admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Bug in security : FIN Ledger confusion between check_action and get_ledger_access

Browse source
This commit is contained in:
Dany De Bontridder 2009-03-16 21:00:44 +00:00
parent fadc60e940
commit 2ca1abcf6b
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
include/compta_fin.inc.php
View file

@ -70,7 +70,7 @@ if ( $def == 1 ) {
$def_ledger=$Ledger->get_first('fin');
$Ledger->id=$def_ledger['jrn_def_id'];
}
$jrn_priv=$User->check_action($Ledger->id);
$jrn_priv=$User->get_ledger_access($Ledger->id);
// Check privilege
if ( isset($_REQUEST['p_jrn']) && ( $jrn_priv == 'X')) {
NoAccess();