lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix missing test on permission

Browse Source
This commit is contained in:
Laurent Destailleur 2023-01-06 17:47:44 +01:00
parent 98b37d6648
commit a850a735a8
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
htdocs/fourn/card.php
View File

@ -98,7 +98,7 @@ if (empty($reshook)) {
$action = ""; $action = "";
} }
if ($action == 'setsupplieraccountancycode') { if ($action == 'setsupplieraccountancycode' && $user->hasRight('societe', 'creer')) {
$result = $object->fetch($id); $result = $object->fetch($id);
$object->code_compta_fournisseur = GETPOST("supplieraccountancycode"); $object->code_compta_fournisseur = GETPOST("supplieraccountancycode");
$result = $object->update($object->id, $user, 1, 0, 1); $result = $object->update($object->id, $user, 1, 0, 1);
@ -107,7 +107,7 @@ if (empty($reshook)) {
} }
} }
// Set payment terms of the settlement // Set payment terms of the settlement
if ($action == 'setconditions' && $user->rights->societe->creer) { if ($action == 'setconditions' && $user->hasRight('societe', 'creer')) {
$object->fetch($id); $object->fetch($id);
$result = $object->setPaymentTerms(GETPOST('cond_reglement_supplier_id', 'int')); $result = $object->setPaymentTerms(GETPOST('cond_reglement_supplier_id', 'int'));
if ($result < 0) { if ($result < 0) {
@ -115,7 +115,7 @@ if (empty($reshook)) {
} }
} }
// Payment mode // Payment mode
if ($action == 'setmode' && $user->rights->societe->creer) { if ($action == 'setmode' && $user->hasRight('societe', 'creer')) {
$object->fetch($id); $object->fetch($id);
$result = $object->setPaymentMethods(GETPOST('mode_reglement_supplier_id', 'int')); $result = $object->setPaymentMethods(GETPOST('mode_reglement_supplier_id', 'int'));
if ($result < 0) { if ($result < 0) {
@ -124,7 +124,7 @@ if (empty($reshook)) {
} }
// Bank account // Bank account
if ($action == 'setbankaccount' && $user->rights->societe->creer) { if ($action == 'setbankaccount' && $user->hasRight('societe', 'creer')) {
$object->fetch($id); $object->fetch($id);
$result = $object->setBankAccount(GETPOST('fk_account', 'int')); $result = $object->setBankAccount(GETPOST('fk_account', 'int'));
if ($result < 0) { if ($result < 0) {
@ -133,7 +133,7 @@ if (empty($reshook)) {
} }
// update supplier order min amount // update supplier order min amount
if ($action == 'setsupplier_order_min_amount') { if ($action == 'setsupplier_order_min_amount' && $user->hasRight('societe', 'creer')) {
$object->fetch($id); $object->fetch($id);
$object->supplier_order_min_amount = price2num(GETPOST('supplier_order_min_amount', 'alpha')); $object->supplier_order_min_amount = price2num(GETPOST('supplier_order_min_amount', 'alpha'));
$result = $object->update($object->id, $user); $result = $object->update($object->id, $user);
@ -142,7 +142,7 @@ if (empty($reshook)) {
} }
} }
if ($action == 'update_extras') { if ($action == 'update_extras' && $user->hasRight('societe', 'creer')) {
$object->fetch($id); $object->fetch($id);
$object->oldcopy = dol_clone($object); $object->oldcopy = dol_clone($object);