lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #5311 from aspangaro/3.9-p22

Browse Source 
Fix: Accountancy - Access rights
This commit is contained in:
Laurent Destailleur 2016-06-06 13:37:18 +02:00
commit 62c93ddd12
2 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
htdocs/accountancy/admin/account.php
View File

@ -43,7 +43,9 @@ $search_pcgtype = GETPOST("search_pcgtype");
$search_pcgsubtype = GETPOST("search_pcgsubtype"); $search_pcgsubtype = GETPOST("search_pcgsubtype");
// Security check // Security check
if (! $user->admin) if ($user->societe_id > 0)
accessforbidden();
if (! $user->rights->accounting->chartofaccount)
accessforbidden(); accessforbidden();
$sortfield = GETPOST("sortfield", 'alpha'); $sortfield = GETPOST("sortfield", 'alpha');

9
htdocs/accountancy/admin/fiscalyear.php
View File

@ -1,5 +1,5 @@
<?php <?php
/* Copyright (C) 2013-2014 Alexandre Spangaro <aspangaro.dolibarr@gmail.com> /* Copyright (C) 2013-2016 Alexandre Spangaro <aspangaro.dolibarr@gmail.com>
* *
* This program is free software; you can redistribute it and/or modify * This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by * it under the terms of the GNU General Public License as published by
@ -30,12 +30,15 @@ $action = GETPOST('action');
$langs->load("admin"); $langs->load("admin");
$langs->load("compta"); $langs->load("compta");
if (! $user->admin) // Security check
if ($user->societe_id > 0)
accessforbidden();
if (! $user->rights->accounting->fiscalyear)
accessforbidden(); accessforbidden();
$error = 0; $error = 0;
// List of statut // List of status
static $tmpstatut2label = array ( static $tmpstatut2label = array (
'0' => 'OpenFiscalYear', '0' => 'OpenFiscalYear',
'1' => 'CloseFiscalYear' '1' => 'CloseFiscalYear'