From 97081affdcd96e33a2a6cc22b6754bd7232fc9dc Mon Sep 17 00:00:00 2001 From: Laurent Destailleur Date: Tue, 18 Feb 2020 22:50:13 +0100 Subject: [PATCH] Fix perm --- htdocs/api/class/api_documents.class.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/htdocs/api/class/api_documents.class.php b/htdocs/api/class/api_documents.class.php index c2b57158aec..98970c67546 100644 --- a/htdocs/api/class/api_documents.class.php +++ b/htdocs/api/class/api_documents.class.php @@ -280,7 +280,7 @@ class Documents extends DolibarrApi require_once DOL_DOCUMENT_ROOT.'/user/class/user.class.php'; // Can get doc if has permission to read all user or if it is user itself - if (!DolibarrApiAccess::$user->rights->user->user->lire && $user->id != $id) { + if (!DolibarrApiAccess::$user->rights->user->user->lire && DolibarrApiAccess::$user->id != $id) { throw new RestException(401); }