Update: Allow superadmin role to manage trips alongside admin
This commit is contained in:
@@ -263,7 +263,7 @@ include_once(dirname(dirname(dirname(__DIR__))) . '/header.php');
|
|||||||
<!-- Admin Publish/Unpublish Button -->
|
<!-- Admin Publish/Unpublish Button -->
|
||||||
<?php
|
<?php
|
||||||
$user_role = $_SESSION['role'] ?? 'user';
|
$user_role = $_SESSION['role'] ?? 'user';
|
||||||
if ($user_role === 'admin'):
|
if (in_array($user_role, ['admin', 'superadmin'])):
|
||||||
// Fetch current published status
|
// Fetch current published status
|
||||||
$status_stmt = $conn->prepare("SELECT published FROM trips WHERE trip_id = ?");
|
$status_stmt = $conn->prepare("SELECT published FROM trips WHERE trip_id = ?");
|
||||||
$status_stmt->bind_param("i", $trip_id);
|
$status_stmt->bind_param("i", $trip_id);
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ require_once($rootPath . '/src/config/connection.php');
|
|||||||
|
|
||||||
// Check admin status
|
// Check admin status
|
||||||
session_start();
|
session_start();
|
||||||
if (empty($_SESSION['user_id']) || $_SESSION['role'] !== 'admin') {
|
if (empty($_SESSION['user_id']) || !in_array($_SESSION['role'] ?? '', ['admin', 'superadmin'])) {
|
||||||
ob_end_clean();
|
ob_end_clean();
|
||||||
echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']);
|
echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']);
|
||||||
exit;
|
exit;
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ require_once($rootPath . '/src/config/connection.php');
|
|||||||
|
|
||||||
// Check admin status
|
// Check admin status
|
||||||
session_start();
|
session_start();
|
||||||
if (empty($_SESSION['user_id']) || $_SESSION['role'] !== 'admin') {
|
if (empty($_SESSION['user_id']) || !in_array($_SESSION['role'] ?? '', ['admin', 'superadmin'])) {
|
||||||
ob_end_clean();
|
ob_end_clean();
|
||||||
echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']);
|
echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']);
|
||||||
exit;
|
exit;
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ require_once($rootPath . '/src/config/connection.php');
|
|||||||
|
|
||||||
// Check admin status
|
// Check admin status
|
||||||
session_start();
|
session_start();
|
||||||
if (empty($_SESSION['user_id']) || $_SESSION['role'] !== 'admin') {
|
if (empty($_SESSION['user_id']) || !in_array($_SESSION['role'] ?? '', ['admin', 'superadmin'])) {
|
||||||
ob_end_clean();
|
ob_end_clean();
|
||||||
echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']);
|
echo json_encode(['status' => 'error', 'message' => 'Unauthorized access']);
|
||||||
exit;
|
exit;
|
||||||
|
|||||||
Reference in New Issue
Block a user