diff --git a/htdocs/user/class/api_users.class.php b/htdocs/user/class/api_users.class.php index 44b322a9d8e..bf83474361e 100644 --- a/htdocs/user/class/api_users.class.php +++ b/htdocs/user/class/api_users.class.php @@ -357,7 +357,7 @@ class Users extends DolibarrApi public function put($id, $request_data = null) { // Check user authorization - if (empty(DolibarrApiAccess::$user->hasRight('user', 'user', 'creer')) && empty(DolibarrApiAccess::$user->admin)) { + if (!DolibarrApiAccess::$user->hasRight('user', 'user', 'creer') && empty(DolibarrApiAccess::$user->admin)) { throw new RestException(401, "User update not allowed"); } @@ -473,7 +473,7 @@ class Users extends DolibarrApi { global $conf; - if (empty(DolibarrApiAccess::$user->hasRight('user', 'user', 'creer')) && empty(DolibarrApiAccess::$user->admin)) { + if (!DolibarrApiAccess::$user->hasRight('user', 'user', 'creer') && empty(DolibarrApiAccess::$user->admin)) { throw new RestException(401); }