Feature 5: Implement Bulk Actions (Admin Only)

Add comprehensive bulk operations system for admins:

- Created BulkOperationsModel.php with operation tracking and processing
- Added bulk_operation.php API endpoint for bulk operations
- Created get_users.php API endpoint for user dropdown in bulk assign
- Updated DashboardView.php with checkboxes and bulk actions toolbar
- Added JavaScript functions for:
  - Select all/clear selection
  - Bulk close tickets
  - Bulk assign tickets
  - Bulk change priority
- Added comprehensive CSS for bulk actions toolbar and modals
- All bulk operations are admin-only (enforced server-side)
- Operations tracked in bulk_operations table with audit logging
- Supports bulk_close, bulk_assign, and bulk_priority operations

Admins can now select multiple tickets and perform batch operations, significantly improving workflow efficiency.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

api/bulk_operation.php

@@ -0,0 +1,85 @@
+<?php
+session_start();
+require_once dirname(__DIR__) . '/config/db.php';
+require_once dirname(__DIR__) . '/models/BulkOperationsModel.php';
+require_once dirname(__DIR__) . '/models/TicketModel.php';
+require_once dirname(__DIR__) . '/models/AuditLogModel.php';
+
+header('Content-Type: application/json');
+
+// Check authentication
+if (!isset($_SESSION['user']) || !isset($_SESSION['user']['user_id'])) {
+    echo json_encode(['success' => false, 'error' => 'Not authenticated']);
+    exit;
+}
+
+// Check admin status - bulk operations are admin-only
+$isAdmin = $_SESSION['user']['is_admin'] ?? false;
+if (!$isAdmin) {
+    echo json_encode(['success' => false, 'error' => 'Admin access required']);
+    exit;
+}
+
+// Get request data
+$data = json_decode(file_get_contents('php://input'), true);
+$operationType = $data['operation_type'] ?? null;
+$ticketIds = $data['ticket_ids'] ?? [];
+$parameters = $data['parameters'] ?? null;
+
+// Validate input
+if (!$operationType || empty($ticketIds)) {
+    echo json_encode(['success' => false, 'error' => 'Operation type and ticket IDs required']);
+    exit;
+}
+
+// Validate ticket IDs are integers
+foreach ($ticketIds as $ticketId) {
+    if (!is_numeric($ticketId)) {
+        echo json_encode(['success' => false, 'error' => 'Invalid ticket ID format']);
+        exit;
+    }
+}
+
+// Create database connection
+$conn = new mysqli(
+    $GLOBALS['config']['DB_HOST'],
+    $GLOBALS['config']['DB_USER'],
+    $GLOBALS['config']['DB_PASS'],
+    $GLOBALS['config']['DB_NAME']
+);
+
+if ($conn->connect_error) {
+    echo json_encode(['success' => false, 'error' => 'Database connection failed']);
+    exit;
+}
+
+$bulkOpsModel = new BulkOperationsModel($conn);
+
+// Create bulk operation record
+$operationId = $bulkOpsModel->createBulkOperation($operationType, $ticketIds, $_SESSION['user']['user_id'], $parameters);
+
+if (!$operationId) {
+    $conn->close();
+    echo json_encode(['success' => false, 'error' => 'Failed to create bulk operation']);
+    exit;
+}
+
+// Process the bulk operation
+$result = $bulkOpsModel->processBulkOperation($operationId);
+
+$conn->close();
+
+if (isset($result['error'])) {
+    echo json_encode([
+        'success' => false,
+        'error' => $result['error']
+    ]);
+} else {
+    echo json_encode([
+        'success' => true,
+        'operation_id' => $operationId,
+        'processed' => $result['processed'],
+        'failed' => $result['failed'],
+        'message' => "Bulk operation completed: {$result['processed']} succeeded, {$result['failed']} failed"
+    ]);
+}

api/get_users.php

@@ -0,0 +1,33 @@
+<?php
+session_start();
+require_once dirname(__DIR__) . '/config/db.php';
+require_once dirname(__DIR__) . '/models/UserModel.php';
+
+header('Content-Type: application/json');
+
+// Check authentication
+if (!isset($_SESSION['user']) || !isset($_SESSION['user']['user_id'])) {
+    echo json_encode(['success' => false, 'error' => 'Not authenticated']);
+    exit;
+}
+
+// Create database connection
+$conn = new mysqli(
+    $GLOBALS['config']['DB_HOST'],
+    $GLOBALS['config']['DB_USER'],
+    $GLOBALS['config']['DB_PASS'],
+    $GLOBALS['config']['DB_NAME']
+);
+
+if ($conn->connect_error) {
+    echo json_encode(['success' => false, 'error' => 'Database connection failed']);
+    exit;
+}
+
+// Get all users
+$userModel = new UserModel($conn);
+$users = $userModel->getAllUsers();
+
+$conn->close();
+
+echo json_encode(['success' => true, 'users' => $users]);