mirrors/easyappointments
1
0
Fork 1
mirror of https://github.com/alextselegidis/easyappointments.git synced 2024-11-24 17:03:27 +03:00
Code Issues Projects Releases Packages Wiki Activity

Redirect to the login page if the user is not logged in or display the no permissions message when the permissions are insufficient.

Browse source
This commit is contained in:
Alex Tselegidis 2022-01-17 18:24:02 +01:00
parent 3c0f925596
commit 8d93f283f8
14 changed files with 145 additions and 41 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
application/controllers/About.php
View file

@ -47,12 +47,19 @@ class About extends EA_Controller {
{
session(['dest_url' => site_url('about')]);
$user_id = session('user_id');
if (cannot('view', PRIV_USER_SETTINGS))
{
abort(403, 'Forbidden');
}
if ($user_id)
{
abort(403, 'Forbidden');
}
$user_id = session('user_id');
redirect('login');
return;
}
$role_slug = session('role_slug');

13
application/controllers/Account.php
View file

@ -47,12 +47,19 @@ class Account extends EA_Controller {
{
session(['dest_url' => site_url('account')]);
$user_id = session('user_id');
if (cannot('view', PRIV_USER_SETTINGS))
{
abort(403, 'Forbidden');
}
if ($user_id)
{
abort(403, 'Forbidden');
}
$user_id = session('user_id');
redirect('login');
return;
}
$account = $this->users_model->find($user_id);

13
application/controllers/Admins.php
View file

@ -43,12 +43,19 @@ class Admins extends EA_Controller {
{
session(['dest_url' => site_url('admins')]);
$user_id = session('user_id');
if (cannot('view', PRIV_USERS))
{
abort(403, 'Forbidden');
}
if ($user_id)
{
abort(403, 'Forbidden');
}
$user_id = session('user_id');
redirect('login');
return;
}
$role_slug = session('role_slug');

17
application/controllers/Booking_settings.php
View file

@ -47,13 +47,20 @@ class Booking_settings extends EA_Controller {
{
session(['dest_url' => site_url('booking_settings')]);
if (cannot('view', PRIV_SYSTEM_SETTINGS))
{
abort(403, 'Forbidden');
}
$user_id = session('user_id');
if (cannot('view', PRIV_SYSTEM_SETTINGS))
{
if ($user_id)
{
abort(403, 'Forbidden');
}
redirect('login');
return;
}
$role_slug = session('role_slug');
script_vars([

17
application/controllers/Business_settings.php
View file

@ -47,13 +47,20 @@ class Business_settings extends EA_Controller {
{
session(['dest_url' => site_url('business_settings')]);
if (cannot('view', PRIV_SYSTEM_SETTINGS))
{
abort(403, 'Forbidden');
}
$user_id = session('user_id');
if (cannot('view', PRIV_SYSTEM_SETTINGS))
{
if ($user_id)
{
abort(403, 'Forbidden');
}
redirect('login');
return;
}
$role_slug = session('role_slug');
script_vars([

11
application/controllers/Calendar.php
View file

@ -53,13 +53,20 @@ class Calendar extends EA_Controller {
{
session(['dest_url' => site_url('backend/index' . (! empty($appointment_hash) ? '/' . $appointment_hash : ''))]);
$user_id = session('user_id');
if (cannot('view', PRIV_APPOINTMENTS))
{
if ($user_id)
{
abort(403, 'Forbidden');
}
redirect('login');
return;
}
$user_id = session('user_id');
$role_slug = session('role_slug');
$user = $this->users_model->find($user_id);

13
application/controllers/Categories.php
View file

@ -43,12 +43,19 @@ class Categories extends EA_Controller {
{
session(['dest_url' => site_url('categories')]);
$user_id = session('user_id');
if (cannot('view', PRIV_SERVICES))
{
abort(403, 'Forbidden');
}
if ($user_id)
{
abort(403, 'Forbidden');
}
$user_id = session('user_id');
redirect('login');
return;
}
$role_slug = session('role_slug');

12
application/controllers/Customers.php
View file

@ -44,12 +44,20 @@ class Customers extends EA_Controller {
{
session(['dest_url' => site_url('customers')]);
$user_id = session('user_id');
if (cannot('view', PRIV_USERS))
{
abort(403, 'Forbidden');
if ($user_id)
{
abort(403, 'Forbidden');
}
redirect('login');
return;
}
$user_id = session('user_id');
$role_slug = session('role_slug');
$date_format = setting('date_format');

15
application/controllers/General_settings.php
View file

@ -38,12 +38,21 @@ class General_settings extends EA_Controller {
{
session(['dest_url' => site_url('general_settings')]);
$user_id = session('user_id');
if (cannot('view', PRIV_SYSTEM_SETTINGS))
{
abort(403, 'Forbidden');
}
if ($user_id)
{
abort(403, 'Forbidden');
}
$user_id = session('user_id');
redirect('login');
return;
}
$role_slug = session('role_slug');
script_vars([
'user_id' => $user_id,

13
application/controllers/Legal_settings.php
View file

@ -38,12 +38,19 @@ class Legal_settings extends EA_Controller {
{
session(['dest_url' => site_url('legal_settings')]);
$user_id = session('user_id');
if (cannot('view', PRIV_SYSTEM_SETTINGS))
{
abort(403, 'Forbidden');
}
if ($user_id)
{
abort(403, 'Forbidden');
}
$user_id = session('user_id');
redirect('login');
return;
}
$role_slug = session('role_slug');

12
application/controllers/Providers.php
View file

@ -44,12 +44,20 @@ class Providers extends EA_Controller {
{
session(['dest_url' => site_url('providers')]);
$user_id = session('user_id');
if (cannot('view', PRIV_USERS))
{
abort(403, 'Forbidden');
if ($user_id)
{
abort(403, 'Forbidden');
}
redirect('login');
return;
}
$user_id = session('user_id');
$role_slug = session('role_slug');

13
application/controllers/Secretaries.php
View file

@ -44,12 +44,19 @@ class Secretaries extends EA_Controller {
{
session(['dest_url' => site_url('secretaries')]);
$user_id = session('user_id');
if (cannot('view', PRIV_USERS))
{
abort(403, 'Forbidden');
}
if ($user_id)
{
abort(403, 'Forbidden');
}
$user_id = session('user_id');
redirect('login');
return;
}
$role_slug = session('role_slug');

13
application/controllers/Services.php
View file

@ -43,12 +43,19 @@ class Services extends EA_Controller {
{
session(['dest_url' => site_url('services')]);
$user_id = session('user_id');
if (cannot('view', PRIV_SERVICES))
{
abort(403, 'Forbidden');
}
if ($user_id)
{
abort(403, 'Forbidden');
}
$user_id = session('user_id');
redirect('login');
return;
}
$role_slug = session('role_slug');

11
application/controllers/Update.php
View file

@ -48,9 +48,18 @@ class Update extends EA_Controller {
{
try
{
$user_id = session('user_id');
if (cannot('edit', PRIV_SYSTEM_SETTINGS))
{
abort(403, 'Forbidden');
if ($user_id)
{
abort(403, 'Forbidden');
}
redirect('login');
return;
}
$this->instance->migrate();