// pending_leaves.php
session_start();
require 'db.php';

// assume you already have login for users table and set $_SESSION['user_role']
if (!in_array($_SESSION['user_role'], ['principal','vice_principal','sectional_head'])) {
    die('Access denied');
}

$stmt = $pdo->query("
    SELECT la.*, u.full_name, u.department
    FROM leave_applications la
    JOIN users u ON la.user_id = u.id
    WHERE la.status = 'pending'
    ORDER BY la.apply_date DESC
");
$rows = $stmt->fetchAll();