Новости пользователя, могут смотреть только авторы, что подправить?

} elseif ($subaction == 'allnews') {

} elseif ($subaction == 'allnews' AND $member_id['name']==$user AND $member_id['user_group']==1) {

// ################ Вывод всех новостей пользователя #################
            if ($cstart) {
                
                $cstart = $cstart - 1;
                $cstart = $cstart * $config['news_number'];
            
            }
            
            $url_page = $config['http_home_url'] . "user/" . urlencode ( $user ) . "/news";
            $user_query = "subaction=allnews&user=" . urlencode ( $user );
            
            if (isset ( $view_template ) and $view_template == "rss") {
                
                $sql_select = "SELECT id, autor, date, short_story, full_story, xfields, title, category, alt_name FROM " . PREFIX . "_post where {$stop_list}autor = '$user'  ". $where_date . " ORDER BY date DESC LIMIT 0," . $config['rss_number'];
            
            } else {
                
                if (isset ( $_SESSION['dle_sort_allnews'] )) $news_sort_by = $_SESSION['dle_sort_allnews'];
                if (isset ( $_SESSION['dle_direction_allnews'] )) $news_direction_by = $_SESSION['dle_direction_allnews'];
                
                $sql_select = "SELECT p.id, p.autor, p.date, p.short_story, CHAR_LENGTH(p.full_story) as full_story, p.xfields, p.title, p.category, p.alt_name, p.comm_num, p.allow_comm, p.fixed, p.tags, e.news_read, e.allow_rate, e.rating, e.vote_num, e.votes, e.view_edit, e.editdate, e.editor, e.reason FROM " . PREFIX . "_post p LEFT JOIN " . PREFIX . "_post_extras e ON (p.id=e.news_id) WHERE {$stop_list}autor = '$user'  ". $where_date . " ORDER BY " . $news_sort_by . " " . $news_direction_by . " LIMIT " . $cstart . "," . $config['news_number'];
                $sql_count = "SELECT COUNT(*) as count FROM " . PREFIX . "_post WHERE {$stop_list}autor = '$user'  " . $where_date;
            }
            
            $allow_active_news = true;

// ################ Вывод всех новостей пользователя #################
            if ($member_id['name'] == $user OR $member_id['user_group'] == 1 ) {
                if ($cstart) {
                    
                    $cstart = $cstart - 1;
                    $cstart = $cstart * $config['news_number'];
                
                }
                
                $url_page = $config['http_home_url'] . "user/" . urlencode ( $user ) . "/news";
                $user_query = "subaction=allnews&user=" . urlencode ( $user );
                
                if (isset ( $view_template ) and $view_template == "rss") {
                    
                    $sql_select = "SELECT id, autor, date, short_story, full_story, xfields, title, category, alt_name FROM " . PREFIX . "_post where {$stop_list}autor = '$user'  ". $where_date . " ORDER BY date DESC LIMIT 0," . $config['rss_number'];
                
                } else {
                    
                    if (isset ( $_SESSION['dle_sort_allnews'] )) $news_sort_by = $_SESSION['dle_sort_allnews'];
                    if (isset ( $_SESSION['dle_direction_allnews'] )) $news_direction_by = $_SESSION['dle_direction_allnews'];
                    
                    $sql_select = "SELECT p.id, p.autor, p.date, p.short_story, CHAR_LENGTH(p.full_story) as full_story, p.xfields, p.title, p.category, p.alt_name, p.comm_num, p.allow_comm, p.fixed, p.tags, e.news_read, e.allow_rate, e.rating, e.vote_num, e.votes, e.view_edit, e.editdate, e.editor, e.reason FROM " . PREFIX . "_post p LEFT JOIN " . PREFIX . "_post_extras e ON (p.id=e.news_id) WHERE {$stop_list}autor = '$user'  ". $where_date . " ORDER BY " . $news_sort_by . " " . $news_direction_by . " LIMIT " . $cstart . "," . $config['news_number'];
                    $sql_count = "SELECT COUNT(*) as count FROM " . PREFIX . "_post WHERE {$stop_list}autor = '$user'  " . $where_date;
                }
                
                $allow_active_news = true;
            } else msgbox( "Ошибка!", "У вас недостаточно прав для просмотра данного раздела" );

} else msgbox( "Ошибка!", "У вас недостаточно прав для просмотра данного раздела" );

else {
	msgbox( "Ошибка!", "У вас недостаточно прав для просмотра данного раздела" );
	$allow_active_news = false;
}