Secu: Protection ecran creation soci�t� si droit absent

2005-09-21 20:28:36 +00:00 · 2005-09-21 20:28:36 +00:00 · 229d949952
commit 229d949952
parent a3baf4ab4b
1 changed files with 10 additions and 3 deletions
--- a/htdocs/soc.php
+++ b/htdocs/soc.php
@ -33,10 +33,15 @@ require("pre.inc.php");
 $user->getrights('societe');
 $langs->load("companies");
 
+if (! $user->rights->societe->creer)
+{
+    if ($_GET["action"] == 'create' || $_POST["action"] == 'create')
+    {
+        accessforbidden();
+    }
+}

-/*
- * Sécurité accés client
- */
+// Sécurité accés client
 if ($user->societe_id > 0) 
 {
  $_GET["action"] = '';
@ -46,6 +51,8 @@ if ($user->societe_id > 0)

 $soc = new Societe($db);

+
+
 /*
 * Actions
 */