Security fix - improved access checks for task edit and deletes.

[timetracker.git] / user_add.php

diff --git a/user_add.php b/user_add.php
index 91286537d534e2191c7eb27d0df03c174272705b..b235cbd17eb81817da85f686b63af2dfbd380319 100644 (file)
--- a/user_add.php
+++ b/user_add.php
@@ -34,11 +34,12 @@ import('form.Table');
 import('form.TableColumn');
 import('ttRoleHelper');
 
-// Access check.
+// Access checks.
 if (!ttAccessAllowed('manage_users')) {
   header('Location: access_denied.php');
   exit();
 }
+// End of access checks.
 
 // Use the "limit" plugin if we have one. Ignore include errors.
 // The "limit" plugin is not required for normal operation of the Time Tracker.