Ajout de la permission "consulter tous les clients" dans le module commercial, afin

qu'un commercial puisse voir que les clients qui lui sont affects.
This commit is contained in:
Regis Houssin 2006-03-09 10:38:12 +00:00
parent bea4dc80f2
commit be42540d88

View File

@ -51,15 +51,26 @@ $offset = $limit * $page ;
$pageprev = $page - 1;
$pagenext = $page + 1;
// Sécurité accés client
$socidp = $_GET["socidp"];
if ($user->societe_id > 0)
{
$action = '';
$socidp = $user->societe_id;
}
$sql = "SELECT s.nom, s.idp,"; // Ou
$sql.= " d.rowid, ".$db->pdate("d.dated")." as dd, d.km, "; // Comment
$sql.= " u.name, u.firstname"; // Qui
$sql.= " FROM ".MAIN_DB_PREFIX."societe as s, ".MAIN_DB_PREFIX."deplacement as d, ".MAIN_DB_PREFIX."user as u ";
if (!$user->rights->commercial->client->voir && !$socidp) $sql .= ", sc.fk_soc, sc.fk_user";
$sql.= " FROM ".MAIN_DB_PREFIX."societe as s, ".MAIN_DB_PREFIX."deplacement as d, ".MAIN_DB_PREFIX."user as u";
if (!$user->rights->commercial->client->voir && !$socidp) $sql .= ", ".MAIN_DB_PREFIX."societe_commerciaux as sc";
$sql.= " WHERE d.fk_soc = s.idp AND d.fk_user = u.rowid";
if (!$user->rights->commercial->client->voir && !$socidp) $sql .= " AND s.idp = sc.fk_soc AND sc.fk_user = " .$user->id;
if ($user->societe_id > 0)
if ($socidp)
{
$sql .= " AND s.idp = " . $user->societe_id;
$sql .= " AND s.idp = $socidp";
}
$sql .= " ORDER BY $sortfield $sortorder " . $db->plimit( $limit + 1 ,$offset);