* Code for program project product priv.

2020-07-01 15:06:21 +08:00
parent 92e05060ab
commit 8e159a56e5
5 changed files with 24 additions and 3 deletions
@@ -258,7 +258,7 @@ class projectModel extends model
        if(!isset($projects[$this->session->project]))
        {
            $this->session->set('project', key($projects));
-            //if($projectID) $this->accessDenied();
+            if($projectID && strpos(",{$this->app->user->view->projects},", ",{$this->session->project},") === false) $this->accessDenied();
        }
        return $this->session->project;
    }