lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: bad rights

Browse Source
This commit is contained in:
Regis Houssin 2012-02-20 21:17:05 +01:00
parent 47eaaf5905
commit cd23f8a040
2 changed files with 8 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
htdocs/core/ajax/loadinplace.php
View File

@ -63,9 +63,10 @@ if((isset($_GET['field']) && ! empty($_GET['field']))
if ($element == 'propal') $element = 'propale'; if ($element == 'propal') $element = 'propale';
else if ($element == 'fichinter') $element = 'ficheinter'; else if ($element == 'fichinter') $element = 'ficheinter';
if (($element == 'payment' && $user->rights->facture->paiement) if ($user->rights->$element->lire || $user->rights->$element->read
|| $user->rights->$element->lire || $user->rights->$element->read || $user->rights->$element->$subelement->lire || $user->rights->$element->$subelement->read
|| $user->rights->$element->$subelement->lire || $user->rights->$element->$subelement->read) || ($element == 'payment' && $user->rights->facture->lire)
|| ($element == 'payment_supplier' && $user->rights->fournisseur->facture->lire))
{ {
if ($type == 'select') if ($type == 'select')
{ {

7
htdocs/core/ajax/saveinplace.php
View File

@ -69,9 +69,10 @@ if((isset($_POST['field']) && ! empty($_POST['field']))
if ($element == 'propal') $element = 'propale'; if ($element == 'propal') $element = 'propale';
else if ($element == 'fichinter') $element = 'ficheinter'; else if ($element == 'fichinter') $element = 'ficheinter';
if (($element == 'payment' && $user->rights->facture->paiement) if ($user->rights->$element->creer || $user->rights->$element->write
|| $user->rights->$element->creer || $user->rights->$element->write || $user->rights->$element->$subelement->creer || $user->rights->$element->$subelement->write
|| $user->rights->$element->$subelement->creer || $user->rights->$element->$subelement->write) || ($element == 'payment' && $user->rights->facture->paiement)
|| ($element == 'payment_supplier' && $user->rights->fournisseur->facture->creer))
{ {
// Clean parameters // Clean parameters
$newvalue = trim($value); $newvalue = trim($value);