diff --git a/admin_user_add_modal.php b/admin_user_add_modal.php index 5c035c3c..dc631f7b 100644 --- a/admin_user_add_modal.php +++ b/admin_user_add_modal.php @@ -62,6 +62,29 @@ +
+ +
+
+ +
+ +
+ Leave Blank for Full access to all clients, no affect on users with the admin role. +
+
diff --git a/inc_all_client.php b/inc_all_client.php index 3ecda6fc..21338abd 100644 --- a/inc_all_client.php +++ b/inc_all_client.php @@ -12,7 +12,7 @@ if (isset($_GET['client_id'])) { // Check to see if the logged in user has permission to access this client (Admins have access to all no matter what perms are set) if(!in_array($client_id, $client_access_array) AND !empty($client_access_string) AND $session_user_role < 3) { // Logging - mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Client', log_action = 'Access', log_description = '$session_name was denyed permission from accessing client', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id, log_entity_id = $client_id"); + mysqli_query($mysqli, "INSERT INTO logs SET log_type = 'Client', log_action = 'Access', log_description = '$session_name was denied permission from accessing client', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_client_id = $client_id, log_user_id = $session_user_id, log_entity_id = $client_id"); $_SESSION['alert_type'] = "error"; $_SESSION['alert_message'] = "Access Denied - You do not have permission to access that client!"; diff --git a/post/user.php b/post/user.php index c5eecb53..c5de8549 100644 --- a/post/user.php +++ b/post/user.php @@ -18,6 +18,14 @@ if (isset($_POST['add_user'])) { $user_id = mysqli_insert_id($mysqli); + // Add Client Access Permissions if set + if (!empty($_POST['clients'])) { + foreach($_POST['clients'] as $client_id) { + $client_id = intval($client_id); + mysqli_query($mysqli,"INSERT INTO user_permissions SET user_id = $user_id, client_id = $client_id"); + } + } + if (!file_exists("uploads/users/$user_id/")) { mkdir("uploads/users/$user_id"); }