AS1024
/
itflow
mirror of https://github.com/itflow-org/itflow
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #505 from wrongecho/quick-fix-tech-financials 

Role enforcement
This commit is contained in:
Johnny 2022-12-11 13:17:52 -05:00 committed by GitHub
parent 64cd53f96f 5c1653dc0a
commit 64c3d47ac5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 14 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
clients.php
View File

@ -320,7 +320,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
<?php } ?>
<!-- Show actions for Admin role only -->
<?php //if($session_user_role == 3) { ?>
<?php if ($session_user_role == 3) { ?>
<td>
<div class="dropdown dropleft text-center">
<button class="btn btn-secondary btn-sm" type="button" data-toggle="dropdown">
@ -335,7 +335,7 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
</div>
</div>
</td>
<?php //} ?>
<?php } ?>
</tr>
<?php

13
dashboard_financial.php
View File

@ -1,6 +1,17 @@
<?php include("inc_all.php"); ?>
<?php
<?php
// Quick fix to prevent non-admins (i.e. techs) seeing financials - redirect to client list
// To be removed when we have a proper technical dashboard for techs
if ($_SESSION['user_role'] != 3) { ?>
<script type="text/javascript">
window.location.href = 'clients.php';
</script>
<?php
exit();
}
function roundUpToNearestMultiple($n, $increment = 1000)
{