X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=time_delete.php;h=a7b802b6033fb94eaca988fd0564bdf58d1de05b;hb=ed41335d63e71a11d30e92f4367106e9398adf9d;hp=e83630edf52bad6f3234513c9a8f934eb8f3f341;hpb=086b93bd5a71b4c68ae3fa3e37d97182ee2a5b73;p=timetracker.git diff --git a/time_delete.php b/time_delete.php index e83630ed..a7b802b6 100644 --- a/time_delete.php +++ b/time_delete.php @@ -39,8 +39,8 @@ if (!(ttAccessAllowed('track_own_time') || ttAccessAllowed('track_time'))) { } $cl_id = (int)$request->getParameter('id'); $time_rec = ttTimeHelper::getRecord($cl_id); -if (!$time_rec || $time_rec['timesheet_id'] || $time_rec['invoice_id']) { - // Prohibit deleting not ours, or assigned to timesheet, or invoiced records. +if (!$time_rec || $time_rec['approved'] || $time_rec['timesheet_id'] || $time_rec['invoice_id']) { + // Prohibit deleting not ours, approved, assigned to timesheet, or invoiced records. header('Location: access_denied.php'); exit(); }