X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=project_delete.php;h=a6b6ed532b7cf39b0d72de62f716d2e425c43d20;hb=2ccee198591bc2ad5d80b5e1076246449d9232c1;hp=68c51b82d4391aab3cf975e8ba3c56dcd4865b97;hpb=4426ed3bc8e53d5013d356505283c916e3826392;p=timetracker.git

diff --git a/project_delete.php b/project_delete.php
index 68c51b82..a6b6ed53 100644
--- a/project_delete.php
+++ b/project_delete.php
@@ -31,7 +31,7 @@ import('form.Form');
 import('ttProjectHelper');
 
 // Access check.
-if (!ttAccessCheck(right_manage_team)) {
+if (!ttAccessAllowed('manage_projects') || (MODE_PROJECTS != $user->tracking_mode && MODE_PROJECTS_AND_TASKS != $user->tracking_mode)) {
   header('Location: access_denied.php');
   exit();
 }
@@ -45,21 +45,21 @@ $form->addInput(array('type'=>'hidden','name'=>'id','value'=>$cl_project_id));
 $form->addInput(array('type'=>'submit','name'=>'btn_delete','value'=>$i18n->getKey('label.delete')));
 $form->addInput(array('type'=>'submit','name'=>'btn_cancel','value'=>$i18n->getKey('button.cancel')));
 
-if ($request->getMethod() == 'POST') {
+if ($request->isPost()) {
   if ($request->getParameter('btn_delete')) {
     if(ttProjectHelper::get($cl_project_id)) {
       if (ttProjectHelper::delete($cl_project_id)) {
         header('Location: projects.php');
         exit();
       } else
-        $errors->add($i18n->getKey('error.db'));
+        $err->add($i18n->getKey('error.db'));
     } else
-      $errors->add($i18n->getKey('error.db'));
-  } else if ($request->getParameter('btn_cancel')) {
+      $err->add($i18n->getKey('error.db'));
+  } elseif ($request->getParameter('btn_cancel')) {
     header('Location: projects.php');
     exit();
   }
-} // POST
+} // isPost
 
 $smarty->assign('project_to_delete', $project_to_delete);
 $smarty->assign('forms', array($form->getName()=>$form->toArray()));