AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-07-26 18:27:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix Client Permission overides to include deny allow list in projects prohect and edit ticket

Browse Source
This commit is contained in:
johnnyq
2026-07-25 13:28:47 -04:00
parent 3756561458
commit 8d46e2a7db
3 changed files with 16 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
agent/modals/ticket/ticket_edit.php
View File

@@ -7,7 +7,10 @@ enforceUserPermission('module_support', 2);
// Ticket client access overide - This is the only way to show tickets without a client to agents with restricted client access
$access_permission_query_overide = '';
if ($client_access_string) {
$access_permission_query_overide = "AND ticket_client_id IN (0,$client_access_string)";
$access_permission_query_overide .= " AND ticket_client_id IN (0,$client_access_string)";
}
if ($client_deny_string) {
$access_permission_query_overide .= " AND ticket_client_id NOT IN ($client_deny_string)";
}
$ticket_id = intval($_GET['id']);

7
agent/project.php
View File

@@ -21,8 +21,11 @@ if (isset($_GET['client_id'])) {
enforceUserPermission('module_support');
$project_permission_snippet = '';
if (!empty($client_access_string)) {
$project_permission_snippet = "AND project_client_id IN ($client_access_string) OR project_client_id = 0";
if ($client_access_string) {
$project_permission_snippet .= " AND (project_client_id IN ($client_access_string) OR project_client_id = 0)";
}
if ($client_deny_string) {
$project_permission_snippet .= " AND project_client_id NOT IN ($client_deny_string)";
}
if (isset($_GET['project_id'])) {

9
agent/projects.php
View File

@@ -17,9 +17,14 @@ if (isset($_GET['client_id'])) {
// Perms & Project client access snippet
enforceUserPermission('module_support');
$project_permission_snippet = '';
if (!empty($client_access_string)) {
$project_permission_snippet = "AND project_client_id IN ($client_access_string) OR project_client_id = 0";
if ($client_access_string) {
$project_permission_snippet .= " AND (project_client_id IN ($client_access_string) OR project_client_id = 0)";
}
if ($client_deny_string) {
$project_permission_snippet .= " AND project_client_id NOT IN ($client_deny_string)";
}
// Project Completed Status Query