Skip to content

Commit

Permalink
Browse files Browse the repository at this point in the history
Time tracking: project-specific access to billing page
The access check against $g_time_tracking_reporting_threshold is now
made with access_ensure_project_level() instead of
access_ensure_global_level()

Fixes #19588
  • Loading branch information
dregad committed Apr 13, 2015
1 parent cbfe083 commit 6d4378b
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 2 deletions.
2 changes: 1 addition & 1 deletion billing_page.php
Expand Up @@ -41,7 +41,7 @@
trigger_error( ERROR_ACCESS_DENIED, ERROR );
}

access_ensure_global_level( config_get( 'time_tracking_reporting_threshold' ) );
access_ensure_project_level( config_get( 'time_tracking_reporting_threshold' ) );

html_page_top( lang_get( 'time_tracking_billing_link' ) );
?>
Expand Down
2 changes: 1 addition & 1 deletion core/html_api.php
Expand Up @@ -930,7 +930,7 @@ function print_menu() {
$t_menu_options = array_merge( $t_menu_options, $t_custom_options );

# Time Tracking / Billing
if( config_get( 'time_tracking_enabled' ) && access_has_global_level( config_get( 'time_tracking_reporting_threshold' ) ) ) {
if( config_get( 'time_tracking_enabled' ) && access_has_project_level( config_get( 'time_tracking_reporting_threshold' ) ) ) {
$t_menu_options[] = '<a href="' . helper_mantis_url( 'billing_page.php">' ) . lang_get( 'time_tracking_billing_link' ) . '</a>';
}

Expand Down

0 comments on commit 6d4378b

Please sign in to comment.