lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

FIX #17060

Browse Source
This commit is contained in:
Laurent Destailleur 2021-04-02 22:20:13 +02:00
parent c2fe28c02b
commit 60e13f6727
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
htdocs/fourn/class/api_supplier_orders.class.php
View File

@ -72,7 +72,7 @@ class SupplierOrders extends DolibarrApi
throw new RestException(404, 'Supplier order not found'); throw new RestException(404, 'Supplier order not found');
} }
if (!DolibarrApi::_checkAccessToResource('fournisseur', $this->order->id, '', 'commande')) { if (!DolibarrApi::_checkAccessToResource('fournisseur', $this->order->id, 'commande_fournisseur', 'commande')) {
throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login); throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login);
} }
@ -239,7 +239,7 @@ class SupplierOrders extends DolibarrApi
throw new RestException(404, 'Supplier order not found'); throw new RestException(404, 'Supplier order not found');
} }
if (!DolibarrApi::_checkAccessToResource('fournisseur', $this->order->id, '', 'commande')) { if (!DolibarrApi::_checkAccessToResource('fournisseur', $this->order->id, 'commande_fournisseur', 'commande')) {
throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login); throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login);
} }
@ -270,7 +270,7 @@ class SupplierOrders extends DolibarrApi
throw new RestException(404, 'Supplier order not found'); throw new RestException(404, 'Supplier order not found');
} }
if (!DolibarrApi::_checkAccessToResource('fournisseur', $this->order->id, '', 'commande')) { if (!DolibarrApi::_checkAccessToResource('fournisseur', $this->order->id, 'commande_fournisseur', 'commande')) {
throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login); throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login);
} }
@ -315,7 +315,7 @@ class SupplierOrders extends DolibarrApi
throw new RestException(404, 'Order not found'); throw new RestException(404, 'Order not found');
} }
if (!DolibarrApi::_checkAccessToResource('fournisseur', $this->order->id, '', 'commande')) { if (!DolibarrApi::_checkAccessToResource('fournisseur', $this->order->id, 'commande_fournisseur', 'commande')) {
throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login); throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login);
} }