Work in progress added more checks for access control.

diff --git a/WEB-INF/templates/footer.tpl b/WEB-INF/templates/footer.tpl
index c4934a51262e2c9fd2b16ac60ed420e711e92089..a62e521c4f14abd1788a71381f6ed404f7f50dbc 100644 (file)
--- a/WEB-INF/templates/footer.tpl
+++ b/WEB-INF/templates/footer.tpl
@@ -12,7 +12,7 @@
       <br>
       <table cellspacing="0" cellpadding="4" width="100%" border="0">
         <tr>
       <br>
       <table cellspacing="0" cellpadding="4" width="100%" border="0">
         <tr>

-          <td align="center">&nbsp;Anuko Time Tracker 1.9.31.3538 | Copyright &copy; <a href="https://www.anuko.com/lp/tt_3.htm" target="_blank">Anuko</a> |
+          <td align="center">&nbsp;Anuko Time Tracker 1.9.31.3539 | Copyright &copy; <a href="https://www.anuko.com/lp/tt_3.htm" target="_blank">Anuko</a> |

             <a href="https://www.anuko.com/lp/tt_4.htm" target="_blank">{$i18n.footer.credits}</a> |
             <a href="https://www.anuko.com/lp/tt_5.htm" target="_blank">{$i18n.footer.license}</a> |
             <a href="https://www.anuko.com/lp/tt_7.htm" target="_blank">{$i18n.footer.improve}</a>
             <a href="https://www.anuko.com/lp/tt_4.htm" target="_blank">{$i18n.footer.credits}</a> |
             <a href="https://www.anuko.com/lp/tt_5.htm" target="_blank">{$i18n.footer.license}</a> |
             <a href="https://www.anuko.com/lp/tt_7.htm" target="_blank">{$i18n.footer.improve}</a>

diff --git a/cf_custom_field_add.php b/cf_custom_field_add.php
index 965c2aba165fdea4816a27875d194dff73bf22bd..1d293d37733af8d3f5b76d2b630838a32eafb823 100644 (file)
--- a/cf_custom_field_add.php
+++ b/cf_custom_field_add.php
@@ -31,7 +31,7 @@ require_once('plugins/CustomFields.class.php');
 import('form.Form');
 
 // Access check.
 import('form.Form');
 
 // Access check.

-if (!ttAccessCheck(right_manage_team)) {
+if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cf')) {

   header('Location: access_denied.php');
   exit();
 }
   header('Location: access_denied.php');
   exit();
 }

diff --git a/cf_custom_field_delete.php b/cf_custom_field_delete.php
index 86fa7d87100be6f8cec838418bca37d4d16aca50..88779bedbc37dba6917efc6344d7ce49080244f1 100644 (file)
--- a/cf_custom_field_delete.php
+++ b/cf_custom_field_delete.php
@@ -31,7 +31,7 @@ require_once('plugins/CustomFields.class.php');
 import('form.Form');
 
 // Access check.
 import('form.Form');
 
 // Access check.

-if (!ttAccessCheck(right_manage_team)) {
+if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cf')) {

   header('Location: access_denied.php');
   exit();
 }
   header('Location: access_denied.php');
   exit();
 }

diff --git a/cf_custom_field_edit.php b/cf_custom_field_edit.php
index 196d85fafcf86a17b7dc487bc2b725f0fc317b23..b8e0f8ece6e5f6cd82677dd997bd0141d873228e 100644 (file)
--- a/cf_custom_field_edit.php
+++ b/cf_custom_field_edit.php
@@ -31,7 +31,7 @@ require_once('plugins/CustomFields.class.php');
 import('form.Form');
 
 // Access check.
 import('form.Form');
 
 // Access check.

-if (!ttAccessCheck(right_manage_team)) {
+if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cf')) {

   header('Location: access_denied.php');
   exit();
 }
   header('Location: access_denied.php');
   exit();
 }

diff --git a/cf_custom_fields.php b/cf_custom_fields.php
index 33c8b5e7ff66338131683505760dacb48ce67236..18de06059345d330fcefe564e145d510fcc7aa7d 100644 (file)
--- a/cf_custom_fields.php
+++ b/cf_custom_fields.php
@@ -31,7 +31,7 @@ require_once('plugins/CustomFields.class.php');
 import('form.Form');
 
 // Access check.
 import('form.Form');
 
 // Access check.

