Simplified templates by using the default Smarty escape calls.
[timetracker.git] / project_delete.php
index b8a482a..832bf4f 100644 (file)
@@ -31,7 +31,7 @@ import('form.Form');
 import('ttProjectHelper');
 
 // Access check.
-if (!ttAccessCheck(right_manage_team)) {
+if (!ttAccessCheck(right_manage_team) || (MODE_PROJECTS != $user->tracking_mode && MODE_PROJECTS_AND_TASKS != $user->tracking_mode)) {
   header('Location: access_denied.php');
   exit();
 }
@@ -55,11 +55,11 @@ if ($request->isPost()) {
         $err->add($i18n->getKey('error.db'));
     } else
       $err->add($i18n->getKey('error.db'));
-  } else if ($request->getParameter('btn_cancel')) {
+  } elseif ($request->getParameter('btn_cancel')) {
     header('Location: projects.php');
     exit();
   }
-} // POST
+} // isPost
 
 $smarty->assign('project_to_delete', $project_to_delete);
 $smarty->assign('forms', array($form->getName()=>$form->toArray()));