lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

block visibility to private contact (thirdparty list / card)

Browse Source
This commit is contained in:
amarchal 2022-11-25 22:33:34 +01:00
parent d3ccfeeadc
commit f7adbfef16
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
htdocs/contact/card.php
View File

@ -86,6 +86,7 @@ $hookmanager->initHooks(array('contactcard', 'globalcard'));
if ($id > 0) { if ($id > 0) {
$object->fetch($id); $object->fetch($id);
$object->info($id);
} }
if (!($object->id > 0) && $action == 'view') { if (!($object->id > 0) && $action == 'view') {
@ -101,6 +102,9 @@ $permissiontoadd = $user->rights->societe->contact->creer;
if ($user->socid) { if ($user->socid) {
$socid = $user->socid; $socid = $user->socid;
} }
if($object->priv && $object->user_creation->id != $user->id){
accessforbidden();
}
$result = restrictedArea($user, 'contact', $id, 'socpeople&societe', '', '', 'rowid', 0); // If we create a contact with no company (shared contacts), no check on write permission $result = restrictedArea($user, 'contact', $id, 'socpeople&societe', '', '', 'rowid', 0); // If we create a contact with no company (shared contacts), no check on write permission