Refactor user session handling and permissions management
- Updated session variables to use 'authorization' array instead of 'username' for user identification across multiple files. - Introduced a new function `getUserPermissions` to consolidate user permissions retrieval based on assigned roles. - Modified API calls to use the new authorization structure and updated endpoints to v2. - Enhanced language support by adding 'PL' to the list of supported languages. - Cleaned up redundant code and improved session management during user login and registration processes. - Added a new API endpoint for fetching user permissions based on user ID.
This commit is contained in:
@@ -6,13 +6,13 @@ $_SESSION['prev_origin'] = $_SERVER['REQUEST_URI'];
|
||||
$page = $_SESSION['origin'] = 'report_builder';
|
||||
|
||||
//Check if allowed
|
||||
if (isAllowed($page, $_SESSION['profile'], $_SESSION['permission'], 'R') === 0) {
|
||||
if (isAllowed($page, $_SESSION['authorization']['profile'], $_SESSION['authorization']['permission'], 'R') === 0) {
|
||||
header('location: index.php');
|
||||
exit;
|
||||
}
|
||||
|
||||
// Create bearer token for API calls
|
||||
$bearertoken = createCommunicationToken($_SESSION['userkey']);
|
||||
$bearertoken = createCommunicationToken($_SESSION['authorization']['userkey']);
|
||||
|
||||
// Include settings for baseurl
|
||||
include './settings/settings_redirector.php';
|
||||
|
||||
Reference in New Issue
Block a user