Removed redirect for non admin moderators trying to access runs/surveys

timed-and-secured-assets · Feb 18, 2024 · 607cea2 · till-20 · Feb 18, 2024 · 607cea2
1 parent 1cfaba5
commit 607cea2
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/application/Controller/AdminController.php b/application/Controller/AdminController.php
@@ -98,7 +98,9 @@ protected function header() {
 
         $this->user = new User($cookie[0], $cookie[1]);
 
-        if (!$this->user->isAdmin()) {
+        $run_or_survey = str_contains($_SERVER['REQUEST_URI'], 'run') || str_contains($_SERVER['REQUEST_URI'], 'survey');
+
+        if (!$this->user->isAdmin() && ($this->user->moderator_for==0 || !$run_or_survey)) {
             $docLink = site_url('documentation/#get_started');
             alert('You need to request for an admin account in order to access this section. <a href="'.$docLink.'">See Documentation</a>.', 'alert-warning');
             $this->request->redirect('admin/account');