From bd35395d13c2e049f4edc4ab00047ce719a87789 Mon Sep 17 00:00:00 2001
From: Laurent Destailleur <eldy@destailleur.fr>
Date: Sun, 14 Sep 2014 12:02:40 +0200
Subject: [PATCH] Fix: missing permissions

---
 htdocs/user/fiche.php | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/htdocs/user/fiche.php b/htdocs/user/fiche.php
index d5c5d71e328..ffe6336bc41 100644
--- a/htdocs/user/fiche.php
+++ b/htdocs/user/fiche.php
@@ -942,7 +942,7 @@ if (($action == 'create') || ($action == 'adduserldap'))
     print '</td>';
     print "</tr>\n";
 
-	if ($conf->salaries->enabled)
+	if ($conf->salaries->enabled && ! empty($user->rights->salaries->read))
 	{
 		$langs->load("salaries");
 
@@ -1268,7 +1268,7 @@ else
             print '</td>';
             print "</tr>\n";
 
-            if ($conf->salaries->enabled)
+            if ($conf->salaries->enabled && ! empty($user->rights->salaries->read))
             {
             	$langs->load("salaries");
 
@@ -1957,11 +1957,11 @@ else
             print '</td>';
             print "</tr>\n";
 
-            $langs->load("salaries");
-
-            if ($conf->salaries->enabled)
+            if ($conf->salaries->enabled && ! empty($user->rights->salaries->read))
             {
-			    // THM
+            	$langs->load("salaries");
+
+            	// THM
 			    print '<tr><td valign="top">'.$langs->trans("THM").'</td>';
 			    print '<td>';
 			    print '<input size="8" type="text" name="thm" value="'.price2num(GETPOST('thm')?GETPOST('thm'):$object->thm).'">';