X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=group_edit.php;h=6ec572e9856d06236f36d17bb43ae9d34b1ebe1c;hb=e5af7e8b92762ab25710235c72c5504de2e091c6;hp=eb6995a53bb85c8012d452ec9f978106738ecea8;hpb=167e70e68597a70269edea5c5af9b186c489d57f;p=timetracker.git diff --git a/group_edit.php b/group_edit.php index eb6995a5..6ec572e9 100644 --- a/group_edit.php +++ b/group_edit.php @@ -32,12 +32,13 @@ import('ttUserHelper'); import('ttRoleHelper'); // Access checks. -if (!ttAccessAllowed('manage_basic_settings')) { +if (!(ttAccessAllowed('manage_basic_settings') || ttAccessAllowed('manage_advanced_settings'))) { header('Location: access_denied.php'); exit(); } // End of access checks. +$advanced_settings = $user->can('manage_advanced_settings'); if (!defined('CURRENCY_DEFAULT')) define('CURRENCY_DEFAULT', '$'); if ($request->isPost()) { @@ -111,7 +112,7 @@ if ($request->isPost()) { } $form = new Form('groupForm'); -$form->addInput(array('type'=>'text','maxlength'=>'200','name'=>'team_name','value'=>$cl_team)); +$form->addInput(array('type'=>'text','maxlength'=>'200','name'=>'team_name','value'=>$cl_team,'enable'=>$advanced_settings)); $form->addInput(array('type'=>'text','maxlength'=>'7','name'=>'currency','value'=>$cl_currency)); // Prepare an array of available languages. @@ -187,8 +188,8 @@ $form->addInput(array('type'=>'checkbox','name'=>'future_entries','value'=>$cl_f // Uncompleted indicators checkbox. $form->addInput(array('type'=>'checkbox','name'=>'uncompleted_indicators','value'=>$cl_uncompleted_indicators)); -// Add bcc email control, for manager only. -if ($user->can('manage_advanced_settings')) { +// Add bcc email control. +if ($advanced_settings) { $form->addInput(array('type'=>'text','maxlength'=>'100','name'=>'bcc_email','value'=>$cl_bcc_email)); $form->addInput(array('type'=>'text','maxlength'=>'100','name'=>'allow_ip','value'=>$cl_allow_ip)); } @@ -212,7 +213,7 @@ if ($request->isPost()) { // Validate user input. if (!ttValidString($cl_team, true)) $err->add($i18n->get('error.field'), $i18n->get('label.group_name')); if (!ttValidString($cl_currency, true)) $err->add($i18n->get('error.field'), $i18n->get('label.currency')); - if ($user->can('manage_advanced_settings')) { + if ($advanced_settings) { if (!ttValidEmail($cl_bcc_email, true)) $err->add($i18n->get('error.field'), $i18n->get('label.bcc')); if (!ttValidIP($cl_allow_ip, true)) $err->add($i18n->get('error.field'), $i18n->get('form.profile.allow_ip')); }