More refactoring of rights checks (#61)

[timetracker.git] / expenses.php

diff --git a/expenses.php b/expenses.php
index fee8120511d24e4284fb98de6739c26f627b7df9..7d7295d29eab2c5ef9b179f62495fc0722c85983 100644 (file)
--- a/expenses.php
+++ b/expenses.php
@@ -196,7 +196,7 @@ if ($request->isPost()) {
         $err->add($i18n->get('error.db'));
     }
   } elseif ($request->getParameter('onBehalfUser')) {
-    if($user->canManageTeam()) {
+    if($user->can('track_expenses')) {
       unset($_SESSION['behalf_id']);
       unset($_SESSION['behalf_name']);