Ajout de r�gle de s�curit�

htdocs/fourn/commande/pre.inc.php

@@ -52,15 +52,22 @@ function llxHeader($head = "", $title = "", $help_url='', $addons='')
     {
       $menu->add($addons[0][0], $addons[0][1]);
     }
-
+if ($user->societe_id == 0 && $user->rights->societe->lire)
+{
   $menu->add(DOL_URL_ROOT."/fourn/index.php", $langs->trans("Suppliers"));
   $menu->add_submenu(DOL_URL_ROOT."/fourn/contact.php",$langs->trans("Contacts"));
+}
 
   $langs->load("bills");
+if ($user->rights->fournisseur->facture->lire)
+{
   $menu->add(DOL_URL_ROOT."/fourn/facture/index.php", $langs->trans("Bills"));
-
+}
+if ($user->rights->fournisseur->commande->lire)
+{
   $menu->add(DOL_URL_ROOT."/fourn/commande/", $langs->trans("Orders"));
   $menu->add_submenu(DOL_URL_ROOT."/fourn/commande/liste.php", $langs->trans("List"));
+}
 
   left_menu($menu->liste,$help_url);
 }

htdocs/fourn/facture/pre.inc.php

@@ -52,36 +52,50 @@ function llxHeader($head = "", $title = "", $addons='') {
 
 
   if ($conf->fournisseur->enabled) 
+    {
+    	if ($user->rights->societe->lire)
     	{
         $menu->add(DOL_URL_ROOT."/fourn/index.php", $langs->trans("Suppliers"));
+      }
 
         // Sécurité accés client
-        if ($user->societe_id == 0) 
+        if ($user->societe_id == 0 && $user->rights->societe->creer) 
         {
           $menu->add_submenu(DOL_URL_ROOT."/soc.php?action=create&type=f",$langs->trans("NewSupplier"));
         }
     }
 
   if ($conf->societe->enabled)
+    {
+    	if ($user->rights->societe->lire)
     	{
          $menu->add_submenu(DOL_URL_ROOT."/fourn/contact.php",$langs->trans("Contacts"));
       }
+    }
   
 
   $langs->load("bills");
+  if ($user->rights->fournisseur->facture->lire)
+  {
       $menu->add(DOL_URL_ROOT."/fourn/facture/index.php", $langs->trans("Bills"));
+  }
   
 
   if ($user->rights->fournisseur->facture->creer)
     {
       $menu->add_submenu(DOL_URL_ROOT."/fourn/facture/fiche.php?action=create",$langs->trans("NewBill"));
     }
-  
+  if ($user->rights->fournisseur->facture->lire)
+  {
       $menu->add_submenu(DOL_URL_ROOT."/fourn/facture/paiement.php", $langs->trans("Payments"));
+  }
 
   
   $langs->load("orders");
+  if ($user->rights->fournisseur->commande->lire)
+  {
       $menu->add(DOL_URL_ROOT."/fourn/commande/",$langs->trans("Orders"));
+  }
 
 
   if ($conf->produit->enabled || $conf->service->enabled)

htdocs/fourn/index.php

@@ -30,6 +30,10 @@
 
 require("./pre.inc.php");
 
+if (!$user->rights->societe->lire)
+  accessforbidden();
+
+
 $page = $_GET["page"];
 $sortorder = $_GET["sortorder"];
 $sortfield = $_GET["sortfield"];

htdocs/fourn/pre.inc.php

@@ -50,40 +50,48 @@ function llxHeader($head = "", $title="", $addons='') {
       $menu->add($addons[0][0], $addons[0][1]);
     }
 
-  if ($conf->fournisseur->enabled) 
+  if ($conf->fournisseur->enabled && $user->rights->societe->lire) 
     {
       $menu->add(DOL_URL_ROOT."/fourn/index.php", $langs->trans("Suppliers"));
       
       // Sécurité accés client
-      if ($user->societe_id == 0) 
+      if ($user->societe_id == 0 && $user->rights->societe->creer) 
         {
           $menu->add_submenu(DOL_URL_ROOT."/soc.php?action=create&type=f",$langs->trans("NewSupplier"));
         }
     }
   
-  if ($conf->societe->enabled)
+  if ($conf->societe->enabled && $user->rights->societe->lire)
     {
       $menu->add_submenu(DOL_URL_ROOT."/fourn/contact.php",$langs->trans("Contacts"));
     }
   
 
   $langs->load("bills");
+  if ($user->societe_id == 0 && $user->rights->fournisseur->facture->lire)
+    {
       $menu->add(DOL_URL_ROOT."/fourn/facture/index.php", $langs->trans("Bills"));
-  
+    }
-  if ($user->societe_id == 0) 
+  if ($user->societe_id == 0 && $user->rights->fournisseur->facture->creer) 
     {
       $menu->add_submenu(DOL_URL_ROOT."/fourn/facture/fiche.php?action=create",$langs->trans("NewBill"));
     }
-  
+  if ($user->rights->fournisseur->facture->lire)
+    {
       $menu->add_submenu(DOL_URL_ROOT."/fourn/facture/paiement.php", $langs->trans("Payments"));
-     
+    } 
   $langs->load("orders");
+  if ($user->rights->fournisseur->commande->lire)
+    {
       $menu->add(DOL_URL_ROOT."/fourn/commande/",$langs->trans("Orders"));
-  
+    }
   if ($conf->produit->enabled || $conf->service->enabled)
+  {
+  	if ($user->rights->produit->lire)
   	{
         $menu->add(DOL_URL_ROOT."/fourn/product/", $langs->trans("Products"));
     }
+  }
   
   left_menu($menu->liste);
 }