lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Ajout droits

Browse Source
This commit is contained in:
Rodolphe Quiedeville 2003-08-06 12:38:46 +00:00
parent 89f3447cf7
commit a564a830d0
1 changed files with 40 additions and 42 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
htdocs/compta/facture.php3
View File

@ -20,6 +20,11 @@
* *
*/ */
require("./pre.inc.php3"); require("./pre.inc.php3");
$user->getrights('facture');
if (!$user->rights->produit->lire)
accessforbidden();
require("../facture.class.php3"); require("../facture.class.php3");
require("../lib/CMailFile.class.php3"); require("../lib/CMailFile.class.php3");
require("../paiement.class.php"); require("../paiement.class.php");
@ -30,8 +35,6 @@ require("../contrat/contrat.class.php");
llxHeader(); llxHeader();
$db = new Db();
/* /*
* Sécurité accés client * Sécurité accés client
*/ */
@ -130,7 +133,7 @@ if ($action == 'deleteline')
$result = $fac->deleteline($rowid); $result = $fac->deleteline($rowid);
} }
if ($action == 'delete') if ($action == 'delete' && $user->rights->facture->supprimer)
{ {
$fac = new Facture($db); $fac = new Facture($db);
$fac->delete($facid); $fac->delete($facid);
@ -681,7 +684,7 @@ else
{ {
print "<p><TABLE border=\"1\" width=\"100%\" cellspacing=\"0\" cellpadding=\"4\"><tr>"; print "<p><TABLE border=\"1\" width=\"100%\" cellspacing=\"0\" cellpadding=\"4\"><tr>";
if ($obj->statut == 0) if ($obj->statut == 0 && $user->rights->facture->supprimer)
{ {
print "<td align=\"center\" width=\"25%\">[<a href=\"$PHP_SELF?facid=$facid&action=delete\">Supprimer</a>]</td>"; print "<td align=\"center\" width=\"25%\">[<a href=\"$PHP_SELF?facid=$facid&action=delete\">Supprimer</a>]</td>";
} }
@ -716,7 +719,7 @@ else
print "<td align=\"center\" width=\"25%\">-</td>"; print "<td align=\"center\" width=\"25%\">-</td>";
} }
if ($obj->statut == 0) if ($obj->statut == 0 && $obj->total > 0)
{ {
print "<td align=\"center\" bgcolor=\"#e0e0e0\" width=\"25%\">[<a href=\"$PHP_SELF?facid=$facid&action=valid\">Valider</a>]</td>"; print "<td align=\"center\" bgcolor=\"#e0e0e0\" width=\"25%\">[<a href=\"$PHP_SELF?facid=$facid&action=valid\">Valider</a>]</td>";
} }
@ -942,30 +945,26 @@ else
{ {
$page = 0 ; $page = 0 ;
} }
if ($user->rights->facture->lire)
{
$limit = $conf->liste_limit; $limit = $conf->liste_limit;
$offset = $limit * $page ; $offset = $limit * $page ;
if ($sortorder == "") if ($sortorder == "")
{
$sortorder="DESC"; $sortorder="DESC";
}
if ($sortfield == "") if ($sortfield == "")
{
$sortfield="f.datef"; $sortfield="f.datef";
}
$sql = "SELECT s.nom,s.idp,f.facnumber,f.amount,".$db->pdate("f.datef")." as df,f.paye,f.rowid as facid, f.fk_statut"; $sql = "SELECT s.nom,s.idp,f.facnumber,f.amount,".$db->pdate("f.datef")." as df,f.paye,f.rowid as facid, f.fk_statut";
$sql .= " FROM llx_societe as s,llx_facture as f WHERE f.fk_soc = s.idp"; $sql .= " FROM llx_societe as s,llx_facture as f WHERE f.fk_soc = s.idp";
if ($socidp) if ($socidp)
{
$sql .= " AND s.idp = $socidp"; $sql .= " AND s.idp = $socidp";
}
if ($month > 0) if ($month > 0)
{
$sql .= " AND date_format(f.datef, '%m') = $month"; $sql .= " AND date_format(f.datef, '%m') = $month";
}
if ($filtre) if ($filtre)
{ {
@ -978,14 +977,13 @@ else
} }
if ($year > 0) if ($year > 0)
{
$sql .= " AND date_format(f.datef, '%Y') = $year"; $sql .= " AND date_format(f.datef, '%Y') = $year";
}
$sql .= " ORDER BY $sortfield $sortorder, rowid DESC "; $sql .= " ORDER BY $sortfield $sortorder, rowid DESC ";
$sql .= $db->plimit($limit + 1,$offset); $sql .= $db->plimit($limit + 1,$offset);
$result = $db->query($sql); $result = $db->query($sql);
}
if ($result) if ($result)
{ {
$num = $db->num_rows(); $num = $db->num_rows();