X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=mobile%2Ftask_edit.php;h=facf18c679c6c1c496384bfae4b1660fd9b1a793;hb=05f0dada8939fad19e44c9ff26bad6ae578e34cc;hp=346899dcebe9346aec699370aff54ccccdb49d5e;hpb=dd2ba64b1b4aaddacec2b9f6763c0ed7a35efc3b;p=timetracker.git diff --git a/mobile/task_edit.php b/mobile/task_edit.php index 346899dc..facf18c6 100644 --- a/mobile/task_edit.php +++ b/mobile/task_edit.php @@ -28,7 +28,7 @@ require_once('../initialize.php'); import('form.Form'); -import('ttTeamHelper'); +import('ttGroupHelper'); import('ttTaskHelper'); // Access checks. @@ -40,9 +40,15 @@ if (MODE_PROJECTS_AND_TASKS != $user->tracking_mode) { header('Location: feature_disabled.php'); exit(); } - $cl_task_id = (int)$request->getParameter('id'); -$projects = ttTeamHelper::getActiveProjects($user->team_id); +$task = ttTaskHelper::get($cl_task_id); +if (!$task) { + header('Location: access_denied.php'); + exit(); +} +// End of access checks. + +$projects = ttGroupHelper::getActiveProjects(); if ($request->isPost()) { $cl_name = trim($request->getParameter('name')); @@ -50,11 +56,9 @@ if ($request->isPost()) { $cl_status = $request->getParameter('status'); $cl_projects = $request->getParameter('projects'); } else { - $task = ttTaskHelper::get($cl_task_id); $cl_name = $task['name']; $cl_description = $task['description']; $cl_status = $task['status']; - $assigned_projects = ttTaskHelper::getAssignedProjects($cl_task_id); foreach ($assigned_projects as $project_item) $cl_projects[] = $project_item['id']; @@ -93,13 +97,12 @@ if ($request->isPost()) { } else $err->add($i18n->get('error.db')); } else - $err->add($i18n->get('error.task_exists')); + $err->add($i18n->get('error.object_exists')); } if ($request->getParameter('btn_copy')) { if (!ttTaskHelper::getTaskByName($cl_name)) { if (ttTaskHelper::insert(array( - 'team_id' => $user->team_id, 'name' => $cl_name, 'description' => $cl_description, 'status' => $cl_status, @@ -109,7 +112,7 @@ if ($request->isPost()) { } else $err->add($i18n->get('error.db')); } else - $err->add($i18n->get('error.task_exists')); + $err->add($i18n->get('error.object_exists')); } if ($request->getParameter('btn_delete')) {