X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;f=includes%2Fcurrent_user.inc;h=99d314770b6f5952cd723d940ee2c19b24c02d9b;hb=967f3b0f52a7f6e4afedea35bf2303414a41022f;hp=94b7c2ffaa86f079c786071641004faf38a96b5c;hpb=c70823611ef71079c28542f4810cc50c183a8cd5;p=fa-stable.git diff --git a/includes/current_user.inc b/includes/current_user.inc index 94b7c2ff..99d31477 100644 --- a/includes/current_user.inc +++ b/includes/current_user.inc @@ -25,7 +25,7 @@ class current_user var $timeout; var $last_act; var $role_set = false; - + var $old_db; var $logged; var $ui_mode = 0; @@ -54,7 +54,7 @@ class current_user function login($company, $loginname, $password) { - global $security_areas, $security_groups, $security_headings; + global $security_areas, $security_groups, $security_headings, $path_to_root; $this->set_company($company); $this->logged = false; @@ -73,6 +73,7 @@ class current_user if (!isset($security_groups) || !isset($security_headings)) { echo "


"; echo _('Before software upgrade you have to include old $security_groups and $security_headings arrays from old config.php file to the new one.'); + echo '
'.""._("Back").""; echo "


"; exit; } @@ -126,7 +127,6 @@ class current_user function can_access($page_level) { global $security_groups, $security_areas; - if (isset($security_groups)) { return $this->company == 0 && in_array(20, $security_groups[$this->access]); @@ -134,7 +134,10 @@ class current_user if ($page_level === 'SA_OPEN') return true; - $code = @$security_areas[$page_level][0]; + if ($page_level === 'SA_DENIED' || $page_level === '') + return false; + + $code = $security_areas[$page_level][0]; // only first registered company has site admin privileges return $code && in_array($code, $this->role_set) @@ -146,11 +149,11 @@ class current_user return $this->can_access($page_level); } - function get_db_connection() + function get_db_connection($id=-1) { global $db_connections; - $connection = $db_connections[$this->company]; + $connection = $db_connections[$id == -1 ? $this->company : $id]; //print_r($connection);