admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security : action public are public (readonly) or write if right has been given,

Browse source 
increase last operation to 20
Cosmetic for profile
This commit is contained in:
Dany De Bontridder 2012-06-14 21:24:56 +00:00
parent 371db5df52
commit e8efef2eee
4 changed files with 7 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

2
include/action.common.inc.php
View file

@ -156,7 +156,7 @@ if ($sub_action == 'detail')
echo $retour;
echo '</form>';
}
else if ($g_user->can_read_action($ag_id) == true)
else if ($g_user->can_read_action($ag_id) == true || $act->ag_dest == -1)
{
echo $act->Display('READ', false, $base, $retour);
}

4
include/ajax_get_profile.php
View file

@ -80,9 +80,9 @@ Effacer ce profil';
echo "<h2>Impression</h2>";
$profile_menu->printing($p_id);
echo $add_one;
echo "<h2>Action gestion accessible</h2>";
echo "<h1>Action gestion accessible</h1>";
$profile_menu->available_profile($p_id);
echo "<h2>Dépôt de stock accessible</h2>";
echo "<h1>Dépôt de stock accessible</h1>";
$profile_menu->available_repository($p_id);
}

7
include/class_follow_up.php
View file

@ -1259,11 +1259,9 @@ class Follow_Up
$query .= ' and ag_state in (2,3) ';
if (isset($_GET['only_internal']))
$query .= ' and f_id_dest=0 ';
if (!isset($all_action))
if ( isset($all_action))
{
$query .=" and (ag_owner='" . $_SESSION['g_user'] . "' or ".self::sql_security_filter($cn, "R")." )";
} else {
$query .= "and ".self::sql_security_filter($cn,'R');
}
if (isset($date_start) && isDate($date_start) != null)
{
@ -1273,7 +1271,7 @@ class Follow_Up
{
$query.=" and ag_timestamp <= to_date('$date_end','DD.MM.YYYY')";
}
if (isset($ag_dest_query)&& ! isset($all_action) && $ag_dest_query != -1)
if (isset($ag_dest_query)&& ! isset($all_action) )
{
$query.= " and ag_dest = " . sql_string($ag_dest_query);
}
@ -1281,6 +1279,7 @@ class Follow_Up
{
$query = " and ag_id= " . $ag_id;
}
var_dump( $query.$str);
return $query . $str;
}

2
include/dashboard.inc.php
View file

@ -23,7 +23,7 @@ $Operation=new Follow_Up($cn);
$last_operation=$Operation->get_today();
$Ledger=new Acc_Ledger($cn,0);
$last_ledger=array();
$last_ledger=$Ledger->get_last(10);
$last_ledger=$Ledger->get_last(20);
ob_start();
require_once('template/dashboard.php');