diff --git a/html/annulation.php b/html/annulation.php index e6b1b26bb..88e737710 100644 --- a/html/annulation.php +++ b/html/annulation.php @@ -45,7 +45,10 @@ $cn=DbConnect($gDossier); $User=new User($cn); $User->Check(); $User->check_dossier(dossier::id()); -$User->can_request(GEOP,0); +if ($User->check_action(GEOP,0) == 0 ) { + alert("Cette action n'est pas autorisée"); + echo ''; exit -1; } diff --git a/include/compta_ven.inc.php b/include/compta_ven.inc.php index ff76f9dcc..bd8d09fba 100644 --- a/include/compta_ven.inc.php +++ b/include/compta_ven.inc.php @@ -124,6 +124,7 @@ if ( $def==1 || $def == 4 ) { if ( isset($_POST['record']) ){ // Check privilege if ( $User->check_jrn($_REQUEST['p_jrn']) != 'W' ) { + NoAccess(); exit -1; } @@ -263,6 +264,7 @@ if ( $def == 2 ) { // Check privilege if ( isset($_REQUEST['p_jrn']) && $User->check_jrn($_REQUEST['p_jrn']) == 'X') { + NoAccess(); exit -1; } @@ -301,6 +303,7 @@ if ( $def==3 ) { // Check privilege if ( isset($_REQUEST['p_jrn']) && $User->check_jrn($_REQUEST['p_jrn']) == 'X') { + NoAccess(); exit -1; } @@ -319,7 +322,7 @@ if ( $def==3 ) { echo '