use roles guards

2026-05-22 08:45:35 +07:00
parent b76dc679af
commit e36d304521
19 changed files with 133 additions and 66 deletions
@@ -4,7 +4,7 @@ require '../../../assets/utils/db_auth.php';
 require '../../../assets/utils/classes/CompanySettingManager.php';

 if (($data['action'] ?? '') === 'update') {
-    require_role($user_role, ['owner', 'admin']);
+    if ($user_role !== 'owner') { http_response_code(403); exit(json_encode(['success' => 0, 'message' => 'Only the owner can modify this setting.'])); }
 }

 $csm = new CompanySettingManager($pdo1, $company_id, $pdo2);