From 6e33c071ef4cc84b7dd82c7b2944639ea17b27df Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Mon, 9 Mar 2026 11:44:45 -0400
Subject: [PATCH] Hide New Invoice, Recurring Invoices, Tickets, revenues,
 products for appropriate permissions

---
 agent/invoices.php           |  2 ++
 agent/products.php           |  8 +++++++-
 agent/recurring_invoices.php |  2 ++
 agent/recurring_tickets.php  | 10 +++++-----
 agent/revenues.php           |  2 ++
 5 files changed, 18 insertions(+), 6 deletions(-)

diff --git a/agent/invoices.php b/agent/invoices.php
index 9ed7ef1a..7a7d1009 100644
--- a/agent/invoices.php
+++ b/agent/invoices.php
@@ -162,10 +162,12 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
         <h3 class="card-title mt-2"><i class="fa fa-fw fa-file-invoice mr-2"></i>Invoices</h3>
         <div class="card-tools">
             <div class="btn-group">
+                <?php if (lookupUserPermission("module_sales") >= 2) { ?>
                 <button type="button" class="btn btn-primary ajax-modal"
                     data-modal-url="modals/invoice/invoice_add.php?<?= $client_url ?>">
                     <i class="fas fa-plus mr-2"></i>New Invoice
                 </button>
+                <?php } ?>
                 <button type="button" class="btn btn-primary dropdown-toggle dropdown-toggle-split" data-toggle="dropdown"></button>
                 <div class="dropdown-menu">
                     <a class="dropdown-item text-dark ajax-modal" href="#"
diff --git a/agent/products.php b/agent/products.php
index 55944a3a..a0fb9be8 100644
--- a/agent/products.php
+++ b/agent/products.php
@@ -60,7 +60,13 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
             <h3 class="card-title mt-2"><i class="fas fa-fw <?= $type_icon ?> mr-2"></i><?= $type_display ?></h3>
             <div class="card-tools">
                 <div class="btn-group">
-                    <button type="button" class="btn btn-primary ajax-modal" data-modal-url="modals/product/product_add.php?type=<?= $type_filter ?>"><i class="fas fa-plus mr-2"></i>New <strong><?= ucwords($type_filter); ?></strong></button>
+                    <?php if (lookupUserPermission("module_sales") >= 2) { ?>
+                    <button type="button"
+                        class="btn btn-primary ajax-modal"
+                        data-modal-url="modals/product/product_add.php?type=<?= $type_filter ?>">
+                        <i class="fas fa-plus mr-2"></i>New <strong><?= ucwords($type_filter); ?></strong>
+                    </button>
+                    <?php } ?>
                     <button type="button" class="btn btn-primary dropdown-toggle dropdown-toggle-split" data-toggle="dropdown"></button>
                     <div class="dropdown-menu">
                         <a class="dropdown-item text-dark ajax-modal"
diff --git a/agent/recurring_invoices.php b/agent/recurring_invoices.php
index 8ecdb289..44159909 100644
--- a/agent/recurring_invoices.php
+++ b/agent/recurring_invoices.php
@@ -46,9 +46,11 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
 <div class="card card-dark">
     <div class="card-header py-2">
         <h3 class="card-title mt-2"><i class="fa fa-redo-alt mr-2"></i>Recurring Invoices</h3>
+        <?php if (lookupUserPermission("module_sales") >= 2) { ?>
         <div class="card-tools">
             <button type="button" class="btn btn-primary ajax-modal" data-modal-url="modals/recurring_invoice/recurring_invoice_add.php?<?= $client_url ?>"><i class="fas fa-plus"></i><span class="d-none d-lg-inline ml-2">New Recurring Invoice</span></button>
         </div>
+        <?php } ?>
     </div>
 
     <div class="card-body">
diff --git a/agent/recurring_tickets.php b/agent/recurring_tickets.php
index f2f6da66..74d76072 100644
--- a/agent/recurring_tickets.php
+++ b/agent/recurring_tickets.php
@@ -86,13 +86,13 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
 <div class="card card-dark">
     <div class="card-header py-2">
         <h3 class="card-title mt-2"><i class="fas fa-fw fa-redo-alt mr-2"></i>Recurring Tickets</h3>
+        <?php if (lookupUserPermission("module_support") >= 2) { ?>
         <div class='card-tools'>
-            <div class="float-left">
-                <button type="button" class="btn btn-primary ajax-modal" data-modal-url="modals/recurring_ticket/recurring_ticket_add.php?<?= $client_url ?>" data-modal-size="lg">
-                    <i class="fas fa-plus"></i><span class="d-none d-lg-inline ml-2">New Recurring Ticket</span>
-                </button>
-            </div>
+            <button type="button" class="btn btn-primary ajax-modal" data-modal-url="modals/recurring_ticket/recurring_ticket_add.php?<?= $client_url ?>" data-modal-size="lg">
+                <i class="fas fa-plus"></i><span class="d-none d-lg-inline ml-2">New Recurring Ticket</span>
+            </button>
         </div>
+        <?php } ?>
     </div>
 
     <div class="card-body">
diff --git a/agent/revenues.php b/agent/revenues.php
index f0fa7738..67b7240b 100644
--- a/agent/revenues.php
+++ b/agent/revenues.php
@@ -25,9 +25,11 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli, "SELECT FOUND_ROWS()"));
 <div class="card card-dark">
     <div class="card-header py-2">
         <h3 class="card-title mt-2"><i class="fas fa-fw fa-hand-holding-usd mr-2"></i>Revenues</h3>
+        <?php if (lookupUserPermission("module_sales") >= 2) { ?>
         <div class="card-tools">
             <button type="button" class="btn btn-primary ajax-modal" data-modal-url="modals/revenue/revenue_add.php" data-modal-size="lg"><i class="fas fa-plus mr-2"></i>New Revenue</button>
         </div>
+        <?php } ?>
     </div>
 
     <div class="card-body">