Fix: bad rights

Dolibarr · Feb 20, 2012 · cd23f8a · cd23f8a
1 parent 47eaaf5
commit cd23f8a
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 6 deletions.
diff --git a/htdocs/core/ajax/loadinplace.php b/htdocs/core/ajax/loadinplace.php
@@ -63,9 +63,10 @@
 	if ($element == 'propal') $element = 'propale';
 	else if ($element == 'fichinter') $element = 'ficheinter';
 
-	if (($element == 'payment' && $user->rights->facture->paiement)
-	|| $user->rights->$element->lire || $user->rights->$element->read
-	|| $user->rights->$element->$subelement->lire || $user->rights->$element->$subelement->read)
+	if ($user->rights->$element->lire || $user->rights->$element->read
+	|| $user->rights->$element->$subelement->lire || $user->rights->$element->$subelement->read
+	|| ($element == 'payment' && $user->rights->facture->lire)
+	|| ($element == 'payment_supplier' && $user->rights->fournisseur->facture->lire))
 	{
 		if ($type == 'select')
 		{

diff --git a/htdocs/core/ajax/saveinplace.php b/htdocs/core/ajax/saveinplace.php
@@ -69,9 +69,10 @@
 	if ($element == 'propal') $element = 'propale';
 	else if ($element == 'fichinter') $element = 'ficheinter';
 
-	if (($element == 'payment' && $user->rights->facture->paiement)
-	|| $user->rights->$element->creer || $user->rights->$element->write
-	|| $user->rights->$element->$subelement->creer || $user->rights->$element->$subelement->write)
+	if ($user->rights->$element->creer || $user->rights->$element->write
+	|| $user->rights->$element->$subelement->creer || $user->rights->$element->$subelement->write
+	|| ($element == 'payment' && $user->rights->facture->paiement)
+	|| ($element == 'payment_supplier' && $user->rights->fournisseur->facture->creer))
 	{
 		// Clean parameters
 		$newvalue = trim($value);