diff --git a/htdocs/comm/propal.php b/htdocs/comm/propal.php index e0c70631378..bbe2983c521 100644 --- a/htdocs/comm/propal.php +++ b/htdocs/comm/propal.php @@ -1235,10 +1235,16 @@ else $pagenext = $page + 1; $sql = 'SELECT s.nom, s.idp, s.client, p.rowid as propalid, p.price, p.ref, p.fk_statut, '.$db->pdate('p.datep').' as dp,'.$db->pdate('p.fin_validite').' as dfv'; + if (!$user->rights->commercial->client->voir) $sql .= ", sc.fk_soc, sc.fk_user"; $sql.= ' FROM '.MAIN_DB_PREFIX.'societe as s, '.MAIN_DB_PREFIX.'propal as p'; + if (!$user->rights->commercial->client->voir) $sql .= ", ".MAIN_DB_PREFIX."societe_commerciaux as sc"; if ($sall) $sql.= ' LEFT JOIN '.MAIN_DB_PREFIX.'propaldet as pd ON p.rowid=pd.fk_propal'; $sql.= ' WHERE p.fk_soc = s.idp'; - + + if (!$user->rights->commercial->client->voir) //restriction + { + $sql .= " AND s.idp = sc.fk_soc AND sc.fk_user = " .$user->id; + } if (!empty($_GET['search_ref'])) { $sql .= " AND p.ref LIKE '%".addslashes($_GET['search_ref'])."%'";