roles guard + docs + logo

2026-05-06 16:37:20 +07:00
parent 797dee5d17
commit 2eb6a1a315
60 changed files with 496 additions and 105 deletions
@@ -1,6 +1,10 @@
 <?php 
  session_start();
  require '../config.php';
+  if (!in_array($_SESSION['login_role'] ?? 'viewer', ['owner', 'admin', 'staff'], true)) {
+    http_response_code(403);
+    exit('Access denied.');
+  }
  require '../include_header.php';
 ?>

@@ -135,7 +139,7 @@

                <!-- Submit -->
                <div class="mb-3 col-lg-12">
-                  <button type="submit" class="btn btn-primary" onclick="manage_stock_transfer();">Transfer Stock</button>
+                  <button type="submit" class="btn btn-primary" data-min-role="staff" onclick="manage_stock_transfer();">Transfer Stock</button>
                  <button type="button" class="btn btn-success ms-2 d-none" id="approve_stock_btn" onclick="approve_current_stock();">Approve</button>
                </div>
              </form>