fix unauthorized access to margins for external user

Dolibarr · May 19, 2013 · 347fc6d · 347fc6d
1 parent 7efe394
commit 347fc6d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/htdocs/core/modules/modMargin.class.php b/htdocs/core/modules/modMargin.class.php
@@ -80,7 +80,7 @@ function __construct($db)
 		// New pages on tabs
 		$this->tabs = array(
 				'product:+margin:Margins:margins:$conf->margin->enabled:/margin/tabs/productMargins.php?id=__ID__',
-				'thirdparty:+margin:Margins:margins:$conf->margin->enabled:/margin/tabs/thirdpartyMargins.php?socid=__ID__'
+				'thirdparty:+margin:Margins:margins:$conf->margin->enabled && empty($user->societe_id)s:/margin/tabs/thirdpartyMargins.php?socid=__ID__'
 		);