More improvements to access checks.

[timetracker.git] / tofile.php

diff --git a/tofile.php b/tofile.php
index 67c5b31ceb08214d4ace1fa5e402b4605e9d482d..abd1f278bd855ea0ed87479f690c53fb17da2cd4 100644 (file)
--- a/tofile.php
+++ b/tofile.php
@@ -32,7 +32,7 @@ import('form.ActionForm');
 import('ttReportHelper');
 
 // Access check.
-if (!ttAccessAllowed('view_own_reports')) {
+if (!(ttAccessAllowed('view_own_reports') || ttAccessAllowed('view_reports'))) {
   header('Location: access_denied.php');
   exit();
 }