lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: If user has no permission to see all projects, see only its projects

Browse Source
This commit is contained in:
Laurent Destailleur 2010-05-23 18:51:03 +00:00
parent ad8ab9c7fd
commit 52e9105234
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
htdocs/projet/index.php
View File

@ -29,15 +29,14 @@ require("../main.inc.php");
require_once(DOL_DOCUMENT_ROOT."/projet/class/project.class.php"); require_once(DOL_DOCUMENT_ROOT."/projet/class/project.class.php");
require_once(DOL_DOCUMENT_ROOT."/lib/project.lib.php"); require_once(DOL_DOCUMENT_ROOT."/lib/project.lib.php");
$mine = $_REQUEST['mode']=='mine' ? 1 : 0;
$langs->load("projects"); $langs->load("projects");
$mine = $_REQUEST['mode']=='mine' ? 1 : 0;
// Security check // Security check
if ($user->societe_id > 0) if (! $user->rights->projet->all->lire) $mine=1;
{ if ($user->societe_id > 0) $socid = $user->societe_id;
$socid = $user->societe_id;
}
if (!$user->rights->projet->lire) accessforbidden(); if (!$user->rights->projet->lire) accessforbidden();
@ -49,6 +48,7 @@ $socstatic=new Societe($db);
$projectstatic=new Project($db); $projectstatic=new Project($db);
$projectsListId = $projectstatic->getProjectsAuthorizedForUser($user,$mine,1); $projectsListId = $projectstatic->getProjectsAuthorizedForUser($user,$mine,1);
//var_dump($projectsListId);
llxHeader("",$langs->trans("Projects"),"EN:Module_Projects|FR:Module_Projets|ES:Módulo_Proyectos"); llxHeader("",$langs->trans("Projects"),"EN:Module_Projects|FR:Module_Projets|ES:Módulo_Proyectos");