diff --git a/htdocs/projet/index.php b/htdocs/projet/index.php index 5d272dd4e3f..0bb5aa95996 100644 --- a/htdocs/projet/index.php +++ b/htdocs/projet/index.php @@ -36,31 +36,12 @@ if (!$user->rights->projet->lire) accessforbidden(); /* * Sécurité accés client */ -$projetid=''; -if ($_GET["id"]) { $projetid=$_GET["id"]; } - -if ($projetid == '') accessforbidden(); if ($user->societe_id > 0) { $socidp = $user->societe_id; } -// Protection restriction commercial -if ($projetid) -{ - $sql = "SELECT sc.fk_soc, p.rowid, p.fk_soc"; - $sql .= " FROM ".MAIN_DB_PREFIX."societe_commerciaux as sc, ".MAIN_DB_PREFIX."projet as p"; - $sql .= " WHERE p.rowid = ".$projetid; - if (!$user->rights->commercial->client->voir && !$socidp) $sql .= " AND sc.fk_soc = p.fk_soc AND fk_user = ".$user->id; - if ($socidp) $sql .= " AND p.fk_soc = ".$socidp; - - if ( $db->query($sql) ) - { - if ( $db->num_rows() == 0) accessforbidden(); - } -} - llxHeader("",$langs->trans("Projects"),"Projet"); print_fiche_titre($langs->trans("ProjectsArea"));