lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Ajout de la permission "consulter tous les clients" dans le module commercial, afin

Browse Source 
qu'un commercial puisse voir que les clients qui lui sont affects.
This commit is contained in:
Regis Houssin 2006-03-07 18:11:36 +00:00
parent cfb14bd772
commit a60f90ac51
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
htdocs/contact/index.php
View File

@ -88,19 +88,31 @@ if ($_POST["button_removefilter"])
* *
*/ */
if ($user->rights->commercial->client->voir)
{
$sql = "SELECT s.idp, s.nom, p.idp as cidp, p.name, p.firstname, p.email, p.phone, p.phone_mobile, p.fax "; $sql = "SELECT s.idp, s.nom, p.idp as cidp, p.name, p.firstname, p.email, p.phone, p.phone_mobile, p.fax ";
$sql .= "FROM ".MAIN_DB_PREFIX."socpeople as p "; $sql .= "FROM ".MAIN_DB_PREFIX."socpeople as p ";
$sql .= "LEFT JOIN ".MAIN_DB_PREFIX."societe as s ON (s.idp = p.fk_soc) "; $sql .= "LEFT JOIN ".MAIN_DB_PREFIX."societe as s ON (s.idp = p.fk_soc) ";
$sql .= "WHERE 1=1 "; $sql .= "WHERE 1=1 ";
}
else
{
$sql = "SELECT s.idp, s.nom, p.idp as cidp, p.name, p.firstname, p.email, p.phone, p.phone_mobile, p.fax, ";
$sql .= "sc.fk_soc, sc.fk_user ";
$sql .= "FROM ".MAIN_DB_PREFIX."socpeople as p, ".MAIN_DB_PREFIX."societe_commerciaux as sc ";
$sql .= "LEFT JOIN ".MAIN_DB_PREFIX."societe as s ON (s.idp = p.fk_soc) ";
$sql .= "WHERE 1=1 ";
}
if ($_GET["userid"]) // statut commercial if ($_GET["userid"]) // statut commercial
{ {
$sql .= " AND p.fk_user=".$_GET["userid"]; $sql .= " AND p.fk_user=".$_GET["userid"];
} }
if ($search_nom) // filtre sur le nom if (!$user->rights->commercial->client->voir) //restriction
{ {
$sql .= " AND p.name like '%".$search_nom."%'"; $sql .= " AND s.idp = sc.fk_soc AND sc.fk_user = " .$user->id;
} }
if ($search_prenom) // filtre sur le prenom if ($search_prenom) // filtre sur le prenom
{ {
$sql .= " AND p.firstname like '%".$search_prenom."%'"; $sql .= " AND p.firstname like '%".$search_prenom."%'";