[0.85] reservation rights - see #138

glpi-project · Sep 25, 2015 · a87741b · a87741b
1 parent 61171a2
commit a87741b
Showing 1 changed file with 17 additions and 11 deletions.
diff --git a/inc/reservation.class.php b/inc/reservation.class.php
@@ -749,18 +749,24 @@ function showForm($ID, $options=array()) {
          echo "</td></tr>\n";
 
       } else {
-         echo "<tr class='tab_bg_2'>";
-         echo "<td class='top center'>";
-         echo "<input type='submit' name='purge' value=\""._sx('button', 'Delete permanently')."\"
-                class='submit'>";
-         if ($resa->fields["group"] > 0) {
-            echo "<br><input type='checkbox' name='_delete_group'>&nbsp;".
-                  __s('Delete all rehearsals');
+         if (($resa->fields["users_id"] == Session::getLoginUserID())
+             || Session::haveRight(static::$rightname, PURGE)) {
+            echo "<tr class='tab_bg_2'>";
+            echo "<td class='top center'>";
+            echo "<input type='submit' name='purge' value=\""._sx('button', 'Delete permanently')."\"
+                   class='submit'>";
+            if ($resa->fields["group"] > 0) {
+               echo "<br><input type='checkbox' name='_delete_group'>&nbsp;".
+                          __s('Delete all rehearsals');
+            }
+         }
+         if (($resa->fields["users_id"] == Session::getLoginUserID())
+              || Session::haveRight(static::$rightname, UPDATE)) {
+            echo "</td><td class='top center'>";
+            echo "<input type='submit' name='update' value=\""._sx('button', 'Save')."\"
+                   class='submit'>";
+            echo "</td></tr>\n";
          }
-         echo "</td><td class='top center'>";
-         echo "<input type='submit' name='update' value=\""._sx('button', 'Save')."\"
-                class='submit'>";
-         echo "</td></tr>\n";
       }
       echo "</table>";
       Html::closeForm();