X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=mobile%2Ftask_edit.php;h=facf18c679c6c1c496384bfae4b1660fd9b1a793;hb=ce2df23479c88d1bc9db04a68164af3feb6346e1;hp=2ba2cc554149d90819d0b3e906bec4c85efccb30;hpb=fd0872d9e582113346fa1e93557f370286c5c9f2;p=timetracker.git diff --git a/mobile/task_edit.php b/mobile/task_edit.php index 2ba2cc55..facf18c6 100644 --- a/mobile/task_edit.php +++ b/mobile/task_edit.php @@ -28,17 +28,27 @@ require_once('../initialize.php'); import('form.Form'); -import('ttTeamHelper'); +import('ttGroupHelper'); import('ttTaskHelper'); -// Access check. -if (!ttAccessAllowed('manage_tasks') || MODE_PROJECTS_AND_TASKS != $user->tracking_mode) { +// Access checks. +if (!ttAccessAllowed('manage_tasks')) { header('Location: access_denied.php'); exit(); } - +if (MODE_PROJECTS_AND_TASKS != $user->tracking_mode) { + header('Location: feature_disabled.php'); + exit(); +} $cl_task_id = (int)$request->getParameter('id'); -$projects = ttTeamHelper::getActiveProjects($user->team_id); +$task = ttTaskHelper::get($cl_task_id); +if (!$task) { + header('Location: access_denied.php'); + exit(); +} +// End of access checks. + +$projects = ttGroupHelper::getActiveProjects(); if ($request->isPost()) { $cl_name = trim($request->getParameter('name')); @@ -46,11 +56,9 @@ if ($request->isPost()) { $cl_status = $request->getParameter('status'); $cl_projects = $request->getParameter('projects'); } else { - $task = ttTaskHelper::get($cl_task_id); $cl_name = $task['name']; $cl_description = $task['description']; $cl_status = $task['status']; - $assigned_projects = ttTaskHelper::getAssignedProjects($cl_task_id); foreach ($assigned_projects as $project_item) $cl_projects[] = $project_item['id']; @@ -89,13 +97,12 @@ if ($request->isPost()) { } else $err->add($i18n->get('error.db')); } else - $err->add($i18n->get('error.task_exists')); + $err->add($i18n->get('error.object_exists')); } if ($request->getParameter('btn_copy')) { if (!ttTaskHelper::getTaskByName($cl_name)) { if (ttTaskHelper::insert(array( - 'team_id' => $user->team_id, 'name' => $cl_name, 'description' => $cl_description, 'status' => $cl_status, @@ -105,7 +112,7 @@ if ($request->isPost()) { } else $err->add($i18n->get('error.db')); } else - $err->add($i18n->get('error.task_exists')); + $err->add($i18n->get('error.object_exists')); } if ($request->getParameter('btn_delete')) {