Fix: refining permissions to modify an action without the right to remove
This commit is contained in:
parent
65c9b69f7c
commit
8c4e5d9144
@ -294,8 +294,8 @@ if ($_REQUEST["action"] == 'confirm_delete' && $_REQUEST["confirm"] == 'yes')
|
||||
$actioncomm = new ActionComm($db);
|
||||
$actioncomm->fetch($_GET["id"]);
|
||||
|
||||
if ($user->rights->agenda->myactions->delete
|
||||
|| $user->rights->agenda->allactions->delete)
|
||||
if ($user->rights->agenda->myactions->create
|
||||
|| $user->rights->agenda->allactions->create)
|
||||
{
|
||||
$result=$actioncomm->delete();
|
||||
|
||||
|
||||
Loading…
Reference in New Issue
Block a user