From 3222579993343da856339c1474d9d4b9a752167e Mon Sep 17 00:00:00 2001 From: Nik Okuntseff Date: Mon, 12 Mar 2018 15:25:50 +0000 Subject: [PATCH] A bit more progress on redoing access checks. --- WEB-INF/templates/footer.tpl | 2 +- charts.php | 2 +- client_add.php | 2 +- client_delete.php | 2 +- client_edit.php | 2 +- clients.php | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/WEB-INF/templates/footer.tpl b/WEB-INF/templates/footer.tpl index db729137..4d0147de 100644 --- a/WEB-INF/templates/footer.tpl +++ b/WEB-INF/templates/footer.tpl @@ -12,7 +12,7 @@
-
 Anuko Time Tracker 1.17.39.4061 | Copyright © Anuko | +  Anuko Time Tracker 1.17.39.4062 | Copyright © Anuko | {$i18n.footer.credits} | {$i18n.footer.license} | {$i18n.footer.improve} diff --git a/charts.php b/charts.php index c76eddfa..df38cce6 100644 --- a/charts.php +++ b/charts.php @@ -38,7 +38,7 @@ import('ttUserHelper'); import('ttTeamHelper'); // Access check. -if (!ttAccessCheck(right_view_charts) || !$user->isPluginEnabled('ch')) { +if (!ttAccessAllowed('view_own_data') || !$user->isPluginEnabled('ch')) { header('Location: access_denied.php'); exit(); } diff --git a/client_add.php b/client_add.php index d3ca5aa9..8dbb0d86 100644 --- a/client_add.php +++ b/client_add.php @@ -32,7 +32,7 @@ import('ttClientHelper'); import('ttTeamHelper'); // Access check. -if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cl')) { +if (!ttAccessAllowed('manage_clients') || !$user->isPluginEnabled('cl')) { header('Location: access_denied.php'); exit(); } diff --git a/client_delete.php b/client_delete.php index 767a919e..eae30050 100644 --- a/client_delete.php +++ b/client_delete.php @@ -31,7 +31,7 @@ import('form.Form'); import('ttClientHelper'); // Access check. -if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cl')) { +if (!ttAccessAllowed('manage_clients') || !$user->isPluginEnabled('cl')) { header('Location: access_denied.php'); exit(); } diff --git a/client_edit.php b/client_edit.php index cf4d1541..3099e888 100644 --- a/client_edit.php +++ b/client_edit.php @@ -32,7 +32,7 @@ import('ttClientHelper'); import('ttTeamHelper'); // Access check. -if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cl')) { +if (!ttAccessAllowed('manage_clients') || !$user->isPluginEnabled('cl')) { header('Location: access_denied.php'); exit(); } diff --git a/clients.php b/clients.php index 0a027b8b..f02d4b95 100644 --- a/clients.php +++ b/clients.php @@ -31,7 +31,7 @@ import('form.Form'); import('ttTeamHelper'); // Access check. -if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cl')) { +if (!ttAccessAllowed('manage_clients') || !$user->isPluginEnabled('cl')) { header('Location: access_denied.php'); exit(); } -- 2.20.1