lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix bad permission check

Browse Source
This commit is contained in:
Laurent Destailleur 2021-02-14 21:56:15 +01:00
parent 4a35600e62
commit 3e41f69d3d
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
htdocs/adherents/subscription/card.php
View File

@ -58,7 +58,8 @@ $permissiontoedit = $user->rights->adherent->cotisation->creer; // Used by the i
$hookmanager->initHooks(array('subscriptioncard', 'globalcard')); $hookmanager->initHooks(array('subscriptioncard', 'globalcard'));
// Security check // Security check
$result = restrictedArea($user, 'subscription', $id, '', '', 'socid', 'rowid'); $result = restrictedArea($user, 'subscription', 0); // TODO Check on object id
/* /*
* Actions * Actions