lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: mise en fonction de la vrification des droits d'accs users, clients et commerciaux

Browse Source
This commit is contained in:
Regis Houssin 2007-06-21 18:10:45 +00:00
parent 537cd574f2
commit 4ff373d2e0
4 changed files with 13 additions and 38 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
htdocs/comm/propal/apercu.php
View File

@ -36,24 +36,14 @@ if ($conf->projet->enabled) {
require_once(DOL_DOCUMENT_ROOT."/project.class.php"); require_once(DOL_DOCUMENT_ROOT."/project.class.php");
} }
$user->getrights('propale');
if (!$user->rights->propale->lire)
accessforbidden();
$langs->load('propal'); $langs->load('propal');
$langs->load("bills"); $langs->load("bills");
$langs->load('compta'); $langs->load('compta');
// Sécurité accés client $propalid = isset($_GET["propalid"])?$_GET["propalid"]:'';
if ($user->societe_id > 0)
{
$action = '';
$socid = $user->societe_id;
}
// Sécurité d'accès client et commerciaux
$socid = restrictedArea($user, 'propale', $propalid, 'propal');
llxHeader(); llxHeader();
@ -85,11 +75,9 @@ if ($_GET["propalid"] > 0)
$sql.= ' p.fk_user_author, p.fk_user_valid, p.fk_user_cloture, p.datec, p.date_valid, p.date_cloture'; $sql.= ' p.fk_user_author, p.fk_user_valid, p.fk_user_cloture, p.datec, p.date_valid, p.date_cloture';
$sql.= ' FROM '.MAIN_DB_PREFIX.'societe as s, '.MAIN_DB_PREFIX.'propal as p'; $sql.= ' FROM '.MAIN_DB_PREFIX.'societe as s, '.MAIN_DB_PREFIX.'propal as p';
$sql.= ' WHERE p.fk_soc = s.rowid AND p.rowid = '.$propal->id; $sql.= ' WHERE p.fk_soc = s.rowid AND p.rowid = '.$propal->id;
if ($socid) $sql .= ' AND s.rowid = '.$socid;
$result = $db->query($sql); $result = $db->query($sql);
if ($result) { if ($result) {
if ($db->num_rows($result)) { if ($db->num_rows($result)) {
$obj = $db->fetch_object($result); $obj = $db->fetch_object($result);

10
htdocs/comm/propal/document.php
View File

@ -33,17 +33,15 @@ require('./pre.inc.php');
require_once(DOL_DOCUMENT_ROOT."/propal.class.php"); require_once(DOL_DOCUMENT_ROOT."/propal.class.php");
require_once(DOL_DOCUMENT_ROOT."/lib/propal.lib.php"); require_once(DOL_DOCUMENT_ROOT."/lib/propal.lib.php");
$user->getrights('propale');
if (!$user->rights->propale->lire)
accessforbidden();
$langs->load('compta'); $langs->load('compta');
$langs->load('other'); $langs->load('other');
$propalid=empty($_GET['propalid']) ? 0 : intVal($_GET['propalid']);
$action=empty($_GET['action']) ? (empty($_POST['action']) ? '' : $_POST['action']) : $_GET['action']; $action=empty($_GET['action']) ? (empty($_POST['action']) ? '' : $_POST['action']) : $_GET['action'];
$propalid = isset($_GET["propalid"])?$_GET["propalid"]:'';
// Sécurité d'accès client et commerciaux
$socid = restrictedArea($user, 'propale', $propalid, 'propal');
/* /*

10
htdocs/comm/propal/info.php
View File

@ -35,14 +35,10 @@ require_once(DOL_DOCUMENT_ROOT."/lib/propal.lib.php");
$langs->load('propal'); $langs->load('propal');
$langs->load('compta'); $langs->load('compta');
$user->getrights('propale'); $propalid = isset($_GET["propalid"])?$_GET["propalid"]:'';
if (! $user->rights->propale->lire)
accessforbidden();
if (! $_GET['propalid']) // Sécurité d'accès client et commerciaux
{ $socid = restrictedArea($user, 'propale', $propalid, 'propal');
accessforbidden();
}
/* /*

13
htdocs/comm/propal/note.php
View File

@ -37,17 +37,10 @@ $langs->load('propal');
$langs->load('compta'); $langs->load('compta');
$langs->load('bills'); $langs->load('bills');
$user->getrights('propale'); $propalid = isset($_GET["propalid"])?$_GET["propalid"]:'';
if (!$user->rights->propale->lire)
accessforbidden();
// Sécurité d'accès client et commerciaux
// Sécurité accés client $socid = restrictedArea($user, 'propale', $propalid, 'propal');
if ($user->societe_id > 0)
{
unset($_GET['action']);
$socid = $user->societe_id;
}
/******************************************************************************/ /******************************************************************************/
/* Actions */ /* Actions */