Add Missing clientEnforcement in various modals, already handled on POST also add client selection in edit trip and enforce client permissions on trips

This commit is contained in:
johnnyq
2026-07-09 16:07:54 -04:00
parent 68f705b135
commit 317fe91359
50 changed files with 188 additions and 37 deletions

View File

@@ -13,6 +13,8 @@ $count_files = count($file_ids);
$count_docs = count($document_ids);
$total = $count_files + $count_docs;
enforceClientAccess();
ob_start();
?>

View File

@@ -35,9 +35,12 @@ if ($file_ext == 'pdf') {
$file_icon = "file";
}
// Generate the HTML form content using output buffering.
enforceClientAccess();
ob_start();
?>
<div class="modal-header bg-dark">
<h5 class="modal-title"><i class="fa fa-fw fa-<?php echo $file_icon; ?> mr-2"></i>Moving File: <strong><?php echo $file_name; ?></strong></h5>
<button type="button" class="close text-white" data-dismiss="modal">

View File

@@ -35,8 +35,10 @@ if ($file_ext == 'pdf') {
$file_icon = "file";
}
// Generate the HTML form content using output buffering.
enforceClientAccess();
ob_start();
?>
<div class="modal-header bg-dark">
<h5 class="modal-title"><i class="fa fa-fw fa-<?php echo $file_icon; ?> mr-2"></i>Renaming file: <strong><?php echo $file_name; ?></strong></h5>

View File

@@ -7,9 +7,12 @@ $contact_id = intval($_GET['contact_id'] ?? 0);
$asset_id = intval($_GET['asset_id'] ?? 0);
intval($_GET['folder_id'] ?? 0);
enforceClientAccess();
ob_start();
?>
<div class="modal-header bg-dark">
<h5 class="modal-title"><i class="fa fa-fw fa-cloud-upload-alt mr-2"></i>Upload File(s)</h5>
<button type="button" class="close text-white" data-dismiss="modal">