X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=group_edit.php;h=6ec572e9856d06236f36d17bb43ae9d34b1ebe1c;hb=995feb6c9e97991e5b9d9803fbc3c8a41ac48922;hp=1d42ed67f8d09491c5760eb24143eb392dfad88f;hpb=b3ed433e388b83e055958b395ebc0e08172cd079;p=timetracker.git diff --git a/group_edit.php b/group_edit.php index 1d42ed67..6ec572e9 100644 --- a/group_edit.php +++ b/group_edit.php @@ -32,12 +32,13 @@ import('ttUserHelper'); import('ttRoleHelper'); // Access checks. -if (!ttAccessAllowed('manage_basic_settings')) { +if (!(ttAccessAllowed('manage_basic_settings') || ttAccessAllowed('manage_advanced_settings'))) { header('Location: access_denied.php'); exit(); } // End of access checks. +$advanced_settings = $user->can('manage_advanced_settings'); if (!defined('CURRENCY_DEFAULT')) define('CURRENCY_DEFAULT', '$'); if ($request->isPost()) { @@ -111,7 +112,7 @@ if ($request->isPost()) { } $form = new Form('groupForm'); -$form->addInput(array('type'=>'text','maxlength'=>'200','name'=>'team_name','value'=>$cl_team)); +$form->addInput(array('type'=>'text','maxlength'=>'200','name'=>'team_name','value'=>$cl_team,'enable'=>$advanced_settings)); $form->addInput(array('type'=>'text','maxlength'=>'7','name'=>'currency','value'=>$cl_currency)); // Prepare an array of available languages. @@ -187,8 +188,8 @@ $form->addInput(array('type'=>'checkbox','name'=>'future_entries','value'=>$cl_f // Uncompleted indicators checkbox. $form->addInput(array('type'=>'checkbox','name'=>'uncompleted_indicators','value'=>$cl_uncompleted_indicators)); -// Add bcc email control, for manager only. -if ($user->can('manage_advanced_settings')) { +// Add bcc email control. +if ($advanced_settings) { $form->addInput(array('type'=>'text','maxlength'=>'100','name'=>'bcc_email','value'=>$cl_bcc_email)); $form->addInput(array('type'=>'text','maxlength'=>'100','name'=>'allow_ip','value'=>$cl_allow_ip)); } @@ -210,12 +211,11 @@ $form->addInput(array('type'=>'submit','name'=>'btn_save','value'=>$i18n->get('b if ($request->isPost()) { // Validate user input. - if (!ttValidString($cl_team, true)) $err->add($i18n->get('error.field'), $i18n->get('label.team_name')); + if (!ttValidString($cl_team, true)) $err->add($i18n->get('error.field'), $i18n->get('label.group_name')); if (!ttValidString($cl_currency, true)) $err->add($i18n->get('error.field'), $i18n->get('label.currency')); - if ($user->can('manage_advanced_settings')) { + if ($advanced_settings) { if (!ttValidEmail($cl_bcc_email, true)) $err->add($i18n->get('error.field'), $i18n->get('label.bcc')); - // TODO: how about writing ttValidIP? - if (!ttValidString($cl_allow_ip, true)) $err->add($i18n->get('error.field'), $i18n->get('form.profile.allow_ip')); + if (!ttValidIP($cl_allow_ip, true)) $err->add($i18n->get('error.field'), $i18n->get('form.profile.allow_ip')); } // Finished validating user input.