Only display invoice to users we can read invoice.

pronamic · Feb 19, 2024 · f2a680c · f2a680c
1 parent 0c628f9
commit f2a680c
Showing 1 changed file with 10 additions and 8 deletions.
diff --git a/classes/Theme.php b/classes/Theme.php
@@ -44,14 +44,16 @@ public function post_class( $classes ) {
 	 * @return array
 	 */
 	public function project_sections( $sections ) {
-		$sections[] = [
-			'id'       => 'invoices',
-			'slug'     => __( 'invoices', 'orbis-projects' ),
-			'name'     => __( 'Invoices', 'orbis-projects' ),
-			'callback' => function () {
-				include __DIR__ . '/../templates/project-invoices.php';
-			},
-		];
+		if ( \current_user_can( 'read_orbis_project_invoice', \get_the_ID() ) ) {
+			$sections[] = [
+				'id'       => 'invoices',
+				'slug'     => __( 'invoices', 'orbis-projects' ),
+				'name'     => __( 'Invoices', 'orbis-projects' ),
+				'callback' => function () {
+					include __DIR__ . '/../templates/project-invoices.php';
+				},
+			];
+		}
 
 		return $sections;
 	}