diff --git a/agent/modals/account/account_edit.php b/agent/modals/account/account_edit.php
index 30202b77..0957b0a9 100644
--- a/agent/modals/account/account_edit.php
+++ b/agent/modals/account/account_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_financial', 2);
+
 $account_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM accounts WHERE account_id = $account_id LIMIT 1");
diff --git a/agent/modals/asset/asset_bulk_assign_contact.php b/agent/modals/asset/asset_bulk_assign_contact.php
index 3e1d634b..b7d59e3c 100644
--- a/agent/modals/asset/asset_bulk_assign_contact.php
+++ b/agent/modals/asset/asset_bulk_assign_contact.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $client_id = intval($_GET['client_id']);
 
 enforceClientAccess();
diff --git a/agent/modals/asset/asset_bulk_assign_location.php b/agent/modals/asset/asset_bulk_assign_location.php
index 6714a4ff..37a13e6e 100644
--- a/agent/modals/asset/asset_bulk_assign_location.php
+++ b/agent/modals/asset/asset_bulk_assign_location.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $client_id = intval($_GET['client_id']);
 
 enforceClientAccess();
diff --git a/agent/modals/client/client_edit.php b/agent/modals/client/client_edit.php
index 4a3e2e7c..0cec4221 100644
--- a/agent/modals/client/client_edit.php
+++ b/agent/modals/client/client_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_client', 2);
+
 $client_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM clients WHERE client_id = $client_id $access_permission_query LIMIT 1");
diff --git a/agent/modals/contact/contact_bulk_assign_location.php b/agent/modals/contact/contact_bulk_assign_location.php
index b1da34de..4b52de6c 100644
--- a/agent/modals/contact/contact_bulk_assign_location.php
+++ b/agent/modals/contact/contact_bulk_assign_location.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_client', 2);
+
 $client_id = intval($_GET['client_id']);
 
 enforceClientAccess();
diff --git a/agent/modals/document/document_add_from_template.php b/agent/modals/document/document_add_from_template.php
index a49e0432..9804619a 100644
--- a/agent/modals/document/document_add_from_template.php
+++ b/agent/modals/document/document_add_from_template.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $client_id = intval($_GET['client_id'] ?? 0);
 
 enforceClientAccess();
diff --git a/agent/modals/document/document_bulk_move.php b/agent/modals/document/document_bulk_move.php
index ddf5fe84..c1127ba5 100644
--- a/agent/modals/document/document_bulk_move.php
+++ b/agent/modals/document/document_bulk_move.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $client_id = intval($_GET['client_id']);
 $selected_ids = array_map('intval', $_GET['selected_ids'] ?? []);
 
diff --git a/agent/modals/document/document_move.php b/agent/modals/document/document_move.php
index 3171a044..a44e5668 100644
--- a/agent/modals/document/document_move.php
+++ b/agent/modals/document/document_move.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $document_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM documents WHERE document_id = $document_id LIMIT 1");
diff --git a/agent/modals/document/document_rename.php b/agent/modals/document/document_rename.php
index 2fa66886..9c3ceb7f 100644
--- a/agent/modals/document/document_rename.php
+++ b/agent/modals/document/document_rename.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $document_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM documents WHERE document_id = $document_id LIMIT 1");
diff --git a/agent/modals/document/document_version_view.php b/agent/modals/document/document_version_view.php
index d935ca20..1d6f74b5 100644
--- a/agent/modals/document/document_version_view.php
+++ b/agent/modals/document/document_version_view.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support');
+
 // Initialize the HTML Purifier to prevent XSS
 require_once "../../../libs/htmlpurifier/HTMLPurifier.standalone.php";
 
diff --git a/agent/modals/document/document_view.php b/agent/modals/document/document_view.php
index 95d408eb..12bd3d1d 100644
--- a/agent/modals/document/document_view.php
+++ b/agent/modals/document/document_view.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support');
+
 // Initialize the HTML Purifier to prevent XSS
 require_once "../../../libs/htmlpurifier/HTMLPurifier.standalone.php";
 
