Merge pull request #9005 from dolibarr95/patch-47

FIX: Add rights check in shipping
This commit is contained in:
Laurent Destailleur 2018-06-22 14:54:47 +02:00 committed by GitHub
commit 430dea917e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -503,12 +503,16 @@ if (empty($reshook))
}
// Action update
else if ($action == 'settracking_number' || $action == 'settracking_url'
|| $action == 'settrueWeight'
|| $action == 'settrueWidth'
|| $action == 'settrueHeight'
|| $action == 'settrueDepth'
|| $action == 'setshipping_method_id')
else if (
($action == 'settracking_number'
|| $action == 'settracking_url'
|| $action == 'settrueWeight'
|| $action == 'settrueWidth'
|| $action == 'settrueHeight'
|| $action == 'settrueDepth'
|| $action == 'setshipping_method_id')
&& $user->rights->expedition->creer
)
{
$error=0;