Fix: security

This commit is contained in:
Regis Houssin
2009-04-28 06:49:44 +00:00
parent a62306dc42
commit 7708f967f8
4 changed files with 17 additions and 4 deletions

View File

@@ -1357,6 +1357,10 @@ function restrictedArea($user, $feature='societe', $objectid=0, $dbtablename='',
{
if (! $user->rights->banque->cheque) $readok=0;
}
else if ($feature == 'ecm')
{
if (! $user->rights->ecm->download) $readok=0;
}
else if (! empty($feature2)) // This should be used for future changes
{
if (empty($user->rights->$feature->$feature2->lire)