diff --git a/agent/modals/expense/expense_edit.php b/agent/modals/expense/expense_edit.php
index 9fd3044a..b10d9b69 100644
--- a/agent/modals/expense/expense_edit.php
+++ b/agent/modals/expense/expense_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_financial', 2);
+
 $expense_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM expenses
diff --git a/agent/modals/file/file_move.php b/agent/modals/file/file_move.php
index 9ad43155..fbaa84fa 100644
--- a/agent/modals/file/file_move.php
+++ b/agent/modals/file/file_move.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $file_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM files WHERE file_id = $file_id LIMIT 1");
diff --git a/agent/modals/file/file_rename.php b/agent/modals/file/file_rename.php
index 83303d17..5432acb2 100644
--- a/agent/modals/file/file_rename.php
+++ b/agent/modals/file/file_rename.php
@@ -1,6 +1,8 @@
 <?php
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $file_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM files WHERE file_id = $file_id LIMIT 1");
diff --git a/agent/modals/folder/folder_rename.php b/agent/modals/folder/folder_rename.php
index 2cb6fb17..79f1fa64 100644
--- a/agent/modals/folder/folder_rename.php
+++ b/agent/modals/folder/folder_rename.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $folder_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM folders WHERE folder_id = $folder_id LIMIT 1");
diff --git a/agent/modals/invoice/invoice_copy.php b/agent/modals/invoice/invoice_copy.php
index e58ef876..d0f57f2c 100644
--- a/agent/modals/invoice/invoice_copy.php
+++ b/agent/modals/invoice/invoice_copy.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_sales', 2);
+
 $invoice_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM invoices LEFT JOIN clients ON invoice_client_id = client_id WHERE invoice_id = $invoice_id LIMIT 1");
diff --git a/agent/modals/invoice/invoice_edit.php b/agent/modals/invoice/invoice_edit.php
index 721b97f6..b0f965bb 100644
--- a/agent/modals/invoice/invoice_edit.php
+++ b/agent/modals/invoice/invoice_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_sales', 2);
+
 $invoice_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM invoices LEFT JOIN clients ON invoice_client_id = client_id WHERE invoice_id = $invoice_id LIMIT 1");
diff --git a/agent/modals/invoice/invoice_item_edit.php b/agent/modals/invoice/invoice_item_edit.php
index 8a808242..0955cf68 100644
--- a/agent/modals/invoice/invoice_item_edit.php
+++ b/agent/modals/invoice/invoice_item_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_sales', 2);
+
 $item_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM invoice_items LEFT JOIN invoices ON invoice_id = item_invoice_id WHERE item_id = $item_id LIMIT 1");
diff --git a/agent/modals/location/location_edit.php b/agent/modals/location/location_edit.php
index 9c82e2d8..79730ab5 100644
--- a/agent/modals/location/location_edit.php
+++ b/agent/modals/location/location_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_client', 2);
+
 $location_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM locations WHERE location_id = $location_id LIMIT 1");
diff --git a/agent/modals/payment/invoice_apply_credit.php b/agent/modals/payment/invoice_apply_credit.php
index efc8cae2..2901f206 100644
--- a/agent/modals/payment/invoice_apply_credit.php
+++ b/agent/modals/payment/invoice_apply_credit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_sales', 2);
+
 $invoice_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT invoice_prefix, invoice_number, invoice_client_id
diff --git a/agent/modals/payment/payment_edit.php b/agent/modals/payment/payment_edit.php
index b85b2c21..a7161f91 100644
--- a/agent/modals/payment/payment_edit.php
+++ b/agent/modals/payment/payment_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_sales', 2);
+
 $payment_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM payments LEFT JOIN invoices ON invoice_id = payment_invoice_id WHERE payment_id = $payment_id LIMIT 1");
diff --git a/agent/modals/product/product_edit.php b/agent/modals/product/product_edit.php
index 283471fe..2a456a2d 100644
--- a/agent/modals/product/product_edit.php
+++ b/agent/modals/product/product_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_sales', 2);
+
 $product_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM products WHERE product_id = $product_id LIMIT 1");
diff --git a/agent/modals/project/project_edit.php b/agent/modals/project/project_edit.php
index c6552f10..376960d0 100644
--- a/agent/modals/project/project_edit.php
+++ b/agent/modals/project/project_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $project_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM projects WHERE project_id = $project_id LIMIT 1");
diff --git a/agent/modals/project/project_link_closed_ticket.php b/agent/modals/project/project_link_closed_ticket.php
index 1cc5500e..4a4f241d 100644
--- a/agent/modals/project/project_link_closed_ticket.php
+++ b/agent/modals/project/project_link_closed_ticket.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $project_id = intval($_GET['project_id']);
 $client_id = intval($_GET['client_id'] ?? 0);
 
diff --git a/agent/modals/project/project_link_ticket.php b/agent/modals/project/project_link_ticket.php
index 2ed52c7e..0c40ddc3 100644
--- a/agent/modals/project/project_link_ticket.php
+++ b/agent/modals/project/project_link_ticket.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $project_id = intval($_GET['project_id']);
 $client_id = intval($_GET['client_id'] ?? 0);
 
