diff --git a/htdocs/core/ajax/loadinplace.php b/htdocs/core/ajax/loadinplace.php index 48fd654b3e4..5a1865223e9 100644 --- a/htdocs/core/ajax/loadinplace.php +++ b/htdocs/core/ajax/loadinplace.php @@ -63,9 +63,10 @@ if((isset($_GET['field']) && ! empty($_GET['field'])) if ($element == 'propal') $element = 'propale'; else if ($element == 'fichinter') $element = 'ficheinter'; - if (($element == 'payment' && $user->rights->facture->paiement) - || $user->rights->$element->lire || $user->rights->$element->read - || $user->rights->$element->$subelement->lire || $user->rights->$element->$subelement->read) + if ($user->rights->$element->lire || $user->rights->$element->read + || $user->rights->$element->$subelement->lire || $user->rights->$element->$subelement->read + || ($element == 'payment' && $user->rights->facture->lire) + || ($element == 'payment_supplier' && $user->rights->fournisseur->facture->lire)) { if ($type == 'select') { diff --git a/htdocs/core/ajax/saveinplace.php b/htdocs/core/ajax/saveinplace.php index e88eda87e9f..ae6313012fd 100644 --- a/htdocs/core/ajax/saveinplace.php +++ b/htdocs/core/ajax/saveinplace.php @@ -69,9 +69,10 @@ if((isset($_POST['field']) && ! empty($_POST['field'])) if ($element == 'propal') $element = 'propale'; else if ($element == 'fichinter') $element = 'ficheinter'; - if (($element == 'payment' && $user->rights->facture->paiement) - || $user->rights->$element->creer || $user->rights->$element->write - || $user->rights->$element->$subelement->creer || $user->rights->$element->$subelement->write) + if ($user->rights->$element->creer || $user->rights->$element->write + || $user->rights->$element->$subelement->creer || $user->rights->$element->$subelement->write + || ($element == 'payment' && $user->rights->facture->paiement) + || ($element == 'payment_supplier' && $user->rights->fournisseur->facture->creer)) { // Clean parameters $newvalue = trim($value);