-if (!ttAccessCheck(right_manage_team)) {
+if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cf')) {

   header('Location: access_denied.php');
   exit();
 }
   header('Location: access_denied.php');
   exit();
 }

diff --git a/cf_dropdown_option_add.php b/cf_dropdown_option_add.php
index 20da6eefc0457c1955fc89dac47869e7fe4ed522..ecf4892d61c0188f2948f70f85df097b147365d0 100644 (file)
--- a/cf_dropdown_option_add.php
+++ b/cf_dropdown_option_add.php
@@ -31,7 +31,7 @@ require_once('plugins/CustomFields.class.php');
 import('form.Form');
 
 // Access check.
 import('form.Form');
 
 // Access check.

-if (!ttAccessCheck(right_manage_team)) {
+if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cf')) {

   header('Location: access_denied.php');
   exit();
 }
   header('Location: access_denied.php');
   exit();
 }

diff --git a/cf_dropdown_option_delete.php b/cf_dropdown_option_delete.php
index ed295920f1951eccad54825a4600b2117523a7fc..ec06b49fd56553e1adf532b3c05868fe3dc66906 100644 (file)
--- a/cf_dropdown_option_delete.php
+++ b/cf_dropdown_option_delete.php
@@ -31,7 +31,7 @@ require_once('plugins/CustomFields.class.php');
 import('form.Form');
 
 // Access check.
 import('form.Form');
 
 // Access check.

-if (!ttAccessCheck(right_manage_team)) {
+if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cf')) {

   header('Location: access_denied.php');
   exit();
 }
   header('Location: access_denied.php');
   exit();
 }

diff --git a/cf_dropdown_option_edit.php b/cf_dropdown_option_edit.php
index 78fc279c45c2be21ede8b96141e6d73b76bb3e14..ba486ae98413f7b698cc8ba7b9939d0b4c80e985 100644 (file)
--- a/cf_dropdown_option_edit.php
+++ b/cf_dropdown_option_edit.php
@@ -31,7 +31,7 @@ require_once('plugins/CustomFields.class.php');
 import('form.Form');
 
 // Access check.
 import('form.Form');
 
 // Access check.

-if (!ttAccessCheck(right_manage_team)) {
+if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cf')) {

   header('Location: access_denied.php');
   exit();
 }
   header('Location: access_denied.php');
   exit();
 }

diff --git a/cf_dropdown_options.php b/cf_dropdown_options.php
index a7718fbe9ec8215fb5188ddf8c24b841c155dd68..544eefdbeeb3bcb052716c229c1c8520785f14f1 100644 (file)
--- a/cf_dropdown_options.php
+++ b/cf_dropdown_options.php
@@ -31,7 +31,7 @@ require_once('plugins/CustomFields.class.php');
 import('form.Form');
 
 // Access check.
 import('form.Form');
 
 // Access check.

-if (!ttAccessCheck(right_manage_team)) {
+if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cf')) {

   header('Location: access_denied.php');
   exit();
 }
   header('Location: access_denied.php');
   exit();
 }

diff --git a/client_add.php b/client_add.php
index 275a65eef1ee417d3762ad46f00f4f375dc28bb8..bd1516f16fecc8d05b564153140836f5d9ed3217 100644 (file)
--- a/client_add.php
+++ b/client_add.php
@@ -32,7 +32,7 @@ import('ttClientHelper');
 import('ttTeamHelper');
 
 // Access check.
 import('ttTeamHelper');
 
 // Access check.

-if (!ttAccessCheck(right_manage_team)) {
+if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cl')) {

   header('Location: access_denied.php');
   exit();
 }
   header('Location: access_denied.php');
   exit();
 }

diff --git a/client_delete.php b/client_delete.php
index 2340db03f73de6bfb33d0bfbb47a3dfeb0f182e3..767a919e9c0a7442239abf231c374b69691749e3 100644 (file)
--- a/client_delete.php
+++ b/client_delete.php
@@ -31,7 +31,7 @@ import('form.Form');
 import('ttClientHelper');
 
 // Access check.
 import('ttClientHelper');
 
 // Access check.

-if (!ttAccessCheck(right_manage_team)) {
+if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cl')) {

   header('Location: access_denied.php');
   exit();
 }
   header('Location: access_denied.php');
   exit();
 }

diff --git a/client_edit.php b/client_edit.php
index c7ad1581e0b68b4ef5553d311448b1ca6c823c36..2b408c5da54195ff096101516c17817f3ab6b449 100644 (file)
--- a/client_edit.php
+++ b/client_edit.php
@@ -32,7 +32,7 @@ import('ttClientHelper');
 import('ttTeamHelper');
 
 // Access check.
 import('ttTeamHelper');
 
 // Access check.

-if (!ttAccessCheck(right_manage_team)) {
+if (!ttAccessCheck(right_manage_team) || !$user->isPluginEnabled('cl')) {

   header('Location: access_denied.php');
   exit();
 }
   header('Location: access_denied.php');
   exit();
 }