Modif permissions
This commit is contained in:
parent
e3ff28f5ea
commit
35e4f573ac
@ -25,7 +25,7 @@ require_once DOL_DOCUMENT_ROOT."/lib/dolibarrmail.class.php";
|
||||
|
||||
$mesg = '';
|
||||
|
||||
if ($_POST["action"] == 'add')
|
||||
if ($_POST["action"] == 'add' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$contrat = new TelephonieContrat($db);
|
||||
|
||||
@ -46,7 +46,7 @@ if ($_POST["action"] == 'add')
|
||||
|
||||
}
|
||||
|
||||
if ($_POST["action"] == 'update' && $_POST["cancel"] <> $langs->trans("Cancel"))
|
||||
if ($_POST["action"] == 'update' && $_POST["cancel"] <> $langs->trans("Cancel") && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$contrat = new TelephonieContrat($db);
|
||||
$contrat->id = $_GET["id"];
|
||||
@ -74,7 +74,7 @@ if ($_POST["action"] == 'update' && $_POST["cancel"] <> $langs->trans("Cancel"))
|
||||
}
|
||||
}
|
||||
|
||||
if ($_POST["action"] == 'addcontact')
|
||||
if ($_POST["action"] == 'addcontact' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$contrat = new TelephonieContrat($db);
|
||||
$contrat->id = $_GET["id"];
|
||||
@ -95,7 +95,7 @@ if ($_POST["action"] == 'addpo' && $user->rights->telephonie->ligne->creer)
|
||||
}
|
||||
|
||||
|
||||
if ($_GET["action"] == 'delcontact')
|
||||
if ($_GET["action"] == 'delcontact' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$contrat = new TelephonieContrat($db);
|
||||
$contrat->id = $_GET["id"];
|
||||
@ -128,7 +128,7 @@ if ($cancel == $langs->trans("Cancel"))
|
||||
* Création en 2 étape
|
||||
*
|
||||
*/
|
||||
if ($_GET["action"] == 'create')
|
||||
if ($_GET["action"] == 'create' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$form = new Form($db);
|
||||
print_titre("Nouveau contrat");
|
||||
@ -174,7 +174,7 @@ if ($_GET["action"] == 'create')
|
||||
print '</table>'."\n";
|
||||
print '</form>';
|
||||
}
|
||||
elseif ($_GET["action"] == 'create_line' && $_GET["client_comm"] > 0)
|
||||
elseif ($_GET["action"] == 'create_line' && $_GET["client_comm"] > 0 && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$form = new Form($db);
|
||||
print_titre("Nouveau contrat");
|
||||
@ -190,8 +190,9 @@ elseif ($_GET["action"] == 'create_line' && $_GET["client_comm"] > 0)
|
||||
}
|
||||
|
||||
$socc = new Societe($db);
|
||||
$socc->fetch($_GET["client_comm"]);
|
||||
|
||||
if ( $socc->fetch($_GET["client_comm"]) == 1)
|
||||
if ( $socc->id > 0)
|
||||
{
|
||||
|
||||
if (strlen($socc->code_client) == 0)
|
||||
@ -409,7 +410,18 @@ else
|
||||
}
|
||||
}
|
||||
|
||||
if ( $result )
|
||||
if ($result == 1)
|
||||
{
|
||||
$client_comm = new Societe($db);
|
||||
$client_comm->fetch($contrat->client_comm_id, $user);
|
||||
}
|
||||
|
||||
if (!$client_comm->perm_read)
|
||||
{
|
||||
print "Lecture non authorisée";
|
||||
}
|
||||
|
||||
if ( $result && $client_comm->perm_read)
|
||||
{
|
||||
if ($_GET["action"] <> 'edit' && $_GET["action"] <> 're-edit')
|
||||
{
|
||||
@ -447,7 +459,7 @@ else
|
||||
|
||||
print '<table class="border" width="100%" cellspacing="0" cellpadding="4">';
|
||||
|
||||
$client_comm = new Societe($db, $contrat->client_comm_id);
|
||||
$client_comm = new Societe($db);
|
||||
$client_comm->fetch($contrat->client_comm_id);
|
||||
|
||||
print '<tr><td width="20%">Référence</td><td>'.$contrat->ref.'</td>';
|
||||
@ -946,6 +958,44 @@ else
|
||||
|
||||
print '</div>';
|
||||
|
||||
|
||||
/* ************************************************************************** */
|
||||
/* */
|
||||
/* Barre d'action */
|
||||
/* */
|
||||
/* ************************************************************************** */
|
||||
|
||||
print "\n<br>\n<div class=\"tabsAction\">\n";
|
||||
|
||||
if ($_GET["action"] == '')
|
||||
{
|
||||
|
||||
if ($user->rights->telephonie->ligne->creer && $contrat->statut <> 6)
|
||||
{
|
||||
