From 05de9c19c3e15c083443bffb1c36f0af2cf6b571 Mon Sep 17 00:00:00 2001 From: Laurent Destailleur Date: Tue, 28 Aug 2012 18:39:34 +0200 Subject: [PATCH] Fix: permission for a user to view its own card using webservice --- htdocs/webservices/server_user.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/htdocs/webservices/server_user.php b/htdocs/webservices/server_user.php index 1178f1f007d..08f720b7921 100644 --- a/htdocs/webservices/server_user.php +++ b/htdocs/webservices/server_user.php @@ -178,7 +178,7 @@ function getUser($authentication,$id,$ref='',$ref_ext='') { $fuser->getrights(); - if ($fuser->rights->user->user->lire) + if ($fuser->rights->user->user->lire || ($fuser->rights->user->self->creer && $fuser->id = $id)) { $user=new User($db); $result=$user->fetch($id,$ref,$ref_ext);