From 80ffe8f35266060c04282ee748cd384859cfd8cd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E7=8E=8B=E6=80=A1=E6=A0=8B?= <wangyidong@cnezsoft.com>
Date: Tue, 1 Mar 2022 11:01:39 +0800
Subject: [PATCH]  * adjust for check priv.

---
 extension/lite/user/ext/view/featurebar.lite.html.hook.php | 2 +-
 module/project/view/team.html.php                          | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/extension/lite/user/ext/view/featurebar.lite.html.hook.php b/extension/lite/user/ext/view/featurebar.lite.html.hook.php
index bf6b7bc5e2..8c0ed11f8b 100644
--- a/extension/lite/user/ext/view/featurebar.lite.html.hook.php
+++ b/extension/lite/user/ext/view/featurebar.lite.html.hook.php
@@ -1,6 +1,6 @@
 <script>
 $('#mainMenu .btn-toolbar > a[href*="bug"], a[href*="testtask"], a[href*="testcase"], a[href*="issue"], a[href*="risk"], a[href*="requirement"]').remove();
-<?php if($this->config->edition != 'open'):?>
+<?php if($this->config->edition != 'open' and common::hasPriv('user', 'todocalendar')):?>
 $('#mainMenu .btn-toolbar > a:first').attr('href', createLink('user', 'todocalendar', 'userID=<?php echo $user->id?>'));
 <?php endif;?>
 </script>
diff --git a/module/project/view/team.html.php b/module/project/view/team.html.php
index 4e12136abe..6576b85d93 100644
--- a/module/project/view/team.html.php
+++ b/module/project/view/team.html.php
@@ -67,7 +67,7 @@
         <tr>
           <td>
           <?php
-          if(common::hasPriv('user', 'view'))
+          if(common::hasPriv('user', 'view') and common::hasPriv('my', 'team'))
           {
               $link = isset($deptUsers[$member->userID]) ? $this->createLink('user', 'view', "userID={$member->userID}") : "javascript: alert(noAccess);";
               echo html::a($link, $member->realname, '', 'data-app="system"');