From 67f9f9ec76dadec93ff5ea1f20de5fddf2df569d Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Mon, 4 May 2026 13:38:31 -0400
Subject: [PATCH] Client Overview: Enforce visibility permissions on
 credentials in client overview

---
 agent/client_overview.php | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/agent/client_overview.php b/agent/client_overview.php
index fa1ce326..020c9c32 100644
--- a/agent/client_overview.php
+++ b/agent/client_overview.php
@@ -349,7 +349,10 @@ $sql_asset_retired = mysqli_query(
 
     <?php } ?>
 
-    <?php if (mysqli_num_rows($sql_favorite_credentials) > 0) { ?>
+    <?php
+    // Credential Permission check
+    if (lookupUserPermission('module_credential')) {
+    if (mysqli_num_rows($sql_favorite_credentials) > 0) { ?>
 
     <div class="col-md-4">
 
@@ -411,7 +414,7 @@ $sql_asset_retired = mysqli_query(
 
     </div>
 
-    <?php } ?>
+    <?php }  } ?>
 
     <?php if (mysqli_num_rows($sql_shared_items) > 0) { ?>