diff --git a/htdocs/user/card.php b/htdocs/user/card.php index 08c2defd546..2a6b8a813be 100644 --- a/htdocs/user/card.php +++ b/htdocs/user/card.php @@ -125,7 +125,7 @@ if ($user->id != $id && !$canreaduser) { // Define value to know what current user can do on properties of edited user if ($id > 0) { // $user is the current logged user, $id is the user we want to edit - $canedituser = (($user->id == $id) && $user->hasRight("user", "self", "write")); // can edit myself + $canedituser = (($user->id == $id) && $user->hasRight("user", "self", "write")) || (($user->id != $id) && $user->hasRight("user", "user", "write")); $caneditfield = ((($user->id == $id) && $user->hasRight("user", "self", "write")) || (($user->id != $id) && $user->hasRight("user", "user", "write"))); $caneditpassword = ((($user->id == $id) && $user->hasRight("user", "self", "password")) || (($user->id != $id) && $user->hasRight("user", "user", "password"))); }