diff --git a/htdocs/bookmarks/fiche.php b/htdocs/bookmarks/fiche.php index d5caac4612e..67e2dd903c8 100644 --- a/htdocs/bookmarks/fiche.php +++ b/htdocs/bookmarks/fiche.php @@ -28,6 +28,11 @@ require_once DOL_DOCUMENT_ROOT.'/bookmarks/class/bookmark.class.php'; $langs->load("other"); +// Security check +if (! $user->rights->bookmark->lire) { + restrictedArea($user, 'bookmarks'); +} + $id=GETPOST("id"); $action=GETPOST("action","alpha"); $title=GETPOST("title","alpha"); diff --git a/htdocs/bookmarks/liste.php b/htdocs/bookmarks/liste.php index d826c8053d0..e3cd7f8af41 100644 --- a/htdocs/bookmarks/liste.php +++ b/htdocs/bookmarks/liste.php @@ -25,6 +25,11 @@ require '../main.inc.php'; require_once DOL_DOCUMENT_ROOT.'/bookmarks/class/bookmark.class.php'; +// Security check +if (! $user->rights->bookmark->lire) { + restrictedArea($user, 'bookmarks'); +} + $sortfield = GETPOST("sortfield",'alpha'); $sortorder = GETPOST("sortorder",'alpha'); $page = GETPOST("page",'int');