Advanced Security

You can modify for this purpose function SecuritySQL($strAction) in include/..._functions.php

function SecuritySQL($strAction)

{

global $cAdvSecurityMethod,$strTableName;

$ownerid=@$_SESSION["OwnerID"];

$ret="";

if(@$_SESSION["AccessLevel"]==ACCESS_LEVEL_ADMIN)

return "";

$ret="";

if($cAdvSecurityMethod == ADVSECURITY_VIEW_OWN ||

$cAdvSecurityMethod == ADVSECURITY_EDIT_OWN && ($strAction=="Edit" || $strAction=="Delete"))

$ret=GetFullFieldName("OwnerIDFieldGoesHere")."<>".make_db_value(RemoveFieldWrappers("OwnerIDFieldGoesHere"),$ownerid);
$strPerm = GetUserPermissions();

if($strAction=="Edit" && !(strpos($strPerm, "E")===false) ||

$strAction=="Delete" && !(strpos($strPerm, "D")===false) ||

$strAction=="Search" && !(strpos($strPerm, "S")===false) ||

$strAction=="Export" && !(strpos($strPerm, "P")===false) )

return $ret;

else

return "1=1";

return "";

}