A bit more progress on refactoring access checks.

[timetracker.git] / reports.php

diff --git a/reports.php b/reports.php
index 390c85c683fcefc3c665cd638e774ee91a3c1def..3a7367e77e6653f29948955f0d6fbb354a8e160e 100644 (file)
--- a/reports.php
+++ b/reports.php
@@ -37,7 +37,7 @@ import('ttFavReportHelper');
 import('ttClientHelper');
 
 // Access check.
-if (!ttAccessAllowed('view_own_reports')) {
+if (!(ttAccessAllowed('view_own_reports') || ttAccessAllowed('view_reports'))) {
   header('Location: access_denied.php');
   exit();
 }