Update: Allow superadmin role to manage trips alongside admin

This commit is contained in:
twotalesanimation
2025-12-04 17:06:34 +02:00
parent 674af23994
commit 1767337d99
4 changed files with 4 additions and 4 deletions

View File

@@ -263,7 +263,7 @@ include_once(dirname(dirname(dirname(__DIR__))) . '/header.php');
<!-- Admin Publish/Unpublish Button --> <!-- Admin Publish/Unpublish Button -->
<?php <?php
$user_role = $_SESSION['role'] ?? 'user'; $user_role = $_SESSION['role'] ?? 'user';
if ($user_role === 'admin'): if (in_array($user_role, ['admin', 'superadmin'])):
// Fetch current published status // Fetch current published status
$status_stmt = $conn->prepare("SELECT published FROM trips WHERE trip_id = ?"); $status_stmt = $conn->prepare("SELECT published FROM trips WHERE trip_id = ?");
$status_stmt->bind_param("i", $trip_id); $status_stmt->bind_param("i", $trip_id);

View File

@@ -8,7 +8,7 @@ require_once($rootPath . '/src/config/connection.php');
// Check admin status // Check admin status
session_start(); session_start();
if (empty($_SESSION['user_id']) || $_SESSION['role'] !== 'admin') { if (empty($_SESSION['user_id']) || !in_array($_SESSION['role'] ?? '', ['admin', 'superadmin'])) {
ob_end_clean(); ob_end_clean();
echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']); echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']);
exit; exit;

View File

@@ -8,7 +8,7 @@ require_once($rootPath . '/src/config/connection.php');
// Check admin status // Check admin status
session_start(); session_start();
if (empty($_SESSION['user_id']) || $_SESSION['role'] !== 'admin') { if (empty($_SESSION['user_id']) || !in_array($_SESSION['role'] ?? '', ['admin', 'superadmin'])) {
ob_end_clean(); ob_end_clean();
echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']); echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']);
exit; exit;

View File

@@ -8,7 +8,7 @@ require_once($rootPath . '/src/config/connection.php');
// Check admin status // Check admin status
session_start(); session_start();
if (empty($_SESSION['user_id']) || $_SESSION['role'] !== 'admin') { if (empty($_SESSION['user_id']) || !in_array($_SESSION['role'] ?? '', ['admin', 'superadmin'])) {
ob_end_clean(); ob_end_clean();
echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']); echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']);
exit; exit;