Fix 'prevent_session_admins_to_manage_all_users' feature (1.10.x) - refs BT#9324

10 years ago · 24c3dd73fe
parent 142299e307
commit 24c3dd73fe
1 changed files with 3 additions and 1 deletions
--- a/main/admin/add_users_to_session.php
+++ b/main/admin/add_users_to_session.php
@ -411,7 +411,9 @@ if ($ajax_search) {
            }
        }
    }
-
+    if (api_is_session_admin() && api_get_setting('prevent_session_admins_to_manage_all_users') === 'true') {
+        $order_clause = " AND u.creator_id = " . api_get_user_id() . $order_clause;
+    }
    if ($use_extra_fields) {
        $sql = "SELECT  user_id, lastname, firstname, username, id_session, official_code
               FROM $tbl_user u