print '<a class="tabAction" href="'.DOL_URL_ROOT.'/telephonie/ligne/fiche.php?action=create&contratid='.$contrat->id.'">Nouvelle ligne</a>';
|
||||
}
|
||||
|
||||
if ($user->rights->telephonie->ligne->creer && $contrat->statut <> 6)
|
||||
{
|
||||
print "<a class=\"tabAction\" href=\"fiche.php?action=contact&id=$contrat->id\">".$langs->trans("Contact")."</a>";
|
||||
}
|
||||
|
||||
if ($user->rights->telephonie->ligne->creer && $po == 0 && $contrat->statut <> 6)
|
||||
{
|
||||
print "<a class=\"tabAction\" href=\"fiche.php?action=po&id=$contrat->id\">Ajouter une prise d'ordre</a>";
|
||||
}
|
||||
if ($user->rights->telephonie->ligne->creer && $contrat->statut <> 6)
|
||||
{
|
||||
print "<a class=\"tabAction\" href=\"fiche.php?action=edit&id=$contrat->id\">".$langs->trans("Edit")."</a>";
|
||||
}
|
||||
|
||||
if ($user->rights->telephonie->ligne->creer && $numlignes == 0 && $contrat->statut <> 6)
|
||||
{
|
||||
print "<a class=\"butDelete\" href=\"fiche.php?action=delete&id=$contrat->id\">".$langs->trans("Delete")."</a>";
|
||||
}
|
||||
}
|
||||
|
||||
print "</div>";
|
||||
}
|
||||
}
|
||||
else
|
||||
@ -954,43 +1004,6 @@ else
|
||||
}
|
||||
}
|
||||
|
||||
/* ************************************************************************** */
|
||||
/* */
|
||||
/* Barre d'action */
|
||||
/* */
|
||||
/* ************************************************************************** */
|
||||
|
||||
print "\n<br>\n<div class=\"tabsAction\">\n";
|
||||
|
||||
if ($_GET["action"] == '')
|
||||
{
|
||||
|
||||
if ($user->rights->telephonie->ligne->creer && $contrat->statut <> 6)
|
||||
{
|
||||
print '<a class="tabAction" href="'.DOL_URL_ROOT.'/telephonie/ligne/fiche.php?action=create&contratid='.$contrat->id.'">Nouvelle ligne</a>';
|
||||
}
|
||||
|
||||
if ($user->rights->telephonie->ligne->creer && $contrat->statut <> 6)
|
||||
{
|
||||
print "<a class=\"tabAction\" href=\"fiche.php?action=contact&id=$contrat->id\">".$langs->trans("Contact")."</a>";
|
||||
}
|
||||
|
||||
if ($user->rights->telephonie->ligne->creer && $po == 0 && $contrat->statut <> 6)
|
||||
{
|
||||
print "<a class=\"tabAction\" href=\"fiche.php?action=po&id=$contrat->id\">Ajouter une prise d'ordre</a>";
|
||||
}
|
||||
if ($user->rights->telephonie->ligne->creer && $contrat->statut <> 6)
|
||||
{
|
||||
print "<a class=\"tabAction\" href=\"fiche.php?action=edit&id=$contrat->id\">".$langs->trans("Edit")."</a>";
|
||||
}
|
||||
|
||||
if ($user->rights->telephonie->ligne->creer && $numlignes == 0 && $contrat->statut <> 6)
|
||||
{
|
||||
print "<a class=\"butDelete\" href=\"fiche.php?action=delete&id=$contrat->id\">".$langs->trans("Delete")."</a>";
|
||||
}
|
||||
}
|
||||
|
||||
print "</div>";
|
||||
|
||||
|
||||
|
||||
|
||||
@ -32,7 +32,7 @@ $h = strftime("%H",$dt);
|
||||
$m = strftime("%M",$dt);
|
||||
$s = strftime("%S",$dt);
|
||||
|
||||
if ($_POST["action"] == 'add')
|
||||
if ($_POST["action"] == 'add' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$ligne = new LigneTel($db);
|
||||
$ligne->contrat = $_POST["contrat"];
|
||||
@ -58,7 +58,7 @@ if ($_POST["action"] == 'add')
|
||||
}
|
||||
}
|
||||
|
||||
if ($_GET["action"] == 'transfer')
|
||||
if ($_GET["action"] == 'transfer' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$ligne = new LigneTel($db);
|
||||
$ligne->fetch_by_id($_GET["id"]);
|
||||
@ -69,7 +69,7 @@ if ($_GET["action"] == 'transfer')
|
||||
}
|
||||
}
|
||||
|
||||
if ($_POST["action"] == 'confirm_delete' && $_POST["confirm"] == 'yes')
|
||||
if ($_POST["action"] == 'confirm_delete' && $_POST["confirm"] == 'yes' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$ligne = new LigneTel($db);
|
||||
$ligne->fetch_by_id($_GET["id"]);
|
||||
@ -106,7 +106,7 @@ if ($_POST["action"] == 'changecontrat' && $user->rights->telephonie->ligne->cre
|
||||
}
|
||||
}
|
||||
|
||||
if ($_POST["action"] == 'addcontact')
|
||||
