Thanakorn
8705be0d1b
- users, SMTP and batch-lock endpoints are owner/admin only - engines answer 400/403/404/409/500 instead of 200 with an error body; database errors no longer leak to the client
16 lines
529 B
PHP
16 lines
529 B
PHP
<?php
|
|
require_once __DIR__ . '/../../../session.php';
|
|
require_once '../../../assets/utils/db_auth.php';
|
|
require_once '../../../assets/utils/classes/UserManager.php';
|
|
|
|
// Admin data: owners and admins only; staff and viewers never see it.
|
|
require_role($user_role, ['owner', 'admin']);
|
|
|
|
$keyword = trim($data['keyword'] ?? '');
|
|
$um = new UserManager($pdo1, $company_id, $user_id);
|
|
|
|
$answer['success'] = 1;
|
|
$answer['result'] = $um->searchUsers($keyword);
|
|
exit(json_encode($answer));
|
|
?>
|