From 8c4e5d9144096834fb6ec9f2d2a27147789d8e45 Mon Sep 17 00:00:00 2001 From: Regis Houssin Date: Tue, 10 Nov 2009 12:41:37 +0000 Subject: [PATCH] Fix: refining permissions to modify an action without the right to remove --- htdocs/comm/action/fiche.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/htdocs/comm/action/fiche.php b/htdocs/comm/action/fiche.php index 0ff75aa3498..9aa67180edc 100644 --- a/htdocs/comm/action/fiche.php +++ b/htdocs/comm/action/fiche.php @@ -294,8 +294,8 @@ if ($_REQUEST["action"] == 'confirm_delete' && $_REQUEST["confirm"] == 'yes') $actioncomm = new ActionComm($db); $actioncomm->fetch($_GET["id"]); - if ($user->rights->agenda->myactions->delete - || $user->rights->agenda->allactions->delete) + if ($user->rights->agenda->myactions->create + || $user->rights->agenda->allactions->create) { $result=$actioncomm->delete();