From 4d224aaa866a1f3e78b550ac0b01cc9ff1a222ed Mon Sep 17 00:00:00 2001
From: Julio <gugli100@gmail.com>
Date: Wed, 8 Jun 2016 22:13:37 +0200
Subject: [PATCH] fix permission

---
 load_search.php | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/load_search.php b/load_search.php
index feef10a721..3cb4aeee6a 100644
--- a/load_search.php
+++ b/load_search.php
@@ -11,12 +11,11 @@ $htmlHeadXtra[] = '<link  href="'. api_get_path(WEB_PATH) .'web/assets/cropper/d
 $htmlHeadXtra[] = '<script src="'. api_get_path(WEB_PATH) .'web/assets/cropper/dist/cropper.min.js"></script>';
 
 api_block_anonymous_users();
+$allowToSee = api_is_drh() || api_is_student_boss() || api_is_platform_admin();
 
-//if (!api_is_platform_admin()) {
-    if (!api_is_drh()) {
-        api_not_allowed(true);
-    }
-//}
+if ($allowToSee === false) {
+    api_not_allowed(true);
+}
 $userId = api_get_user_id();
 $userInfo = api_get_user_info();