X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=mobile%2Fproject_edit.php;h=887946154aed8988724b97be2ebb4828350f0a9d;hb=45a530c33fdd7ab2ccd1905c24a371c94e17eac5;hp=74454ec410b4c71a0bad94e16e7e55c75b381c3c;hpb=dd2ba64b1b4aaddacec2b9f6763c0ed7a35efc3b;p=timetracker.git diff --git a/mobile/project_edit.php b/mobile/project_edit.php index 74454ec4..88794615 100644 --- a/mobile/project_edit.php +++ b/mobile/project_edit.php @@ -40,14 +40,19 @@ if (MODE_PROJECTS != $user->tracking_mode && MODE_PROJECTS_AND_TASKS != $user->t header('Location: feature_disabled.php'); exit(); } - $cl_project_id = (int)$request->getParameter('id'); +$project = ttProjectHelper::get($cl_project_id); +if (!$project) { + header('Location: access_denied.php'); + exit(); +} +// End of access checks. $users = ttTeamHelper::getActiveUsers(); foreach ($users as $user_item) $all_users[$user_item['id']] = $user_item['name']; -$tasks = ttTeamHelper::getActiveTasks($user->team_id); +$tasks = ttTeamHelper::getActiveTasks($user->group_id); foreach ($tasks as $task_item) $all_tasks[$task_item['id']] = $task_item['name']; @@ -58,7 +63,6 @@ if ($request->isPost()) { $cl_users = $request->getParameter('users', array()); $cl_tasks = $request->getParameter('tasks', array()); } else { - $project = ttProjectHelper::get($cl_project_id); $cl_name = $project['name']; $cl_description = $project['description']; $cl_status = $project['status']; @@ -109,13 +113,14 @@ if ($request->isPost()) { } else $err->add($i18n->get('error.db')); } else - $err->add($i18n->get('error.project_exists')); + $err->add($i18n->get('error.object_exists')); } if ($request->getParameter('btn_copy')) { if (!ttProjectHelper::getProjectByName($cl_name)) { if (ttProjectHelper::insert(array( - 'team_id' => $user->team_id, + 'group_id' => $user->getGroup(), + 'org_id' => $user->org_id, 'name' => $cl_name, 'description' => $cl_description, 'users' => $cl_users, @@ -126,7 +131,7 @@ if ($request->isPost()) { } else $err->add($i18n->get('error.db')); } else - $err->add($i18n->get('error.project_exists')); + $err->add($i18n->get('error.object_exists')); } if ($request->getParameter('btn_delete')) {