projects
/
timetracker.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Resuming writing remote work plugin.
[timetracker.git]
/
mobile
/
expense_delete.php
diff --git
a/mobile/expense_delete.php
b/mobile/expense_delete.php
index
3bdc179
..
48e74dc
100644
(file)
--- a/
mobile/expense_delete.php
+++ b/
mobile/expense_delete.php
@@
-43,8
+43,8
@@
if (!$user->isPluginEnabled('ex')) {
$cl_id = (int)$request->getParameter('id');
// Get the expense item we are deleting.
$expense_item = ttExpenseHelper::getItem($cl_id);
$cl_id = (int)$request->getParameter('id');
// Get the expense item we are deleting.
$expense_item = ttExpenseHelper::getItem($cl_id);
-if (!$expense_item || $expense_item['invoice_id']) {
- // Prohibit deleting not ours or invoiced items.
+if (!$expense_item || $expense_item['
approved'] || $expense_item['
invoice_id']) {
+ // Prohibit deleting not ours
, approved,
or invoiced items.
header('Location: access_denied.php');
exit();
}
header('Location: access_denied.php');
exit();
}