Security fix - improved access checks for task edit and deletes.

[timetracker.git] / mobile / user_add.php

diff --git a/mobile/user_add.php b/mobile/user_add.php
index 838981d..53b9842 100644 (file)
--- a/mobile/user_add.php
+++ b/mobile/user_add.php
@@ -33,11 +33,12 @@ import('ttUserHelper');
 import('form.Table');
 import('form.TableColumn');
 
-// Access check.
+// Access checks.
 if (!ttAccessAllowed('manage_users')) {
   header('Location: access_denied.php');
   exit();
 }
+// End of access checks.
 
 // Use the "limit" plugin if we have one. Ignore include errors.
 // The "limit" plugin is not required for normal operation of the Time Tracker.