\E$/,@cancreate)) {
-                push(@{$changes{'cancreate'}},$type);
-            }
+    my @id_rule = &Apache::loncommon::get_env_multiple('form.id_rule');
+    my @contexts = ('author','course');
+    foreach my $item(@contexts) {
+        $cancreate{$item} = $env{'form.can_createuser_'.$item};
+    }
+    if (ref($curr_usercreation{'cancreate'}) eq 'HASH') {
+        foreach my $item (@contexts) {
+            if ($curr_usercreation{'cancreate'}{$item} ne $cancreate{$item}) {
+                push(@{$changes{'cancreate'}},$item);
+            } 
         }
-        foreach my $type (@cancreate) {
-            if (!grep(/^\Q$type\E$/,@{$curr_usercreation{'cancreate'}})) {
-                push(@{$changes{'cancreate'}},$type);
+    } elsif (ref($curr_usercreation{'cancreate'}) eq 'ARRAY') {
+        foreach my $item (@contexts) {
+            if (grep(/^\Q$item\E$/,@{$curr_usercreation{'cancreate'}})) {
+                if ($cancreate{$item} ne 'any') {
+                    push(@{$changes{'cancreate'}},$item);
+                }
+            } else {
+                if ($cancreate{$item} ne 'none') {
+                    push(@{$changes{'cancreate'}},$item);
+                }
             }
         }
     } else {
-        push(@{$changes{'cancreate'}},@cancreate);
+        foreach my $item ('author','course') {
+            push(@{$changes{'cancreate'}},$item);
+        }
     }
+
     if (ref($curr_usercreation{'username_rule'}) eq 'ARRAY') {
         foreach my $type (@{$curr_usercreation{'username_rule'}}) {
             if (!grep(/^\Q$type\E$/,@username_rule)) {
@@ -2758,6 +2973,21 @@ sub modify_usercreation {
         push(@{$changes{'username_rule'}},@username_rule);
     }
 
+    if (ref($curr_usercreation{'id_rule'}) eq 'ARRAY') {
+        foreach my $type (@{$curr_usercreation{'id_rule'}}) {
+            if (!grep(/^\Q$type\E$/,@id_rule)) {
+                push(@{$changes{'id_rule'}},$type);
+            }
+        }
+        foreach my $type (@id_rule) {
+            if (!grep(/^\Q$type\E$/,@{$curr_usercreation{'id_rule'}})) {
+                push(@{$changes{'id_rule'}},$type);
+            }
+        }
+    } else {
+        push(@{$changes{'id_rule'}},@id_rule);
+    }
+
     my @contexts = ('author','course','domain');
     my @authtypes = ('int','krb4','krb5','loc');
     my %authhash;
@@ -2790,9 +3020,10 @@ sub modify_usercreation {
 
     my %usercreation_hash =  (
             usercreation => {
-                              cancreate     => \@cancreate,
+                              cancreate     => \%cancreate,
                               username_rule => \@username_rule,
-                              authtypes      => \%authhash,
+                              id_rule       => \@id_rule,
+                              authtypes     => \%authhash,
                             }
             );
 
