- my $result = selectall_hashref_query($::form, $::form->get_standard_dbh, <<SQL, $self->module, $self->submodule);
- SELECT d.*, date(d.itime) AS date, e.name AS employee_name
+ if ($::auth->assert('all_drafts_edit', 1)) {
+ my $result = selectall_hashref_query($::form, $::form->get_standard_dbh, <<SQL, $self->module, $self->submodule);
+ SELECT d.*, date(d.itime) AS date
+ FROM drafts d
+ WHERE (d.module = ?)
+ AND (d.submodule = ?)
+ ORDER BY d.itime
+SQL
+ } else {
+ my $result = selectall_hashref_query($::form, $::form->get_standard_dbh, <<SQL, $self->module, $self->submodule, SL::DB::Manager::Employee->current->id);
+ SELECT d.*, date(d.itime) AS date