X-Git-Url: http://wagnertech.de/gitweb/gitweb.cgi/timetracker.git/blobdiff_plain/a0dd058ab6007cfc6a72713215a7f4abb96f1b45..dd2ba64b1b4aaddacec2b9f6763c0ed7a35efc3b:/charts.php diff --git a/charts.php b/charts.php index 69997d87..f2b01f16 100644 --- a/charts.php +++ b/charts.php @@ -37,11 +37,15 @@ import('PieChartEx'); import('ttUserHelper'); import('ttTeamHelper'); -// Access check. -if (!ttAccessAllowed('view_own_charts') || !$user->isPluginEnabled('ch')) { +// Access checks. +if (!ttAccessAllowed('view_own_charts')) { header('Location: access_denied.php'); exit(); } +if (!$user->isPluginEnabled('ch')) { + header('Location: feature_disabled.php'); + exit(); +} // Initialize and store date in session. $cl_date = $request->getParameter('date', @$_SESSION['date']); @@ -105,7 +109,7 @@ if ($request->isPost()) { } // If user has changed - set behalf_id accordingly in the session. if ($request->getParameter('onBehalfUser')) { - if($user->canManageTeam()) { + if($user->can('view_charts')) { unset($_SESSION['behalf_id']); unset($_SESSION['behalf_name']); @@ -123,7 +127,7 @@ if ($request->isPost()) { $chart_form = new Form('chartForm'); // User dropdown. Changes the user "on behalf" of whom we are working. -if ($user->canManageTeam()) { +if ($user->can('view_charts')) { $user_list = ttTeamHelper::getActiveUsers(array('putSelfFirst'=>true)); if (count($user_list) > 1) { $chart_form->addInput(array('type'=>'combobox',