From ca6f7cfe83e4cfb7678c1c6fb103422ab205fd73 Mon Sep 17 00:00:00 2001
From: Rodolphe Quiedeville <rodolphe@quiedeville.org>
Date: Tue, 30 Aug 2005 13:08:14 +0000
Subject: [PATCH] Modif permission

---
 htdocs/telephonie/tarifs/grille.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/htdocs/telephonie/tarifs/grille.php b/htdocs/telephonie/tarifs/grille.php
index 8dcfe5ad527..00a12ba263b 100644
--- a/htdocs/telephonie/tarifs/grille.php
+++ b/htdocs/telephonie/tarifs/grille.php
@@ -25,7 +25,7 @@ $page = $_GET["page"];
 $sortorder = $_GET["sortorder"];
 $sortfield = $_GET["sortfield"];
 
-$sql = "SELECT pwrite ";
+$sql = "SELECT pwrite, pread ";
 $sql .= " FROM ".MAIN_DB_PREFIX."telephonie_tarif_grille_rights ";
 $sql .= " WHERE fk_grille = '".$_GET["id"]."'";
 $sql .= " AND fk_user = ".$user->id;
@@ -42,10 +42,14 @@ if ($resql)
     {
       $row = $db->fetch_row($resql);
       $auth_write = $row[0];
+      $auth_read = $row[1];
     }
   $db->free($resql);
 }
 
+if ($auth_read == 0)
+  accessforbidden();
+
 /*
  *
  *