Work in progress added more checks for access control.

[timetracker.git] / cf_dropdown_option_edit.php

diff --git a/cf_dropdown_option_edit.php b/cf_dropdown_option_edit.php
index 78fc279c45c2be21ede8b96141e6d73b76bb3e14..ba486ae98413f7b698cc8ba7b9939d0b4c80e985 100644 (file)
--- a/cf_dropdown_option_edit.php
+++ b/cf_dropdown_option_edit.php
@@ -31,7 +31,7 @@ require_once('plugins/CustomFields.class.php');
 import('form.Form');
 
 // Access check.
-if (!ttAccessCheck(right_manage_team)) {
+if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cf')) {
   header('Location: access_denied.php');
   exit();
 }