<?php
session_start();
include_once __DIR__ . '/../includes/db.php';
include_once __DIR__ . '/../includes/permissions.php';

// Check if the user is logged in
if (!isset($_SESSION['user_id'])) {
    header("Location: index.php");
    exit;
}

// Check if the user has any permissions at all.
// User ID 1 is the super admin and always has access.
$is_super_admin = ($_SESSION['user_id'] == 1);
$has_permissions = (isset($_SESSION['permissions']) && !empty($_SESSION['permissions']));

if (!$is_super_admin && !$has_permissions) {
    // Not a super admin and has no permissions, deny access.
    session_destroy();
    header("Location: index.php?error=Access Denied");
    exit;
}
?>