Fix: permission for a user to view its own card using webservice
This commit is contained in:
parent
3670cfd966
commit
05de9c19c3
@ -178,7 +178,7 @@ function getUser($authentication,$id,$ref='',$ref_ext='')
|
|||||||
{
|
{
|
||||||
$fuser->getrights();
|
$fuser->getrights();
|
||||||
|
|
||||||
if ($fuser->rights->user->user->lire)
|
if ($fuser->rights->user->user->lire || ($fuser->rights->user->self->creer && $fuser->id = $id))
|
||||||
{
|
{
|
||||||
$user=new User($db);
|
$user=new User($db);
|
||||||
$result=$user->fetch($id,$ref,$ref_ext);
|
$result=$user->fetch($id,$ref,$ref_ext);
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user