Fix: Permission to read an event should depend on agenda module

permissions.
We add a check for thirdparty for external users
This commit is contained in:
Laurent Destailleur 2013-09-18 11:56:42 +02:00
parent d3efd86e3d
commit d478d8c1fe

View File

@ -56,8 +56,8 @@ $contactid=GETPOST('contactid','int');
$socid = GETPOST('socid','int');
$id = GETPOST('id','int');
if ($user->societe_id) $socid=$user->societe_id;
$result = restrictedArea($user,'societe',$id,'&societe');
//$result = restrictedArea($user, 'agenda', $id, 'actioncomm&societe', 'myactions&allactions', '', 'id');
$result = restrictedArea($user, 'agenda', $id, 'actioncomm&societe', 'myactions&allactions', '', 'id');
if ($user->societe_id && $socid) $result = restrictedArea($user,'societe',$socid);
$error=GETPOST("error");
$mesg='';