From 406089ef0c19a4849b20be460df485f42e41e5e6 Mon Sep 17 00:00:00 2001 From: atm-greg Date: Tue, 26 Oct 2021 16:47:16 +0200 Subject: [PATCH] FIX restrictedArea for payment delete --- htdocs/core/lib/security.lib.php | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/htdocs/core/lib/security.lib.php b/htdocs/core/lib/security.lib.php index da5d9388bd8..03f49188a07 100644 --- a/htdocs/core/lib/security.lib.php +++ b/htdocs/core/lib/security.lib.php @@ -493,7 +493,11 @@ function restrictedArea($user, $features, $objectid = 0, $tableandshare = '', $f if (!$user->rights->fournisseur->facture->creer) { $deleteok = 0; } - } elseif ($feature == 'banque') { + } elseif ($feature == 'payment') { + if (!$user->rights->facture->supprimer) { + $deleteok = 0; + } + }elseif ($feature == 'banque') { if (!$user->rights->banque->modifier) { $deleteok = 0; }