lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

FIX #14104

Browse Source
This commit is contained in:
Laurent Destailleur 2020-06-20 18:34:19 +02:00
parent fe1f88d2ac
commit bb3320f103
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
htdocs/comm/action/class/api_agendaevents.class.php
View File

@ -248,7 +248,7 @@ class AgendaEvents extends DolibarrApi
throw new RestException(404, 'actioncomm not found'); throw new RestException(404, 'actioncomm not found');
} }
if (!DolibarrApi::_checkAccessToResource('actioncomm', $this->actioncomm->id)) { if (!DolibarrApi::_checkAccessToResource('actioncomm', $this->actioncomm->id, 'actioncomm', '', 'fk_soc', 'id')) {
throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login); throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login);
} }
foreach ($request_data as $field => $value) { foreach ($request_data as $field => $value) {
@ -290,7 +290,7 @@ class AgendaEvents extends DolibarrApi
throw new RestException(404, 'Agenda Event not found'); throw new RestException(404, 'Agenda Event not found');
} }
if (!DolibarrApi::_checkAccessToResource('actioncomm', $this->actioncomm->id)) { if (!DolibarrApi::_checkAccessToResource('actioncomm', $this->actioncomm->id, 'actioncomm', '', 'fk_soc', 'id')) {
throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login); throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login);
} }