From 7a2eae0a4b41232d7a9dd9dfec7bf8dfe5e919bf Mon Sep 17 00:00:00 2001
From: Jan-Philipp Litza <janphilipp@litza.de>
Date: Thu, 27 Dec 2012 14:46:55 +0100
Subject: [PATCH] fix sign out button and remove edit button for "myshifts"
 when viewing other users

---
 includes/pages/user_myshifts.php | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/includes/pages/user_myshifts.php b/includes/pages/user_myshifts.php
index d8f94b81..f38a81d0 100644
--- a/includes/pages/user_myshifts.php
+++ b/includes/pages/user_myshifts.php
@@ -79,9 +79,10 @@ function user_myshifts() {
     $html .= '<td>' . $shift['name'] . '</td>';
     $html .= '<td>' . $shift['Comment'] . '</td>';
     $html .= '<td>';
-    $html .= '<a href="' . page_link_to('user_myshifts') . '&edit=' . $shift['id'] . '">' . Get_Text('edit') . '</a>';
-    if ($shift['start'] - time() > $LETZTES_AUSTRAGEN * 3600)
-      $html .= ' | <a href="' . page_link_to('user_myshifts') . '&cancel=' . $shift['id'] . '">' . Get_Text('sign_off') . '</a>';
+    if ($id == $user['UID'])
+      $html .= '<a href="' . page_link_to('user_myshifts') . '&edit=' . $shift['id'] . '">' . Get_Text('edit') . '</a>';
+    if (($shift['start'] - time() > $LETZTES_AUSTRAGEN * 3600) || in_array('user_shifts_admin', $privileges))
+      $html .= ' | <a href="' . page_link_to('user_myshifts') . (($id != $user['UID'])? '&id=' . $id : '') . '&cancel=' . $shift['id'] . '">' . Get_Text('sign_off') . '</a>';
     $html .= '</td>';
     $html .= '</tr>';
   }