lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixes expensereport downloads

Browse Source
This commit is contained in:
Vincent Dieltiens 2022-02-15 09:51:28 +01:00
parent f2d5e43381
commit af0000d568
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/core/lib/security.lib.php
View File

@ -892,11 +892,13 @@ function checkUserAccessToObject($user, array $featuresarray, $object = 0, $tabl
} }
if ($feature == 'expensereport') { if ($feature == 'expensereport') {
$useridtocheck = $object->fk_user_author; $useridtocheck = $object->fk_user_author;
if (!$user->rights->expensereport->readall) {
if (!in_array($useridtocheck, $childids)) { if (!in_array($useridtocheck, $childids)) {
return false; return false;
} }
} }
} }
}
if ($sql) { if ($sql) {
$resql = $db->query($sql); $resql = $db->query($sql);