Fix #8843, 10050: Permissions checks for timetracking.

Signed-off-by: John Reese <jreese@leetcode.net>
mantisbt · Jan 14, 2009 · 1c20391 · 1c20391
1 parent dd91387
commit 1c20391
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/billing_page.php b/billing_page.php
@@ -25,6 +25,7 @@
 	require_once( 'core.php' );
 
 	$t_core_path = config_get( 'core_path' );
+	access_ensure_global_level( config_get( 'time_tracking_reporting_threshold' ) );
 ?>
 <?php
 /*

diff --git a/core/html_api.php b/core/html_api.php
@@ -590,7 +590,7 @@ function print_menu() {
 				# Add custom options
 				$t_custom_options = prepare_custom_menu_options( 'main_menu_custom_options' );
 				$t_menu_options = array_merge( $t_menu_options, $t_custom_options );
-				if ( config_get('time_tracking_enabled') && config_get('time_tracking_with_billing') )
+				if ( config_get('time_tracking_enabled') && config_get('time_tracking_with_billing') && access_has_global_level( config_get( 'time_tracking_reporting_threshold' ) ) )
 					$t_menu_options[] = '<a href="billing_page.php">' . lang_get( 'time_tracking_billing_link' ) . '</a>';
 
 				# Logout (no if anonymously logged in)