X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=roles.php;h=fe68329d36c27caba68a48bac622e5850a6068e0;hb=dda0cf3dc9763aca45c0a6cd53715db11941aa94;hp=cd17da3c48cc5aa9bd695a18822abb07a32708b9;hpb=dab1057395c8eb9c5dce5480a738de1467e83ba5;p=timetracker.git diff --git a/roles.php b/roles.php index cd17da3c..fe68329d 100644 --- a/roles.php +++ b/roles.php @@ -36,8 +36,19 @@ if (!ttAccessAllowed('manage_roles')) { header('Location: access_denied.php'); exit(); } +$group_id = (int)$request->getParameter('group_id'); +if ($group_id && !$user->isGroupValid($group_id)) { + header('Location: access_denied.php'); + exit(); +} // End of access checks. +if ($group_id) { + // We are passed a valid group_id (most likely from group_edit.php). + // Set on behalf group accordingly. + $user->setOnBehalfGroup($group_id); +} + $smarty->assign('active_roles', ttTeamHelper::getActiveRolesForUser()); $smarty->assign('inactive_roles', ttTeamHelper::getInactiveRolesForUser()); $smarty->assign('title', $i18n->get('title.roles'));