Fix: security

This commit is contained in:
Regis Houssin 2011-10-31 18:52:25 +01:00
parent 9f4ab4c1b1
commit dfcc0cff0c

View File

@ -248,7 +248,7 @@ else if ($id)
dol_fiche_head($head, 'card', $langs->trans("TripCard"), 0, 'trip');
if ($action == 'edit')
if ($action == 'edit' && $user->rights->deplacement->creer)
{
$soc = new Societe($db);
if ($object->socid)