Fix: permission for a user to view its own card using webservice

2012-08-28 18:39:34 +02:00 · 2012-08-28 18:39:34 +02:00 · 05de9c19c3
commit 05de9c19c3
parent 3670cfd966
1 changed files with 1 additions and 1 deletions
--- a/htdocs/webservices/server_user.php
+++ b/htdocs/webservices/server_user.php
@ -178,7 +178,7 @@ function getUser($authentication,$id,$ref='',$ref_ext='')
    {
        $fuser->getrights();

-        if ($fuser->rights->user->user->lire)
+        if ($fuser->rights->user->user->lire || ($fuser->rights->user->self->creer && $fuser->id = $id))
        {
            $user=new User($db);
            $result=$user->fetch($id,$ref,$ref_ext);