Merge pull request #14400 from atm-quentin/FIX_project_info_right_access

fix right project info.php
This commit is contained in:
Laurent Destailleur 2020-08-07 10:01:41 +02:00 committed by GitHub
commit 921be56379
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -63,7 +63,7 @@ $search_agenda_label=GETPOST('search_agenda_label');
$id = GETPOST("id", 'int');
$socid=0;
//if ($user->societe_id > 0) $socid = $user->societe_id; // For external user, no check is done on company because readability is managed by public status of project and assignement.
$result=restrictedArea($user, 'projet', $id, '');
$result=restrictedArea($user, 'projet', $id, 'projet&project');
if (!$user->rights->projet->lire) accessforbidden();