Finished improving access checks by providing separate error msg for disabled features.
[timetracker.git] / mobile / users.php
index 131d2b4..6765437 100644 (file)
@@ -32,7 +32,7 @@ import('ttTeamHelper');
 import('ttTimeHelper');
 
 // Access check.
-if (!ttAccessAllowed('view_users')) {
+if (!(ttAccessAllowed('view_users') || ttAccessAllowed('manage_users'))) {
   header('Location: access_denied.php');
   exit();
 }