FIX user permission on ajax request getInvoice
This commit is contained in:
parent
99d5b175c6
commit
e4c97f0b15
@ -120,7 +120,7 @@ elseif ($action == 'search' && $term != '') {
|
|||||||
$object->fetch($id);
|
$object->fetch($id);
|
||||||
$ret = $printer->sendToPrinter($object, $conf->global->{'TAKEPOS_TEMPLATE_TO_USE_FOR_INVOICES'.$term}, $conf->global->{'TAKEPOS_PRINTER_TO_USE'.$term});
|
$ret = $printer->sendToPrinter($object, $conf->global->{'TAKEPOS_TEMPLATE_TO_USE_FOR_INVOICES'.$term}, $conf->global->{'TAKEPOS_PRINTER_TO_USE'.$term});
|
||||||
}
|
}
|
||||||
} elseif ($action == 'getInvoice') {
|
} elseif ($action == 'getInvoice' && $user->rights->facture->lire) {
|
||||||
require_once DOL_DOCUMENT_ROOT . '/compta/facture/class/facture.class.php';
|
require_once DOL_DOCUMENT_ROOT . '/compta/facture/class/facture.class.php';
|
||||||
|
|
||||||
$object = new Facture($db);
|
$object = new Facture($db);
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user