From 31bd3d6045e683679e9c2adedcec043b766e2363 Mon Sep 17 00:00:00 2001 From: Laurent Destailleur Date: Mon, 3 Jul 2023 20:00:55 +0200 Subject: [PATCH] Debug v18 --- htdocs/core/lib/security.lib.php | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/htdocs/core/lib/security.lib.php b/htdocs/core/lib/security.lib.php index 41a872178a5..7ca7a442909 100644 --- a/htdocs/core/lib/security.lib.php +++ b/htdocs/core/lib/security.lib.php @@ -1082,11 +1082,7 @@ function checkUserAccessToObject($user, array $featuresarray, $object = 0, $tabl $useridtocheck = 0; if ($feature == 'holiday') { $useridtocheck = $object->fk_user; - if (!in_array($useridtocheck, $childids)) { - return false; - } - $useridtocheck = $object->fk_validator; - if (!in_array($useridtocheck, $childids)) { + if (!in_array($object->fk_user, $childids) && !in_array($object->fk_validator, $childids)) { return false; } }