From 2ca1abcf6b7dcc00a699b12540f928b3c176127d Mon Sep 17 00:00:00 2001 From: Dany De Bontridder Date: Mon, 16 Mar 2009 21:00:44 +0000 Subject: [PATCH] Bug in security : FIN Ledger confusion between check_action and get_ledger_access --- include/compta_fin.inc.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/compta_fin.inc.php b/include/compta_fin.inc.php index eed8a9880..e4729d414 100644 --- a/include/compta_fin.inc.php +++ b/include/compta_fin.inc.php @@ -70,7 +70,7 @@ if ( $def == 1 ) { $def_ledger=$Ledger->get_first('fin'); $Ledger->id=$def_ledger['jrn_def_id']; } - $jrn_priv=$User->check_action($Ledger->id); + $jrn_priv=$User->get_ledger_access($Ledger->id); // Check privilege if ( isset($_REQUEST['p_jrn']) && ( $jrn_priv == 'X')) { NoAccess();