@@ -2802,19 +3033,24 @@ sub modify_usercreation {
         if (keys(%changes) > 0) {
             $resulttext = &mt('Changes made:').'<ul>';
             if (ref($changes{'cancreate'}) eq 'ARRAY') {
-                my $chgtext = '<ul>';
-                foreach my $type (@cancreate) {
-                    $chgtext .= '<li>'.$title{$type}.'</li>';
-                }
-                $chgtext .= '</ul>';
-                if (@cancreate > 0) {
-                    $resulttext .= '<li>'.&mt('Creation of new users is permitted by a Domain Coordinator, and also by other users when: ').$chgtext.'</li>';
-                } else {
-                    $resulttext .= '<li>'.&mt("Creation of new users is now only allowed when the user's role is Domain Coordinator.").'</li>';
+                my %lt = &usercreation_types();
+                foreach my $type (@{$changes{'cancreate'}}) {
+                    my $chgtext; 
+                    if ($cancreate{$type} eq 'none') {
+                        $chgtext = $lt{$type}.' '.&mt('creation of new users is not permitted, except by a Domain Coordinator.');
+                    } elsif ($cancreate{$type} eq 'any') {
+                        $chgtext = $lt{$type}.' '.&mt('creation of new users is permitted for both institutional and non-institutional usernames.'); 
+                    } elsif ($cancreate{$type} eq 'official') {
+                        $chgtext = $lt{$type}.' '.&mt('creation of new users is only permitted for institutional usernames.',$lt{$type});
+                    } elsif ($cancreate{$type} eq 'unofficial') {
+                        $chgtext = $lt{$type}.' '.&mt('creation of new users is only permitted for non-institutional usernames.',$lt{$type});
+                    }
+                    $resulttext .= '<li>'.$chgtext.'</li>';
                 }
             }
             if (ref($changes{'username_rule'}) eq 'ARRAY') {
-                my ($rules,$ruleorder) = &Apache::lonnet::inst_userrules($dom);
+                my ($rules,$ruleorder) = 
+                    &Apache::lonnet::inst_userrules($dom,'username');
                 my $chgtext = '<ul>';
                 foreach my $type (@username_rule) {
                     if (ref($rules->{$type}) eq 'HASH') {
@@ -2828,10 +3064,25 @@ sub modify_usercreation {
                     $resulttext .= '<li>'.&mt('There are now no username formats restricted to verified users in the institutional directory.').'</li>'; 
                 }
             }
+            if (ref($changes{'id_rule'}) eq 'ARRAY') {
+                my ($idrules,$idruleorder) = 
+                    &Apache::lonnet::inst_userrules($dom,'id');
+                my $chgtext = '<ul>';
+                foreach my $type (@id_rule) {
+                    if (ref($idrules->{$type}) eq 'HASH') {
+                        $chgtext .= '<li>'.$idrules->{$type}{'name'}.'</li>';
+                    }
+                }
+                $chgtext .= '</ul>';
+                if (@id_rule > 0) {
+                    $resulttext .= '<li>'.&mt('IDs with the following formats are restricted to verified users in the institutional directory: ').$chgtext.'</li>';
+                } else {
+                    $resulttext .= '<li>'.&mt('There are now no ID formats restricted to verified users in the institutional directory.').'</li>';
+                }
+            }
             my %authname = &authtype_names();
             my %context_title = &context_names();
             if (ref($changes{'authtypes'}) eq 'ARRAY') {
-                my @unchanged;
                 my $chgtext = '<ul>';
                 foreach my $type (@{$changes{'authtypes'}}) {
                     my @allowed;
@@ -2853,6 +3104,106 @@ sub modify_usercreation {
         }
     } else {
         $resulttext = '<span class="LC_error">'.
+            &mt('An error occurred: [_1]',$putresult).'</span>';
+    }
+    return $resulttext;
+}
+
+sub modify_usermodification {
+    my ($dom,%domconfig) = @_;
+    my ($resulttext,%curr_usermodification,%changes);
+    if (ref($domconfig{'usermodification'}) eq 'HASH') {
+        foreach my $key (keys(%{$domconfig{'usermodification'}})) {
+            $curr_usermodification{$key} = $domconfig{'usermodification'}{$key};
+        }
+    }
+    my @contexts = ('author','course');
+    my %context_title = (
+                           author => 'In author context',
+                           course => 'In course context',
+                        );
+    my @fields = ('lastname','firstname','middlename','generation',
+                  'permanentemail','id');
+    my %roles = (
+                  author => ['ca','aa'],
+                  course => ['st','ep','ta','in','cr'],
+                );
+    my %fieldtitles = &Apache::loncommon::personal_data_fieldtitles();
+    my %modifyhash;
+    foreach my $context (@contexts) {
+        foreach my $role (@{$roles{$context}}) {
+            my @modifiable =  &Apache::loncommon::get_env_multiple('form.canmodify_'.$role);
+            foreach my $item (@fields) {
+                if (grep(/^\Q$item\E$/,@modifiable)) {
+                    $modifyhash{$context}{$role}{$item} = 1;
+                } else {
+                    $modifyhash{$context}{$role}{$item} = 0;
+                }
+            }
+        }
+        if (ref($curr_usermodification{$context}) eq 'HASH') {
+            foreach my $role (@{$roles{$context}}) {
+                if (ref($curr_usermodification{$context}{$role}) eq 'HASH') {
+                    foreach my $field (@fields) {
+                        if ($modifyhash{$context}{$role}{$field} ne 
+                                $curr_usermodification{$context}{$role}{$field}) {
+                            push(@{$changes{$context}},$role);
+                            last;
+                        }
+                    }
+                }
+            }
+        } else {
+            foreach my $context (@contexts) {
+                foreach my $role (@{$roles{$context}}) {
+                    push(@{$changes{$context}},$role);
+                }
+            }
+        }
+    }
+    my %usermodification_hash =  (
+                                   usermodification => \%modifyhash,
+                                 );
+    my $putresult = &Apache::lonnet::put_dom('configuration',
+                                             \%usermodification_hash,$dom);
+    if ($putresult eq 'ok') {
+        if (keys(%changes) > 0) {
+            $resulttext = &mt('Changes made: ').'<ul>';
+            foreach my $context (@contexts) {
+                if (ref($changes{$context}) eq 'ARRAY') {
+                    $resulttext .= '<li>'.$context_title{$context}.':<ul>';
+                    if (ref($changes{$context}) eq 'ARRAY') {
+                        foreach my $role (@{$changes{$context}}) {
+                            my $rolename;
+                            if ($role eq 'cr') {
+                                $rolename = &mt('Custom');
+                            } else {
+                                $rolename = &Apache::lonnet::plaintext($role);
+                            }
+                            my @modifiable;
+                            $resulttext .= '<li><span class="LC_cusr_emph">'.&mt('Target user with [_1] role',$rolename).'</span> - '.&mt('modifiable fields: ');
+                            foreach my $field (@fields) {
+                                if ($modifyhash{$context}{$role}{$field}) {
+                                    push(@modifiable,$fieldtitles{$field});
+                                }
+                            }
+                            if (@modifiable > 0) {
+                                $resulttext .= join(', ',@modifiable);
+                            } else {
+                                $resulttext .= &mt('none'); 
+                            }
+                            $resulttext .= '</li>';
+                        }
+                        $resulttext .= '</ul></li>';
+                    }
+                }
+            }
+            $resulttext .= '</ul>';
+        } else {
+            $resulttext = &mt('No changes made to user modification settings');
+        }
+    } else {
+        $resulttext = '<span class="LC_error">'.
             &mt('An error occurred: [_1]',$putresult).'</span>';
     }
     return $resulttext;