Wavyzz/dolibarr-fork
2
0
Fork 0
forked from Wavyzz/dolibarr
Code Pull Requests Activity

Update api_users.class.php

Browse Source
This commit is contained in:
Laurent Destailleur
2021-09-10 13:31:17 +02:00
committed by GitHub
parent d4bfbc69a4
commit b1c23b9a93
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
htdocs/user/class/api_users.class.php
View File

@@ -151,8 +151,7 @@ class Users extends DolibarrApi
*/
public function get($id, $includepermissions = 0)
{
$canread
if (empty(DolibarrApiAccess::$user->rights->user->user->lire) && empty(DolibarrApiAccess::$user->admin) && ($id == 0 || DolibarrApiAccess::$user->id != $id)) {
if (empty(DolibarrApiAccess::$user->rights->user->user->lire) && empty(DolibarrApiAccess::$user->admin) && $id != 0 && DolibarrApiAccess::$user->id != $id) {
throw new RestException(401, 'Not allowed');
}