lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: Si on a droit de modifier mot de passe on ne doit pas pour autant avoir droit de modifier autre info

Browse Source
This commit is contained in:
Laurent Destailleur 2006-06-13 22:52:40 +00:00
parent 9f942f06eb
commit a386799a43
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
htdocs/user/fiche.php
View File

@ -34,17 +34,18 @@ require("./pre.inc.php");
require_once(DOL_DOCUMENT_ROOT."/contact.class.php"); require_once(DOL_DOCUMENT_ROOT."/contact.class.php");
// Defini si peux lire/modifier permisssions // Defini si peux creer un utilisateur ou gerer groupe sur un utilisateur
$canadduser=($user->admin || $user->rights->user->user->creer); $canadduser=($user->admin || $user->rights->user->user->creer);
// Defini si peux lire/modifier permisssions
$canreadperms=($user->admin || $user->rights->user->user->lire); $canreadperms=($user->admin || $user->rights->user->user->lire);
$caneditperms=($user->admin || $user->rights->user->user->creer); $caneditperms=($user->admin || $user->rights->user->user->creer);
$candisableperms=($user->admin || $user->rights->user->user->supprimer); $candisableperms=($user->admin || $user->rights->user->user->supprimer);
// Defini si peux lire/modifier fiche ou mot de passe // Defini si peux lire/modifier info user ou mot de passe
if ($_GET["id"]) if ($_GET["id"])
{ {
// $user est le user qui edite, $_GET["id"] est l'id de l'utilisateur edité
$caneditfield=( (($user->id == $_GET["id"]) && $user->rights->user->self->creer) $caneditfield=( (($user->id == $_GET["id"]) && $user->rights->user->self->creer)
|| (($user->id != $_GET["id"]) && $user->rights->user->user->creer) ); || (($user->id != $_GET["id"]) && $user->rights->user->user->creer) );
$caneditpassword=( (($user->id == $_GET["id"]) && $user->rights->user->self->password) $caneditpassword=( (($user->id == $_GET["id"]) && $user->rights->user->self->password)
|| (($user->id != $_GET["id"]) && $user->rights->user->user->password) ); || (($user->id != $_GET["id"]) && $user->rights->user->user->password) );
} }