Security fix for invoice view.

[timetracker.git] / expenses.php

diff --git a/expenses.php b/expenses.php
index 99418276b38f2eb7d84504f98e74f9078614c937..a6502fa17342ed2b7caa22c2d17a2c335ff930fa 100644 (file)
--- a/expenses.php
+++ b/expenses.php
@@ -34,7 +34,7 @@ import('DateAndTime');
 import('ttExpenseHelper');
 
 // Access check.
-if (!ttAccessCheck(right_data_entry) || !$user->isPluginEnabled('ex')) {
+if (!ttAccessAllowed('data_entry') || !$user->isPluginEnabled('ex')) {
   header('Location: access_denied.php');
   exit();
 }