nok/wms-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

use roles guards

Browse Source
This commit is contained in:
Thanakorn S
2026-05-22 08:45:35 +07:00
parent b76dc679af
commit e36d304521
19 changed files with 133 additions and 66 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/setting/api/engine/company_setting.php
+1 -1
View File
@@ -4,7 +4,7 @@ require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/CompanySettingManager.php';
if (($data['action'] ?? '') === 'update') {
require_role($user_role, ['owner', 'admin']);
if ($user_role !== 'owner') { http_response_code(403); exit(json_encode(['success' => 0, 'message' => 'Only the owner can modify this setting.'])); }
}
$csm = new CompanySettingManager($pdo1, $company_id, $pdo2);
app/setting/api/engine/manage_company.php
+1 -1
View File
@@ -3,7 +3,7 @@
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/CompanyProfileManager.php';
require_role($user_role, ['owner', 'admin']);
if ($user_role !== 'owner') { http_response_code(403); exit(json_encode(['success' => 0, 'message' => 'Only the owner can modify this setting.'])); }
try {
$companyProfile = new CompanyProfileManager($pdo1, $company_id);
app/setting/api/engine/manage_smtp.php
+1 -1
View File
@@ -3,7 +3,7 @@
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/SmtpManager.php';
require_role($user_role, ['owner', 'admin']);
if ($user_role !== 'owner') { http_response_code(403); exit(json_encode(['success' => 0, 'message' => 'Only the owner can modify this setting.'])); }
try {
$smtp = new SmtpManager($pdo1, $company_id, $method, $pinkey, $iv);
app/setting/api/engine/manage_users.php
+1 -1
View File
@@ -3,7 +3,7 @@
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/UserManager.php';
require_role($user_role, ['owner', 'admin']);
if ($user_role !== 'owner') { http_response_code(403); exit(json_encode(['success' => 0, 'message' => 'Only the owner can modify this setting.'])); }
$action = $data['action'] ?? '';
$um = new UserManager($pdo1, $company_id, $user_id);
app/setting/api/engine/test_smtp.php
+1 -1
View File
@@ -3,7 +3,7 @@
require '../../../assets/utils/db_auth.php';
require '../../../assets/utils/classes/SmtpManager.php';
require_role($user_role, ['owner', 'admin']);
if ($user_role !== 'owner') { http_response_code(403); exit(json_encode(['success' => 0, 'message' => 'Only the owner can modify this setting.'])); }
try {
$smtp = new SmtpManager($pdo1, $company_id, $method, $pinkey, $iv);