2
0
forked from Wavyzz/dolibarr

Fix #18519 : Modulebuilder api permission

This commit is contained in:
lmarcouiller
2021-08-27 11:48:56 +02:00
parent 591059847e
commit ce7a301896

View File

@@ -69,7 +69,7 @@ class MyModuleApi extends DolibarrApi
*/
public function get($id)
{
if (!DolibarrApiAccess::$user->rights->mymodule->read) {
if (!DolibarrApiAccess::$user->rights->mymodule->myobject->read) {
throw new RestException(401);
}
@@ -194,7 +194,7 @@ class MyModuleApi extends DolibarrApi
*/
public function post($request_data = null)
{
if (!DolibarrApiAccess::$user->rights->mymodule->write) {
if (!DolibarrApiAccess::$user->rights->mymodule->myobject->write) {
throw new RestException(401);
}
// Check mandatory fields
@@ -222,7 +222,7 @@ class MyModuleApi extends DolibarrApi
*/
public function put($id, $request_data = null)
{
if (!DolibarrApiAccess::$user->rights->mymodule->write) {
if (!DolibarrApiAccess::$user->rights->mymodule->myobject->write) {
throw new RestException(401);
}
@@ -260,7 +260,7 @@ class MyModuleApi extends DolibarrApi
*/
public function delete($id)
{
if (!DolibarrApiAccess::$user->rights->mymodule->delete) {
if (!DolibarrApiAccess::$user->rights->mymodule->myobject->delete) {
throw new RestException(401);
}
$result = $this->myobject->fetch($id);