Client Overview: Enforce visibility permissions on credentials in client overview

This commit is contained in:
johnnyq
2026-05-04 13:38:31 -04:00
parent 90232c82c0
commit 67f9f9ec76

View File

@@ -349,7 +349,10 @@ $sql_asset_retired = mysqli_query(
<?php } ?>
<?php if (mysqli_num_rows($sql_favorite_credentials) > 0) { ?>
<?php
// Credential Permission check
if (lookupUserPermission('module_credential')) {
if (mysqli_num_rows($sql_favorite_credentials) > 0) { ?>
<div class="col-md-4">
@@ -411,7 +414,7 @@ $sql_asset_retired = mysqli_query(
</div>
<?php } ?>
<?php } } ?>
<?php if (mysqli_num_rows($sql_shared_items) > 0) { ?>