lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: amlioration des droits

Browse Source
This commit is contained in:
Regis Houssin 2006-06-13 17:36:23 +00:00
parent c990e937fc
commit 0d63adca91
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
htdocs/user/fiche.php
View File

@ -38,6 +38,8 @@ require_once(DOL_DOCUMENT_ROOT."/contact.class.php");
$canreadperms=($user->admin || $user->rights->user->user->lire); $canreadperms=($user->admin || $user->rights->user->user->lire);
$caneditperms=($user->admin || $user->rights->user->user->creer); $caneditperms=($user->admin || $user->rights->user->user->creer);
$candisableperms=($user->admin || $user->rights->user->user->supprimer); $candisableperms=($user->admin || $user->rights->user->user->supprimer);
$caneditselfperms=($user->rights->user->self->supprimer);
$caneditpassword=($user->rights->user->self->password);
if ($user->id <> $_GET["id"]) if ($user->id <> $_GET["id"])
{ {
@ -177,7 +179,7 @@ if ($_GET["action"] == 'removegroup' && $caneditperms)
} }
} }
if ($_POST["action"] == 'update' && $caneditperms) if ($_POST["action"] == 'update' && ($caneditperms || $caneditselfperms))
{ {
$message=""; $message="";
@ -249,7 +251,7 @@ if ($_POST["action"] == 'update' && $caneditperms)
// Action modif mot de passe // Action modif mot de passe
if ((($_POST["action"] == 'confirm_password' && $_POST["confirm"] == 'yes') if ((($_POST["action"] == 'confirm_password' && $_POST["confirm"] == 'yes')
|| $_GET["action"] == 'confirm_passwordsend') && $caneditperms) || $_GET["action"] == 'confirm_passwordsend') && ($caneditperms || $caneditpassword)
{ {
$edituser = new User($db, $_GET["id"]); $edituser = new User($db, $_GET["id"]);
$edituser->fetch(); $edituser->fetch();
@ -581,7 +583,7 @@ else
*/ */
print '<div class="tabsAction">'; print '<div class="tabsAction">';
if ($caneditperms || ($user->id == $fuser->id)) if ($caneditperms || (($user->id == $fuser->id) && $caneditselfperms))
{ {
print '<a class="butAction" href="fiche.php?id='.$fuser->id.'&amp;action=edit">'.$langs->trans("Edit").'</a>'; print '<a class="butAction" href="fiche.php?id='.$fuser->id.'&amp;action=edit">'.$langs->trans("Edit").'</a>';
} }