X-Git-Url: http://wagnertech.de/gitweb/gitweb.cgi/timetracker.git/blobdiff_plain/66d86939b62dc5ae3d5f16088b61822e611cf58f..HEAD:/time_delete.php diff --git a/time_delete.php b/time_delete.php index 1b6f5c29..a7b802b6 100644 --- a/time_delete.php +++ b/time_delete.php @@ -38,10 +38,9 @@ if (!(ttAccessAllowed('track_own_time') || ttAccessAllowed('track_time'))) { exit(); } $cl_id = (int)$request->getParameter('id'); -$user_id = $user->getUser(); -$time_rec = ttTimeHelper::getRecord($cl_id, $user_id); -if (!$time_rec || $time_rec['timesheet_id'] || $time_rec['invoice_id']) { - // Prohibit deleting not ours, or assigned to timesheet, or invoiced records. +$time_rec = ttTimeHelper::getRecord($cl_id); +if (!$time_rec || $time_rec['approved'] || $time_rec['timesheet_id'] || $time_rec['invoice_id']) { + // Prohibit deleting not ours, approved, assigned to timesheet, or invoiced records. header('Location: access_denied.php'); exit(); }