diff --git a/htdocs/comm/fiche.php b/htdocs/comm/fiche.php index 18cae08c936..7e18bf08193 100644 --- a/htdocs/comm/fiche.php +++ b/htdocs/comm/fiche.php @@ -52,6 +52,20 @@ if ($user->societe_id > 0) $socidp = $user->societe_id; } +// Protection restriction commercial +if (!$user->rights->commercial->client->voir && $socidp) +{ + $sql = "SELECT sc.fk_soc, sc.fk_user"; + $sql .= " FROM ".MAIN_DB_PREFIX."societe_commerciaux as sc"; + $sql .= " WHERE sc.fk_soc = ".$socidp." AND sc.fk_user = ".$user->id; + + $resultp=$db->query($sql); + if (!$resultp) + { + accessforbidden(); + } +} + $sortorder=$_GET["sortorder"]; $sortfield=$_GET["sortfield"];