lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Ajout contrle de scurit

Browse Source
This commit is contained in:
Rodolphe Quiedeville 2005-08-19 14:21:59 +00:00
parent 84fa5db557
commit f3f63c9480
2 changed files with 52 additions and 31 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
htdocs/telephonie/facture/liste.php
View File

@ -71,6 +71,11 @@ $sql .= " , ".MAIN_DB_PREFIX."telephonie_societe_ligne as l";
$sql .= " WHERE s.idp = l.fk_soc_facture AND l.rowid = f.fk_ligne"; $sql .= " WHERE s.idp = l.fk_soc_facture AND l.rowid = f.fk_ligne";
if ($user->rights->telephonie->ligne->lire_restreint)
{
$sql .= " AND l.fk_commercial_suiv = ".$user->id;
}
if ($_GET["search_ligne"]) if ($_GET["search_ligne"])
{ {
$sql .= " AND f.ligne LIKE '%".$_GET["search_ligne"]."%'"; $sql .= " AND f.ligne LIKE '%".$_GET["search_ligne"]."%'";

18
htdocs/telephonie/ligne/index.php
View File

@ -62,6 +62,10 @@ print '<br />';
$sql = "SELECT distinct statut, count(*) as cc"; $sql = "SELECT distinct statut, count(*) as cc";
$sql .= " FROM ".MAIN_DB_PREFIX."telephonie_societe_ligne as l"; $sql .= " FROM ".MAIN_DB_PREFIX."telephonie_societe_ligne as l";
if ($user->rights->telephonie->ligne->lire_restreint)
{
$sql .= " WHERE l.fk_commercial_suiv = ".$user->id;
}
$sql .= " GROUP BY statut"; $sql .= " GROUP BY statut";
if ($db->query($sql)) if ($db->query($sql))
@ -100,12 +104,19 @@ else
print $db->error() . ' ' . $sql; print $db->error() . ' ' . $sql;
} }
print '<br />';
if ($user->rights->telephonie->fournisseur->lire)
{
print '<br />';
$sql = "SELECT distinct f.nom as fournisseur, f.rowid, count(*) as cc"; $sql = "SELECT distinct f.nom as fournisseur, f.rowid, count(*) as cc";
$sql .= " FROM ".MAIN_DB_PREFIX."societe as s,".MAIN_DB_PREFIX."telephonie_societe_ligne as l"; $sql .= " FROM ".MAIN_DB_PREFIX."societe as s,".MAIN_DB_PREFIX."telephonie_societe_ligne as l";
$sql .= " , ".MAIN_DB_PREFIX."telephonie_fournisseur as f"; $sql .= " , ".MAIN_DB_PREFIX."telephonie_fournisseur as f";
$sql .= " WHERE l.fk_soc = s.idp AND l.fk_fournisseur = f.rowid"; $sql .= " WHERE l.fk_soc = s.idp AND l.fk_fournisseur = f.rowid";
if ($user->rights->telephonie->ligne->lire_restreint)
{
$sql .= " AND l.fk_commercial_suiv = ".$user->id;
}
$sql .= " GROUP BY f.nom"; $sql .= " GROUP BY f.nom";
if ($db->query($sql)) if ($db->query($sql))
@ -137,6 +148,7 @@ else
{ {
print $db->error() . ' ' . $sql; print $db->error() . ' ' . $sql;
} }
}
/* /*
* Concurrents * Concurrents
* *
@ -147,6 +159,10 @@ print '<br />';
$sql = "SELECT distinct c.nom as concurrent, count(*) as cc"; $sql = "SELECT distinct c.nom as concurrent, count(*) as cc";
$sql .= " FROM ".MAIN_DB_PREFIX."telephonie_concurrents as c,".MAIN_DB_PREFIX."telephonie_societe_ligne as l"; $sql .= " FROM ".MAIN_DB_PREFIX."telephonie_concurrents as c,".MAIN_DB_PREFIX."telephonie_societe_ligne as l";
$sql .= " WHERE l.fk_concurrent = c.rowid"; $sql .= " WHERE l.fk_concurrent = c.rowid";
if ($user->rights->telephonie->ligne->lire_restreint)
{
$sql .= " AND l.fk_commercial_suiv = ".$user->id;
}
$sql .= " GROUP BY c.nom"; $sql .= " GROUP BY c.nom";
if ($db->query($sql)) if ($db->query($sql))