Wavyzz/dolibarr-fork
2
0
Fork 0
forked from Wavyzz/dolibarr
Code Pull Requests Activity

fix : #29372 month_report is accessible even without the readall permission (#29385)

Browse Source 
Co-authored-by: robin <robin.lagler@vingeanne-transports.com>
This commit is contained in:
HiroKX
2024-04-18 12:19:16 +02:00
committed by GitHub
parent 26a750ee0a
commit c24fda189f
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/holiday/month_report.php
View File

@@ -43,7 +43,7 @@ if ($user->socid > 0) { // Protection if external user
//$socid = $user->socid;
accessforbidden();
}
$result = restrictedArea($user, 'holiday', $id, '');
$result = restrictedArea($user, 'holiday', $id, '', 'readall');
$action = GETPOST('action', 'aZ09') ?GETPOST('action', 'aZ09') : 'view';
$massaction = GETPOST('massaction', 'alpha');