Fix: refining permissions to modify an action without the right to remove
This commit is contained in:
parent
65c9b69f7c
commit
8c4e5d9144
@ -294,8 +294,8 @@ if ($_REQUEST["action"] == 'confirm_delete' && $_REQUEST["confirm"] == 'yes')
|
|||||||
$actioncomm = new ActionComm($db);
|
$actioncomm = new ActionComm($db);
|
||||||
$actioncomm->fetch($_GET["id"]);
|
$actioncomm->fetch($_GET["id"]);
|
||||||
|
|
||||||
if ($user->rights->agenda->myactions->delete
|
if ($user->rights->agenda->myactions->create
|
||||||
|| $user->rights->agenda->allactions->delete)
|
|| $user->rights->agenda->allactions->create)
|
||||||
{
|
{
|
||||||
$result=$actioncomm->delete();
|
$result=$actioncomm->delete();
|
||||||
|
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user