X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=tofile.php;h=e7b9ed963b4fbab166135ae48d15c52395f3f7a4;hb=1a11a94d4ec3f33d7f92145ad8d6fa8eec4b18ac;hp=67c5b31ceb08214d4ace1fa5e402b4605e9d482d;hpb=fd0872d9e582113346fa1e93557f370286c5c9f2;p=timetracker.git diff --git a/tofile.php b/tofile.php index 67c5b31c..e7b9ed96 100644 --- a/tofile.php +++ b/tofile.php @@ -31,11 +31,12 @@ import('form.Form'); import('form.ActionForm'); import('ttReportHelper'); -// Access check. -if (!ttAccessAllowed('view_own_reports')) { +// Access checks. +if (!(ttAccessAllowed('view_own_reports') || ttAccessAllowed('view_reports'))) { header('Location: access_denied.php'); exit(); } +// End of access checks. // Use custom fields plugin if it is enabled. if ($user->isPluginEnabled('cf')) {