if ($_POST["action"] == 'addcontact' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$ligne = new LigneTel($db);
|
||||
$ligne->id = $_GET["id"];
|
||||
@ -119,7 +119,7 @@ if ($_POST["action"] == 'addcontact')
|
||||
}
|
||||
|
||||
|
||||
if ($_GET["action"] == 'delcontact')
|
||||
if ($_GET["action"] == 'delcontact' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$ligne = new LigneTel($db);
|
||||
$ligne->id = $_GET["id"];
|
||||
@ -131,7 +131,7 @@ if ($_GET["action"] == 'delcontact')
|
||||
|
||||
}
|
||||
|
||||
if ($_GET["action"] == 'active')
|
||||
if ($_GET["action"] == 'active' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$ligne = new LigneTel($db);
|
||||
$ligne->fetch_by_id($_GET["id"]);
|
||||
@ -148,7 +148,7 @@ if ($_GET["action"] == 'active')
|
||||
|
||||
}
|
||||
|
||||
if ($_GET["action"] == 'refuse')
|
||||
if ($_GET["action"] == 'refuse' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$ligne = new LigneTel($db);
|
||||
$ligne->fetch_by_id($_GET["id"]);
|
||||
@ -164,7 +164,7 @@ if ($_GET["action"] == 'refuse')
|
||||
}
|
||||
}
|
||||
|
||||
if ($_GET["action"] == 'resilier')
|
||||
if ($_GET["action"] == 'resilier' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$ligne = new LigneTel($db);
|
||||
$ligne->fetch_by_id($_GET["id"]);
|
||||
@ -175,7 +175,7 @@ if ($_GET["action"] == 'resilier')
|
||||
}
|
||||
}
|
||||
|
||||
if ($_GET["action"] == 'annuleresilier')
|
||||
if ($_GET["action"] == 'annuleresilier' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$ligne = new LigneTel($db);
|
||||
$ligne->fetch_by_id($_GET["id"]);
|
||||
@ -186,7 +186,7 @@ if ($_GET["action"] == 'annuleresilier')
|
||||
}
|
||||
}
|
||||
|
||||
if ($_GET["action"] == 'confirmresilier')
|
||||
if ($_GET["action"] == 'confirmresilier' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$ligne = new LigneTel($db);
|
||||
$ligne->fetch_by_id($_GET["id"]);
|
||||
@ -232,7 +232,7 @@ if ($_GET["action"] == 'confirmresilier')
|
||||
}
|
||||
}
|
||||
|
||||
if ($_GET["action"] == 'acommander')
|
||||
if ($_GET["action"] == 'acommander' && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$ligne = new LigneTel($db);
|
||||
$ligne->fetch_by_id($_GET["id"]);
|
||||
@ -244,7 +244,7 @@ if ($_GET["action"] == 'acommander')
|
||||
}
|
||||
|
||||
|
||||
if ($_POST["action"] == 'update' && $_POST["cancel"] <> $langs->trans("Cancel"))
|
||||
if ($_POST["action"] == 'update' && $_POST["cancel"] <> $langs->trans("Cancel") && $user->rights->telephonie->ligne->creer)
|
||||
{
|
||||
$ligne = new LigneTel($db);
|
||||
$ligne->id = $_GET["id"];
|
||||
@ -511,7 +511,20 @@ else
|
||||
}
|
||||
}
|
||||
|
||||
if ( $result == 1)
|
||||
if ($result == 1)
|
||||
{
|
||||
$client_comm = new Societe($db);
|
||||
$client_comm->fetch($ligne->client_comm_id, $user);
|
||||
}
|
||||
|
||||
if (!$client_comm->perm_read)
|
||||
{
|
||||
print decoct($client_comm->id);
|
||||
print "Lecture non authorisée";
|
||||
}
|
||||
|
||||
|
||||
if ($result == 1 && $client_comm->perm_read)
|
||||
{
|
||||
if ($_GET["action"] <> 'edit' && $_GET["action"] <> 're-edit')
|
||||
{
|
||||
@ -583,9 +596,6 @@ else
|
||||
print '</td></tr>';
|
||||
}
|
||||
|
||||
$client_comm = new Societe($db, $ligne->client_comm_id);
|
||||
$client_comm->fetch($ligne->client_comm_id);
|
||||
|
||||
print '<tr><td width="20%">Client</td><td>';
|
||||
print '<a href="'.DOL_URL_ROOT.'/telephonie/client/fiche.php?id='.$client_comm->id.'">';
|
||||
|
||||
@ -1295,7 +1305,7 @@ if ( $user->rights->telephonie->ligne->creer && $ligne->statut == 6)
|
||||
|
||||
print "\n<br>\n<div class=\"tabsAction\">\n";
|
||||
|
||||
if ($_GET["action"] == '')
|
||||
if ($_GET["action"] == '' && $result == 1 && $client_comm->perm_read)
|
||||
{
|
||||
|
||||
if ( $user->rights->telephonie->ligne->resilier && $ligne->statut == 3)
|
||||
|
||||
Loading…
Reference in New Issue
Block a user