Limit menu items to permitted ones according to group

[misc/kostenrechnung] / lib / menu.php

diff --git a/lib/menu.php b/lib/menu.php
index 8bb5d60..e20b4d0 100644 (file)
--- a/lib/menu.php
+++ b/lib/menu.php
@@ -15,6 +15,8 @@ function menu()
 
   $sql = "SELECT fname,menutitle,name FROM sys_mask "
     . "JOIN sys_menu ON sys_mask.menu = sys_menu.id "
+    . "JOIN sys_group_mask ON sys_mask.id = sys_group_mask.mask "
+    . "WHERE sys_group_mask.gid = ".$_SESSION['sys']['group']." "
     . "ORDER BY sys_menu.priority,sys_menu.name,sys_mask.priority,sys_mask.menutitle";
   $sth = pg_query($sql);
 
@@ -28,7 +30,7 @@ function menu()
        $ret .= '<ul>';
        $menu = $row['name'];
       }
-      $ret .= sprintf('<li><a href="./?mask=%s">%s</a></li>', $row['mask'], $row['menutitle']);
+      $ret .= sprintf('<li><a href="./?mask=%s">%s</a></li>', $row['fname'], $row['menutitle']);
     }
     $ret .= '</ul>';
     $ret .= '</li>';