lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #18522 from Hystepik/develop_v13#1

Browse Source 
Fix #18519 : Modulebuilder api permission
This commit is contained in:
Laurent Destailleur 2021-08-28 14:39:13 +02:00 committed by GitHub
commit 12ce4bf7af
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
htdocs/modulebuilder/template/class/api_mymodule.class.php
View File

@ -69,7 +69,7 @@ class MyModuleApi extends DolibarrApi
*/ */
public function get($id) public function get($id)
{ {
if (!DolibarrApiAccess::$user->rights->mymodule->read) { if (!DolibarrApiAccess::$user->rights->mymodule->myobject->read) {
throw new RestException(401); throw new RestException(401);
} }
@ -194,7 +194,7 @@ class MyModuleApi extends DolibarrApi
*/ */
public function post($request_data = null) public function post($request_data = null)
{ {
if (!DolibarrApiAccess::$user->rights->mymodule->write) { if (!DolibarrApiAccess::$user->rights->mymodule->myobject->write) {
throw new RestException(401); throw new RestException(401);
} }
// Check mandatory fields // Check mandatory fields
@ -222,7 +222,7 @@ class MyModuleApi extends DolibarrApi
*/ */
public function put($id, $request_data = null) public function put($id, $request_data = null)
{ {
if (!DolibarrApiAccess::$user->rights->mymodule->write) { if (!DolibarrApiAccess::$user->rights->mymodule->myobject->write) {
throw new RestException(401); throw new RestException(401);
} }
@ -260,7 +260,7 @@ class MyModuleApi extends DolibarrApi
*/ */
public function delete($id) public function delete($id)
{ {
if (!DolibarrApiAccess::$user->rights->mymodule->delete) { if (!DolibarrApiAccess::$user->rights->mymodule->myobject->delete) {
throw new RestException(401); throw new RestException(401);
} }
$result = $this->myobject->fetch($id); $result = $this->myobject->fetch($id);