Add role-based access control

client_routes.php

@@ -14,59 +14,91 @@ if(isset($_GET['tab'])){
     include("client_departments.php");
   }
   elseif($_GET['tab'] == "assets"){
+    if($session_user_role > 1) {
       include("client_assets.php");
     }
+  }
   elseif($_GET['tab'] == "workstations"){
+    if($session_user_role > 1) {
       include("client_assets_workstations.php");
     }
+  }
   elseif($_GET['tab'] == "tickets"){
+    if($session_user_role > 1) {
       include("client_tickets.php");
     }
+  }
   elseif($_GET['tab'] == "vendors"){
     include("client_vendors.php");
   }
   elseif($_GET['tab'] == "logins"){
+    if($session_user_role > 1) {
       include("client_logins.php");
     }
+  }
   elseif($_GET['tab'] == "networks"){
+    if($session_user_role > 1) {
       include("client_networks.php");
     }
+  }
   elseif($_GET['tab'] == "domains"){
+    if($session_user_role > 1) {
       include("client_domains.php");
     }
+  }
   elseif($_GET['tab'] == "certificates"){
+    if($session_user_role > 1) {
       include("client_certificates.php");
     }
+  }
   elseif($_GET['tab'] == "software"){
+    if($session_user_role > 1) {
       include("client_software.php");
     }
+  }
   elseif($_GET['tab'] == "invoices"){
+    if($session_user_role == 1 OR $session_user_role == 3) {
       include("client_invoices.php");
     }
+  }
   elseif($_GET['tab'] == "recurring_invoices"){
+    if($session_user_role == 1 OR $session_user_role == 3) {
       include("client_recurring_invoices.php");
     }
+  }
   elseif($_GET['tab'] == "payments"){
+    if($session_user_role == 1 OR $session_user_role == 3) {
       include("client_payments.php");
     }
+  }
   elseif($_GET['tab'] == "quotes"){
+    if($session_user_role == 1 OR $session_user_role == 3) {
       include("client_quotes.php");
     }
+  }
   elseif($_GET['tab'] == "trips"){
+    if($session_user_role == 1 OR $session_user_role == 3) {
       include("client_trips.php");
     }
+  }
   elseif($_GET['tab'] == "events"){
     include("client_events.php");
   }
   elseif($_GET['tab'] == "files"){
+    if($session_user_role > 1) {
       include("client_files.php");
     }
+  }
   elseif($_GET['tab'] == "documents"){
+    if($session_user_role > 1) {
       include("client_documents.php");
     }
+  }
   elseif($_GET['tab'] == "services"){
+    if($session_user_role > 1) {
       include("client_services.php");
     }
+  }
   elseif($_GET['tab'] == "logs"){
       include("client_logs.php");
   }