10-31-2016, 08:12 PM
So it worked for the most part, however we do have an issue. Lets use the following scenario:
I have a Supervisor that has access as a CSR and User Management but not Logs. However, when this person visits the adduser.php page, they are able to add someone as a CSR or Logs. They should be able to add CSR and User Management, but not logs. User Management is their level, but it is missing from the list.
Supervisor Permissions and should be able to create:
10. CSR
30 - User Management
Supervisor currently able to add:
10. CSR
30. Log Access
We also run into the fact that a System Administrator, level 20, can add any level except level 20, which an admin should be able to add any level.
Paste of the file:
http://pastebin.com/Xe9S2Gtm
Thank you.
I have a Supervisor that has access as a CSR and User Management but not Logs. However, when this person visits the adduser.php page, they are able to add someone as a CSR or Logs. They should be able to add CSR and User Management, but not logs. User Management is their level, but it is missing from the list.
Supervisor Permissions and should be able to create:
10. CSR
30 - User Management
Supervisor currently able to add:
10. CSR
30. Log Access
We also run into the fact that a System Administrator, level 20, can add any level except level 20, which an admin should be able to add any level.
Paste of the file:
http://pastebin.com/Xe9S2Gtm
Thank you.