Permissions checks for timetracking.

git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@5184 f5dc347c-c33d-0410-90a0-b07cc1902cb9
mantisbt · Apr 21, 2008 · bb78e8a · bb78e8a
1 parent aa2d221
commit bb78e8a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/billing_page.php b/billing_page.php
@@ -25,6 +25,7 @@
 	require_once( 'core.php' );
 
 	$t_core_path = config_get( 'core_path' );
+	access_ensure_global_level( config_get( 'time_tracking_reporting_threshold' ) );
 ?>
 <?php
 /*

diff --git a/core/html_api.php b/core/html_api.php
@@ -656,7 +656,7 @@ function print_menu() {
 				# Add custom options
 				$t_custom_options = prepare_custom_menu_options( 'main_menu_custom_options' );
 				$t_menu_options = array_merge( $t_menu_options, $t_custom_options );
-				if ( config_get('time_tracking_enabled') && config_get('time_tracking_with_billing') )
+				if ( config_get('time_tracking_enabled') && config_get('time_tracking_with_billing') && access_has_global_level( config_get( 'time_tracking_reporting_threshold' ) ) )
 					$t_menu_options[] = '<a href="' . helper_mantis_url( 'billing_page.php">' ) . lang_get( 'time_tracking_billing_link' ) . '</a>';
 
 				# Logout (no if anonymously logged in)