From 21328c2dee37e310c598585e473f91c11e4d681a Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Thu, 9 Jul 2026 16:13:39 -0400
Subject: [PATCH] clientEnforcement on Recurring Invoices and payments listings

---
 agent/modals/recurring_invoice/recurring_invoice_add.php | 2 +-
 agent/payments.php                                       | 1 +
 agent/recurring_invoices.php                             | 2 ++
 3 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/agent/modals/recurring_invoice/recurring_invoice_add.php b/agent/modals/recurring_invoice/recurring_invoice_add.php
index 21a94cc8..6f9ec187 100644
--- a/agent/modals/recurring_invoice/recurring_invoice_add.php
+++ b/agent/modals/recurring_invoice/recurring_invoice_add.php
@@ -42,7 +42,7 @@ ob_start();
                         <option value="">- Client -</option>
                         <?php
                         //select unarchived clients
-                        $sql = mysqli_query($mysqli, "SELECT * FROM clients WHERE client_archived_at IS NULL ORDER BY client_name ASC");
+                        $sql = mysqli_query($mysqli, "SELECT * FROM clients WHERE client_archived_at IS NULL $access_permission_query ORDER BY client_name ASC");
                         while ($row = mysqli_fetch_assoc($sql)) {
                             $client_id = intval($row['client_id']);
                             $client_name = nullable_htmlentities($row['client_name']);
diff --git a/agent/payments.php b/agent/payments.php
index 9733932a..93b014f2 100644
--- a/agent/payments.php
+++ b/agent/payments.php
@@ -49,6 +49,7 @@ $sql = mysqli_query(
     $account_query
     $payment_method_query
     $client_query
+    $access_permission_query
     ORDER BY $sort $order LIMIT $record_from, $record_to"
 );
 
diff --git a/agent/recurring_invoices.php b/agent/recurring_invoices.php
index 445acd8b..e029a498 100644
--- a/agent/recurring_invoices.php
+++ b/agent/recurring_invoices.php
@@ -37,6 +37,8 @@ $sql = mysqli_query(
     AND DATE(recurring_invoice_created_at) BETWEEN '$dtf' AND '$dtt'
     $status_query
     $client_query
+    $access_permission_query
+
     ORDER BY $sort $order LIMIT $record_from, $record_to");
 
 $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));