Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

REST API : supplierorders put method fails in security checks #17060

Closed
guiguichupote opened this issue Mar 31, 2021 · 2 comments
Closed

REST API : supplierorders put method fails in security checks #17060

guiguichupote opened this issue Mar 31, 2021 · 2 comments
Labels
Bug need more information This bug needs more information to be processed Bug This is a bug (something does not work as expected)

Comments

@guiguichupote
Copy link

Bug

When sending put request on supplierorder, the methode calls
DolibarrApi::_checkAccessToResource('fournisseur', $this->order->id, '', 'commande')
The problem is that 'fournisseur' table does not exists in database ( the real table to check seems to be commande_fournisseur)
The security checks fails and it is not possible to put supplierorder.

@guiguichupote guiguichupote added the Bug This is a bug (something does not work as expected) label Mar 31, 2021
eldy added a commit that referenced this issue Apr 2, 2021
@ksar-ksar
Copy link
Contributor

Hi,

Can you check if the above FIX solve the issue ?

Thanks.

@ksar-ksar ksar-ksar added Bug need more information This bug needs more information to be processed Bug This is a bug (something does not work as expected) and removed Bug This is a bug (something does not work as expected) labels Apr 6, 2021
@guiguichupote
Copy link
Author

Yes it is.
I did same fix locally but had no time to share.
Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug need more information This bug needs more information to be processed Bug This is a bug (something does not work as expected)
Projects
None yet
Development

No branches or pull requests

2 participants