More improvements to access checks.

[timetracker.git] / topdf.php

diff --git a/topdf.php b/topdf.php
index b8f6684c475b447b4ae50e16e8a54af33178cb07..3177d155973b8e67c6c7845858e97c3948a3fb96 100644 (file)
--- a/topdf.php
+++ b/topdf.php
@@ -36,7 +36,7 @@ import('form.ActionForm');
 import('ttReportHelper');
 
 // Access check.
-if (!ttAccessAllowed('view_own_reports')) {
+if (!(ttAccessAllowed('view_own_reports') || ttAccessAllowed('view_reports'))) {
   header('Location: access_denied.php');
   exit();
 }