X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=time_files.php;h=40a0c50639cb3b7357713faabcf0e7383692f444;hb=c3e6cb49a67ee660c2eaeef53e15c85c19d805dd;hp=2ba0efceaa5a985301b628173d71afea0fdf0260;hpb=f30b876933acf131cbdfbf89ae7717faffa85f2d;p=timetracker.git

diff --git a/time_files.php b/time_files.php
index 2ba0efce..40a0c506 100644
--- a/time_files.php
+++ b/time_files.php
@@ -36,17 +36,16 @@ if (!(ttAccessAllowed('track_own_time') || ttAccessAllowed('track_time'))) {
   header('Location: access_denied.php');
   exit();
 }
+if (!$user->isPluginEnabled('at')) {
+  header('Location: feature_disabled.php');
+  exit();
+}
 $cl_id = (int)$request->getParameter('id');
-$time_rec = ttTimeHelper::getRecord($cl_id);
+$time_rec = ttTimeHelper::getRecordForFileView($cl_id);
 if (!$time_rec) {
   header('Location: access_denied.php');
   exit();
 }
-if (!$user->isPluginEnabled('at')) {
-  header('Location: feature_disabled.php');
-  exit();
-}
-// TODO: review access checks, specifically for on behalf operations.
 // End of access checks.
 
 if ($request->isPost()) {