Add Missing clientEnforcement in various modals, already handled on POST also add client selection in edit trip and enforce client permissions on trips

This commit is contained in:
johnnyq
2026-07-09 16:07:54 -04:00
parent 68f705b135
commit 317fe91359
50 changed files with 188 additions and 37 deletions

View File

@@ -21,8 +21,12 @@ $project_archived_at = nullable_htmlentities($row['project_archived_at']);
$client_id = intval($row['project_client_id']);
$project_manager = intval($row['project_manager']);
// Generate the HTML form content using output buffering.
if ($client_id) {
enforceClientAccess();
}
ob_start();
?>
<div class="modal-header bg-dark">

View File

@@ -7,6 +7,7 @@ $client_id = intval($_GET['client_id'] ?? 0);
if ($client_id) {
$client_ticket_select_query = "AND ticket_client_id = $client_id"; // Used when linking a ticket to the project
enforceClientAccess();
} else {
$client_ticket_select_query = '';
}

View File

@@ -7,6 +7,7 @@ $client_id = intval($_GET['client_id'] ?? 0);
if ($client_id) {
$client_ticket_select_query = "AND ticket_client_id = $client_id"; // Used when linking a ticket to the project
enforceClientAccess();
} else {
$client_ticket_select_query = '';
}