fixed user editing projects

Author: puthre

appinfo/info.xml

@@ -5,7 +5,7 @@
     <name>Time Tracker</name>
     <summary>Time Tracker App</summary>
     <description><![CDATA[Time Tracker App]]></description>
-    <version>0.0.21</version>
+    <version>0.0.22</version>
     <licence>agpl</licence>
     <author mail="[email protected]" >MTier Ltd.</author>
     <namespace>TimeTracker</namespace>

lib/Controller/AjaxController.php

@@ -423,17 +423,17 @@ public function editProject($id) {
 			$clientId = $this->request->clientId;
 			$p->setClientId($clientId);
 		}
-		if (isset($this->request->locked)){
+		if (isset($this->request->locked) && $this->isThisAdminUser()){
 			$locked = $this->request->locked;
 			$p->setLocked($locked);
 		}
 
-		if (isset($this->request->allowedTags)){
+		if (isset($this->request->allowedTags) && $this->isThisAdminUser()){
 			$allowedTags = $this->request->allowedTags;
 			$a = explode(',',$allowedTags);
 			$this->tagMapper->allowedTags($id, $a);
 		}
-		if (isset($this->request->allowedUsers)){
+		if (isset($this->request->allowedUsers) && $this->isThisAdminUser()){
 			$allowedUsers = $this->request->allowedUsers;
 			$a = explode(',',$allowedUsers);
 			$this->userToProjectMapper->deleteAllForProject($id);