-- =============================================
-- TaskList_ModifyUser
-- =============================================
-- Allows an administrator user to change a user's properties
IF EXISTS (SELECT name 
	   FROM   sysobjects 
	   WHERE  name = N'TaskList_ModifyUser' 
	   AND 	  type = 'P')
    DROP PROCEDURE TaskList_ModifyUser
GO

CREATE PROCEDURE TaskList_ModifyUser
	@Username VarChar(20),
	@PasswordHash VarChar(50),
	@OldUserName VarChar(20),
	@NewUserName VarChar(20),
	@OldPasswordHash VarChar(50),
	@NewPasswordHash VarChar(50),
  @IsManager Bit,
  @IsAdministrator Bit
AS
DECLARE @CurrentUserID BigInt
SET @CurrentUserID = NULL

--Make sure this is a valid user, and that they have administrator priviledeges
SELECT @CurrentUserID=ID
FROM TaskListUsers 
WHERE Username = @Username AND PasswordHash = @PasswordHash AND IsAdministrator = 1;

IF (@CurrentUserID IS NULL) RETURN 1; --Invalid user

UPDATE TaskListUsers SET 
  Username = @NewUserName, 
  PasswordHash = @NewPasswordHash,
  IsAdministrator = @IsAdministrator,
  IsManager = @IsManager
WHERE Username = @OldUserName AND PasswordHash = @OldPasswordHash;

IF @@Error <> 0 Return 1;
IF @@RowCount <> 0 Return 1;