Module permissions modal enforcement sweep to match its post counterpart

2026-07-27 02:37:15 +00:00 · 2026-07-25 00:28:42 -04:00
parent 7a793cbbcc
commit 761b2a7af4
39 changed files with 78 additions and 0 deletions
--- a/agent/modals/payment/payment_edit.php
+++ b/agent/modals/payment/payment_edit.php
@@ -2,6 +2,8 @@

 require_once '../../../includes/modal_header.php';

+enforceUserPermission('module_sales', 2);
+
 $payment_id = intval($_GET['id']);

 $sql = mysqli_query($mysqli, "SELECT * FROM payments LEFT JOIN invoices ON invoice_id = payment_invoice_id WHERE payment_id = $payment_id LIMIT 1");