More improvements to access checks.

[timetracker.git] / users.php

diff --git a/users.php b/users.php
index 8602186382e6aff6f67a09c8c6a39e2cf66b1b0a..35fd4168cda8f57789165263f5bb139082e0f807 100644 (file)
--- a/users.php
+++ b/users.php
@@ -33,7 +33,7 @@ import('ttTimeHelper');
 import('ttRoleHelper');
 
 // Access check.
-if (!ttAccessAllowed('view_users')) {
+if (!(ttAccessAllowed('view_users') || ttAccessAllowed('manage_users'))) {
   header('Location: access_denied.php');
   exit();
 }