From 02c8f7f905455fd997181b6f174bdb1db9a2099c Mon Sep 17 00:00:00 2001 From: Neil Orley Date: Tue, 24 Oct 2017 11:25:31 +0200 Subject: [PATCH] Modify rights check in the getPayments method --- htdocs/compta/facture/class/api_invoices.class.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/htdocs/compta/facture/class/api_invoices.class.php b/htdocs/compta/facture/class/api_invoices.class.php index ae2ab7a94ea..1dfaea3d580 100644 --- a/htdocs/compta/facture/class/api_invoices.class.php +++ b/htdocs/compta/facture/class/api_invoices.class.php @@ -680,7 +680,7 @@ class Invoices extends DolibarrApi */ function getPayments($id) { - if(! DolibarrApiAccess::$user->rights->facture->creer) { + if(! DolibarrApiAccess::$user->rights->facture->lire) { throw new RestException(401); } if(empty($id)) {