Client Overview: Enforce visibility permissions on credentials in client overview

This commit is contained in:
johnnyq
2026-05-04 13:38:31 -04:00
parent 90232c82c0
commit 67f9f9ec76

View File

@@ -349,7 +349,10 @@ $sql_asset_retired = mysqli_query(
<?php } ?> <?php } ?>
<?php if (mysqli_num_rows($sql_favorite_credentials) > 0) { ?> <?php
// Credential Permission check
if (lookupUserPermission('module_credential')) {
if (mysqli_num_rows($sql_favorite_credentials) > 0) { ?>
<div class="col-md-4"> <div class="col-md-4">
@@ -411,7 +414,7 @@ $sql_asset_retired = mysqli_query(
</div> </div>
<?php } ?> <?php } } ?>
<?php if (mysqli_num_rows($sql_shared_items) > 0) { ?> <?php if (mysqli_num_rows($sql_shared_items) > 0) { ?>