lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Ajout de la permission "consulter tous les clients" dans le module commercial, afin

Browse Source 
qu'un commercial puisse voir que les clients qui lui sont affects.
This commit is contained in:
Regis Houssin 2006-03-13 18:15:45 +00:00
parent 2b4c5a37bb
commit 19a5f266a3
3 changed files with 68 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
htdocs/societe/commerciaux.php
View File

@ -37,16 +37,33 @@ $langs->load("customers");
$langs->load("suppliers"); $langs->load("suppliers");
$langs->load("banks"); $langs->load("banks");
/* if ( !$user->rights->societe->creer)
* Sécurité accés client accessforbidden();
*/
$socid = isset($_GET["socid"])?$_GET["socid"]:'';
if (!$socid) accessforbidden();
// Sécurité accés client
if ($user->societe_id > 0) if ($user->societe_id > 0)
{ {
$action = ''; $action = '';
$socid = $user->societe_id; $socid = $user->societe_id;
} }
// Protection restriction commercial
if (!$user->rights->commercial->client->voir && $socid)
{
$sql = "SELECT sc.rowid";
$sql .= " FROM ".MAIN_DB_PREFIX."societe_commerciaux as sc";
$sql .= " WHERE sc.fk_soc = ".$socid." AND sc.fk_user = ".$user->id;
if ( $db->query($sql) )
{
if ( $db->num_rows() == 0) accessforbidden();
}
}
if($_GET["socid"] && $_GET["commid"]) if($_GET["socid"] && $_GET["commid"])
{ {
if ($user->rights->societe->creer) if ($user->rights->societe->creer)

22
htdocs/societe/lien.php
View File

@ -36,6 +36,15 @@ $langs->load("customers");
$langs->load("suppliers"); $langs->load("suppliers");
$langs->load("banks"); $langs->load("banks");
$user->getrights('societe');
$user->getrights('commercial');
if ( !$user->rights->societe->creer)
accessforbidden();
$socid = isset($_GET["socid"])?$_GET["socid"]:'';
if (!$socid) accessforbidden();
// Sécurité accés client // Sécurité accés client
if ($user->societe_id > 0) if ($user->societe_id > 0)
{ {
@ -43,6 +52,19 @@ if ($user->societe_id > 0)
$socid = $user->societe_id; $socid = $user->societe_id;
} }
// Protection restriction commercial
if (!$user->rights->commercial->client->voir && $socid)
{
$sql = "SELECT sc.rowid";
$sql .= " FROM ".MAIN_DB_PREFIX."societe_commerciaux as sc";
$sql .= " WHERE sc.fk_soc = ".$socid." AND sc.fk_user = ".$user->id;
if ( $db->query($sql) )
{
if ( $db->num_rows() == 0) accessforbidden();
}
}
/* /*
* Actions * Actions

25
htdocs/societe/rib.php
View File

@ -35,10 +35,35 @@ $langs->load("companies");
$langs->load("banks"); $langs->load("banks");
$user->getrights('societe'); $user->getrights('societe');
$user->getrights('commercial');
if ( !$user->rights->societe->creer) if ( !$user->rights->societe->creer)
accessforbidden(); accessforbidden();
$socid = isset($_GET["socid"])?$_GET["socid"]:'';
if (!$socid) accessforbidden();
// Sécurité accés client
if ($user->societe_id > 0)
{
$action = '';
$socid = $user->societe_id;
}
// Protection restriction commercial
if (!$user->rights->commercial->client->voir && $socid)
{
$sql = "SELECT sc.rowid";
$sql .= " FROM ".MAIN_DB_PREFIX."societe_commerciaux as sc";
$sql .= " WHERE sc.fk_soc = ".$socid." AND sc.fk_user = ".$user->id;
if ( $db->query($sql) )
{
if ( $db->num_rows() == 0) accessforbidden();
}
}
llxHeader(); llxHeader();