lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix ticket : an external user should be able to access only its own company tickets.

Browse Source
This commit is contained in:
Thomas Negre 2022-01-25 15:12:32 +01:00
parent 66287d645e
commit 0126be54a3
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/ticket/list.php
View File

@ -157,6 +157,8 @@ $arrayfields = dol_sort_array($arrayfields, 'position');
if (!$user->rights->ticket->read) { if (!$user->rights->ticket->read) {
accessforbidden(); accessforbidden();
} }
// restrict view to current user's company
if ($user->socid > 0) $socid = $user->socid;
// Store current page url // Store current page url
$url_page_current = DOL_URL_ROOT.'/ticket/list.php'; $url_page_current = DOL_URL_ROOT.'/ticket/list.php';