DataObjects/Mtrack_change.php
authorAlan Knowles <alan@roojs.com>
Mon, 18 Jan 2021 07:04:45 +0000 (15:04 +0800)
committerAlan Knowles <alan@roojs.com>
Mon, 18 Jan 2021 07:04:45 +0000 (15:04 +0800)
DataObjects/Mtrack_change.php

index 1f0eabc..bc4871a 100644 (file)
@@ -101,7 +101,7 @@ class Pman_MTrack_DataObjects_Mtrack_change extends DB_DataObject
             return;
         }
         
-        if (!$au && !$obj->checkPerm('S', $au)) {
+        if (!$au && (!$obj->checkPerm('S', $au) || !$obj->checkPerm('E', $au)) ) {
             $this->whereAdd('1=0');
             return;
         }