Fix: remplacement de requetes hors sujet !!

This commit is contained in:
Regis Houssin
2007-10-10 22:16:27 +00:00
parent 786ccfe6be
commit 3fcea0c160

View File

@@ -2286,12 +2286,13 @@ class Commande extends CommonObject
$this->nb=array();
$sql = "SELECT count(co.rowid) as nb";
if (!$user->rights->commercial->client->voir && !$user->societe_id) $sql .= ", sc.fk_soc, sc.fk_user";
$sql.= " FROM ".MAIN_DB_PREFIX."commande as co";
if ($conf->categorie->enabled && !$user->rights->categorie->voir)
if (!$user->rights->commercial->client->voir && !$user->societe_id)
{
$sql.= " LEFT JOIN ".MAIN_DB_PREFIX."categorie_product as cp ON cp.fk_product = co.rowid";
$sql.= " LEFT JOIN ".MAIN_DB_PREFIX."categorie as c ON cp.fk_categorie = c.rowid";
$sql.= " WHERE IFNULL(c.visible,1)=1";
$sql.= " LEFT JOIN ".MAIN_DB_PREFIX."societe as s ON co.fk_soc = s.rowid";
$sql.= " LEFT JOIN ".MAIN_DB_PREFIX."societe_commerciaux as sc ON s.rowid = sc.fk_soc";
$sql.= " WHERE sc.fk_user = " .$user->id;
}
$resql=$this->db->query($sql);
if ($resql)