diff --git a/htdocs/user/group/index.php b/htdocs/user/group/index.php
index 87dc46a7d99..c233d361a05 100644
--- a/htdocs/user/group/index.php
+++ b/htdocs/user/group/index.php
@@ -18,19 +18,22 @@
*
* $Id$
* $Source$
- *
*/
/**
- \file htdocs/user/index.php
- \brief Page d'accueil de la gestion des utilisateurs
+ \file htdocs/user/group/index.php
+ \brief Page d'accueil de la gestion des groupes
\version $Revision$
*/
require("./pre.inc.php");
+if (! $user->rights->user->group->lire && !$user->admin) accessforbidden();
+
$langs->load("users");
+$sall=isset($_GET["sall"])?$_GET["sall"]:$_POST["sall"];
+
$sortfield = isset($_GET["sortfield"])?$_GET["sortfield"]:$_POST["sortfield"];
$sortorder = isset($_GET["sortorder"])?$_GET["sortorder"]:$_POST["sortorder"];
$page=isset($_GET["page"])?$_GET["page"]:$_POST["page"];
@@ -50,39 +53,40 @@ print_titre($langs->trans("ListOfGroups"));
$sql = "SELECT g.rowid, g.nom, ".$db->pdate("g.datec")." as datec";
$sql .= " FROM ".MAIN_DB_PREFIX."usergroup as g";
$sql .= " WHERE 1=1";
-if ($_POST["search_group"]) {
+if ($_POST["search_group"])
+{
$sql .= " AND (g.nom like '%".$_POST["search_group"]."%' OR g.note like '%".$_POST["search_group"]."%')";
}
-if ($sortfield) {
- $sql .= " ORDER BY ".$sortfield;
-}
-if ($sortorder) {
- $sql .= " ".$sortorder;
-}
-$result = $db->query($sql);
-if ($result)
+if ($sall) $sql.= " AND (g.nom like '%".$sall."%' OR g.note like '%".$sall."%')";
+if ($sortfield)
{
- $num = $db->num_rows();
- $i = 0;
-
- print "
";
-
- print "
| '.img_object($langs->trans("ShowGroup"),"group").' '.$obj->nom.' | '; - print ''.dolibarr_print_date($obj->datec,"%d %b %Y").' | '; - print "
| '.img_object($langs->trans("ShowGroup"),"group").' '.$obj->nom.' | '; + print ''.dolibarr_print_date($obj->datec,"%d %b %Y").' | '; + print "
| '.$langs->trans("LastGroupsCreated",$max).' | |
| rowid\">".img_object($langs->trans("ShowGroup"),"group")." ".$obj->nom." | "; - print "".dolibarr_print_date($obj->datec)." | "; - print '
| '.$langs->trans("LastGroupsCreated",$max).' | |
| rowid\">".img_object($langs->trans("ShowGroup"),"group")." ".$obj->nom." | "; + print "".dolibarr_print_date($obj->datec)." | "; + print '