From 3524010d7ab5e75dc63619c68900f917ed40e609 Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Fri, 24 Jul 2026 22:06:42 -0400
Subject: [PATCH] Add enforceClientAccess to 4 bulk modals initially missing

---
 agent/modals/asset/asset_bulk_assign_contact.php      | 2 ++
 agent/modals/asset/asset_bulk_assign_location.php     | 2 ++
 agent/modals/contact/contact_bulk_assign_location.php | 2 ++
 agent/modals/document/document_add_from_template.php  | 2 ++
 4 files changed, 8 insertions(+)

diff --git a/agent/modals/asset/asset_bulk_assign_contact.php b/agent/modals/asset/asset_bulk_assign_contact.php
index 1a0defca..3e1d634b 100644
--- a/agent/modals/asset/asset_bulk_assign_contact.php
+++ b/agent/modals/asset/asset_bulk_assign_contact.php
@@ -3,6 +3,8 @@
 require_once '../../../includes/modal_header.php';
 
 $client_id = intval($_GET['client_id']);
+
+enforceClientAccess();
 $asset_ids = array_map('intval', $_GET['asset_ids'] ?? []);
 
 $count = count($asset_ids);
diff --git a/agent/modals/asset/asset_bulk_assign_location.php b/agent/modals/asset/asset_bulk_assign_location.php
index b85201e2..6714a4ff 100644
--- a/agent/modals/asset/asset_bulk_assign_location.php
+++ b/agent/modals/asset/asset_bulk_assign_location.php
@@ -3,6 +3,8 @@
 require_once '../../../includes/modal_header.php';
 
 $client_id = intval($_GET['client_id']);
+
+enforceClientAccess();
 $asset_ids = array_map('intval', $_GET['asset_ids'] ?? []);
 
 $count = count($asset_ids);
diff --git a/agent/modals/contact/contact_bulk_assign_location.php b/agent/modals/contact/contact_bulk_assign_location.php
index 4b264ff1..b1da34de 100644
--- a/agent/modals/contact/contact_bulk_assign_location.php
+++ b/agent/modals/contact/contact_bulk_assign_location.php
@@ -3,6 +3,8 @@
 require_once '../../../includes/modal_header.php';
 
 $client_id = intval($_GET['client_id']);
+
+enforceClientAccess();
 $contact_ids = array_map('intval', $_GET['contact_ids'] ?? []);
 
 $count = count($contact_ids);
diff --git a/agent/modals/document/document_add_from_template.php b/agent/modals/document/document_add_from_template.php
index e5c6d3c9..a49e0432 100644
--- a/agent/modals/document/document_add_from_template.php
+++ b/agent/modals/document/document_add_from_template.php
@@ -3,6 +3,8 @@
 require_once '../../../includes/modal_header.php';
 
 $client_id = intval($_GET['client_id'] ?? 0);
+
+enforceClientAccess();
 $contact_id = intval($_GET['contact_id'] ?? 0);
 $asset_id = intval($_GET['asset_id'] ?? 0);
 intval($_GET['folder_id'] ?? 0);