From 3e41f69d3da7ce9116775dc68a3e14361969f26f Mon Sep 17 00:00:00 2001 From: Laurent Destailleur Date: Sun, 14 Feb 2021 21:56:15 +0100 Subject: [PATCH] Fix bad permission check --- htdocs/adherents/subscription/card.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/htdocs/adherents/subscription/card.php b/htdocs/adherents/subscription/card.php index d4396cefb00..c2e2bfd1d44 100644 --- a/htdocs/adherents/subscription/card.php +++ b/htdocs/adherents/subscription/card.php @@ -58,7 +58,8 @@ $permissiontoedit = $user->rights->adherent->cotisation->creer; // Used by the i $hookmanager->initHooks(array('subscriptioncard', 'globalcard')); // Security check -$result = restrictedArea($user, 'subscription', $id, '', '', 'socid', 'rowid'); +$result = restrictedArea($user, 'subscription', 0); // TODO Check on object id + /* * Actions