Bugfix: Client Access Permissions

Fix bug that allows users to view recurring tickets and projects they shouldn't have access to
This commit is contained in:
wrongecho
2024-08-28 20:17:41 +01:00
parent a4a110f1e7
commit 26d6737468
6 changed files with 16 additions and 4 deletions

View File

@@ -81,7 +81,7 @@
<option value="">- Client -</option>
<?php
$sql = mysqli_query($mysqli, "SELECT * FROM clients WHERE client_archived_at IS NULL ORDER BY client_name ASC");
$sql = mysqli_query($mysqli, "SELECT * FROM clients WHERE client_archived_at IS NULL $access_permission_query ORDER BY client_name ASC");
while ($row = mysqli_fetch_array($sql)) {
$client_id = intval($row['client_id']);
$client_name = nullable_htmlentities($row['client_name']); ?>