admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security remove all $user->can_request except for extension

Browse source
This commit is contained in:
Dany De Bontridder 2011-11-08 19:45:07 +00:00
parent ecafd644a3
commit 4cee45d624
23 changed files with 16 additions and 129 deletions
Download patch file Download diff file Expand all files Collapse all files

1
include/export_ledger_pdf.php
View file

@ -55,7 +55,6 @@ $Jrn->get_name();
$User=new User($cn);
$User->Check();
$User->check_dossier($gDossier);
$User->can_request(IMPJRN,0);
// Security
if ( $_GET['jrn_id']!=0 && $User->check_jrn($_GET['jrn_id']) == 'X' )