diff --git a/agent/modals/quote/quote_copy.php b/agent/modals/quote/quote_copy.php
index 402804ac..50239766 100644
--- a/agent/modals/quote/quote_copy.php
+++ b/agent/modals/quote/quote_copy.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_sales', 2);
+
 $quote_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM quotes LEFT JOIN clients ON quote_client_id = client_id WHERE quote_id = $quote_id LIMIT 1");
diff --git a/agent/modals/quote/quote_item_edit.php b/agent/modals/quote/quote_item_edit.php
index 1fda7c30..9c43e351 100644
--- a/agent/modals/quote/quote_item_edit.php
+++ b/agent/modals/quote/quote_item_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_sales', 2);
+
 $item_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM quote_items LEFT JOIN quotes ON quote_id = item_quote_id WHERE item_id = $item_id LIMIT 1");
diff --git a/agent/modals/quote/quote_to_invoice.php b/agent/modals/quote/quote_to_invoice.php
index 6ff1aa34..21d6a141 100644
--- a/agent/modals/quote/quote_to_invoice.php
+++ b/agent/modals/quote/quote_to_invoice.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_sales', 2);
+
 $quote_id = intval($_GET['quote_id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM quotes WHERE quote_id = $quote_id LIMIT 1");
diff --git a/agent/modals/recurring_expense/recurring_expense_edit.php b/agent/modals/recurring_expense/recurring_expense_edit.php
index c7836e42..5e2616a7 100644
--- a/agent/modals/recurring_expense/recurring_expense_edit.php
+++ b/agent/modals/recurring_expense/recurring_expense_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_financial', 2);
+
 $recurring_expense_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM recurring_expenses WHERE recurring_expense_id = $recurring_expense_id LIMIT 1");
diff --git a/agent/modals/recurring_invoice/recurring_invoice_edit.php b/agent/modals/recurring_invoice/recurring_invoice_edit.php
index 2f90730f..3cb57e05 100644
--- a/agent/modals/recurring_invoice/recurring_invoice_edit.php
+++ b/agent/modals/recurring_invoice/recurring_invoice_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_sales', 2);
+
 $recurring_invoice_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM recurring_invoices WHERE recurring_invoice_id = $recurring_invoice_id LIMIT 1");
diff --git a/agent/modals/recurring_invoice/recurring_invoice_item_edit.php b/agent/modals/recurring_invoice/recurring_invoice_item_edit.php
index 53554af8..9f676175 100644
--- a/agent/modals/recurring_invoice/recurring_invoice_item_edit.php
+++ b/agent/modals/recurring_invoice/recurring_invoice_item_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_sales', 2);
+
 $item_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM recurring_invoice_items LEFT JOIN recurring_invoices ON recurring_invoice_id = item_recurring_invoice_id WHERE item_id = $item_id LIMIT 1");
diff --git a/agent/modals/recurring_ticket/recurring_ticket_edit.php b/agent/modals/recurring_ticket/recurring_ticket_edit.php
index 4f0d35dd..cb7a0d1a 100644
--- a/agent/modals/recurring_ticket/recurring_ticket_edit.php
+++ b/agent/modals/recurring_ticket/recurring_ticket_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $recurring_ticket_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM recurring_tickets WHERE recurring_ticket_id = $recurring_ticket_id LIMIT 1");
diff --git a/agent/modals/service/service.php b/agent/modals/service/service.php
index 2e6eb23e..836ccdb3 100644
--- a/agent/modals/service/service.php
+++ b/agent/modals/service/service.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support');
+
 $service_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM services WHERE service_id = $service_id LIMIT 1");
diff --git a/agent/modals/service/service_edit.php b/agent/modals/service/service_edit.php
index 875854d8..ad5a1240 100644
--- a/agent/modals/service/service_edit.php
+++ b/agent/modals/service/service_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $service_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM services WHERE service_id = $service_id LIMIT 1");
diff --git a/agent/modals/ticket/ticket_billable.php b/agent/modals/ticket/ticket_billable.php
index 1ae4126f..c3bd2b11 100644
--- a/agent/modals/ticket/ticket_billable.php
+++ b/agent/modals/ticket/ticket_billable.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_support', 2);
+
 $ticket_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM tickets WHERE ticket_id = $ticket_id LIMIT 1");
diff --git a/agent/modals/trip/trip_copy.php b/agent/modals/trip/trip_copy.php
index 9c7069f7..4c9b1f4c 100644
--- a/agent/modals/trip/trip_copy.php
+++ b/agent/modals/trip/trip_copy.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_financial', 2);
+
 $trip_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM trips WHERE trip_id = $trip_id LIMIT 1");
diff --git a/agent/modals/trip/trip_edit.php b/agent/modals/trip/trip_edit.php
index 9b912187..4290f99e 100644
--- a/agent/modals/trip/trip_edit.php
+++ b/agent/modals/trip/trip_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_financial', 2);
+
 $trip_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM trips WHERE trip_id = $trip_id LIMIT 1");
diff --git a/agent/modals/vendor/vendor.php b/agent/modals/vendor/vendor.php
index 03a59c41..95945ac7 100644
--- a/agent/modals/vendor/vendor.php
+++ b/agent/modals/vendor/vendor.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_client');
+
 $vendor_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM vendors WHERE vendor_id = $vendor_id LIMIT 1");
diff --git a/agent/modals/vendor/vendor_edit.php b/agent/modals/vendor/vendor_edit.php
index 5fa7c453..cc46f42e 100644
--- a/agent/modals/vendor/vendor_edit.php
+++ b/agent/modals/vendor/vendor_edit.php
@@ -2,6 +2,8 @@
 
 require_once '../../../includes/modal_header.php';
 
+enforceUserPermission('module_client', 2);
+
 $vendor_id = intval($_GET['id']);
 
 $sql = mysqli_query($mysqli, "SELECT * FROM vendors WHERE vendor_id = $vendor_id LIMIT 1");