lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix perm

Browse Source
This commit is contained in:
Laurent Destailleur 2020-02-18 22:49:53 +01:00
parent ac2b13ea52
commit b859d4670a
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
htdocs/api/class/api_documents.class.php
View File

@ -279,7 +279,8 @@ class Documents extends DolibarrApi
{
require_once DOL_DOCUMENT_ROOT.'/user/class/user.class.php';
if (!DolibarrApiAccess::$user->rights->societe->lire) {
// Can get doc if has permission to read all user or if it is user itself
if (!DolibarrApiAccess::$user->rights->user->user->lire && $user->id != $id) {
throw new RestException(401);
}