From 6802dc1206c0bc002a24ca4efa58edaa032173ef Mon Sep 17 00:00:00 2001
From: Regis Houssin <regis@dolibarr.fr>
Date: Thu, 21 Jun 2007 18:16:36 +0000
Subject: [PATCH] =?UTF-8?q?Fix:=20mise=20en=20fonction=20de=20la=20v=E9rif?=
 =?UTF-8?q?ication=20des=20droits=20d'acc=E8s=20users,=20clients=20et=20co?=
 =?UTF-8?q?mmerciaux?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 htdocs/comm/propal/aideremise.php | 15 ++++-----------
 1 file changed, 4 insertions(+), 11 deletions(-)

diff --git a/htdocs/comm/propal/aideremise.php b/htdocs/comm/propal/aideremise.php
index 67e960d861e..09e6834aeaf 100644
--- a/htdocs/comm/propal/aideremise.php
+++ b/htdocs/comm/propal/aideremise.php
@@ -28,19 +28,12 @@
 */
 
 require("./pre.inc.php");
-
-$user->getrights('propale');
-if (!$user->rights->propale->lire)
-  accessforbidden();
-
 include_once(DOL_DOCUMENT_ROOT."/propal.class.php");
 
-// Sécurité accés client
-if ($user->societe_id > 0) 
-{
-  $action = '';
-  $socid = $user->societe_id;
-}
+$propalid = isset($_GET["propalid"])?$_GET["propalid"]:'';
+
+// Sécurité d'accès client et commerciaux
+$socid = restrictedArea($user, 'propale', $propalid, 'propal');
 
 
 /******************************************************************************/