diff --git a/database.mwb b/database.mwb index 09757ab..1084c42 100644 Binary files a/database.mwb and b/database.mwb differ diff --git a/database_upgrade/1.0.1_1.1.sql b/database_upgrade/1.0.1_1.1.sql index 43a8ffa..05810b3 100644 --- a/database_upgrade/1.0.1_1.1.sql +++ b/database_upgrade/1.0.1_1.1.sql @@ -45,3 +45,6 @@ CREATE TABLE IF NOT EXISTS `job_tracking` ( ON UPDATE NO ACTION) ENGINE = InnoDB DEFAULT CHARACTER SET = utf8; + +ALTER TABLE `report_access_codes` +CHANGE COLUMN `id` `id` INT(11) NOT NULL AUTO_INCREMENT; diff --git a/lib/reports.php b/lib/reports.php index 50dc7b6..61c58d8 100644 --- a/lib/reports.php +++ b/lib/reports.php @@ -43,15 +43,17 @@ if (isset($VARS['code']) && LOADED) { $requester = $_SESSION['uid']; } -if (account_has_permission($_SESSION['username'], "ADMIN")) { +$requesterusername = getUserByID($requester)['uid']; + +if (account_has_permission($requesterusername, "ADMIN")) { $allowed_users = true; } else { - if (account_has_permission($_SESSION['username'], "QWIKCLOCK_MANAGE")) { + if (account_has_permission($requesterusername, "QWIKCLOCK_MANAGE")) { $allowed_users = getManagedUIDs($requester); } - if (account_has_permission($_SESSION['username'], "QWIKCLOCK_EDITSELF")) { - $allowed_users[] = $_SESSION['uid']; + if (account_has_permission($requesterusername, "QWIKCLOCK_EDITSELF")) { + $allowed_users[] = $requester; } }