Mirrors/dolibarr
1
0
Fork 0
mirror of https://github.com/Dolibarr/dolibarr.git synced 2025-02-20 13:46:52 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix : #29372 month_report is accessible even without the readall permission (#29385)

Browse Source 
Co-authored-by: robin <robin.lagler@vingeanne-transports.com>
This commit is contained in:
HiroKX 2024-04-18 12:19:16 +02:00 committed by GitHub
parent 26a750ee0a
commit c24fda189f
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/holiday/month_report.php
View File

@ -43,7 +43,7 @@ if ($user->socid > 0) { // Protection if external user
//$socid = $user->socid;
accessforbidden();
}
$result = restrictedArea($user, 'holiday', $id, '');
$result = restrictedArea($user, 'holiday', $id, '', 'readall');
$action = GETPOST('action', 'aZ09') ?GETPOST('action', 'aZ09') : 'view';
$massaction = GETPOST('massaction', 'alpha');