admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add security : filter by accessible ledger for an user

Browse source
This commit is contained in:
Dany De Bontridder 2010-07-03 10:55:17 +00:00
parent 4f51169049
commit edaaa477d1
2 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
include/class_acc_account_ledger.php
View file

@ -94,13 +94,15 @@ class Acc_Account_Ledger {
*
* \param $p_from date from
* \param $p_to end date
*\note the data are filtered by the access of the current user
* \return double array (j_date,deb_montant,cred_montant,description,jrn_name,j_debit,jr_internal)
* (tot_deb,tot_credit
*
*/
function get_row_date($p_from,$p_to)
{
$user=new User($this->db);
$filter_sql=$user->get_ledger_sql('ALL',1);
$Res=$this->db->exec_sql("select jr_id,to_char(j_date,'DD.MM.YYYY') as j_date_fmt,j_date,".
"case when j_debit='t' then j_montant else 0 end as deb_montant,".
"case when j_debit='f' then j_montant else 0 end as cred_montant,".
@ -113,6 +115,7 @@ class Acc_Account_Ledger {
" where j_poste=$1 and ".
" ( to_date($2,'DD.MM.YYYY') <= j_date and ".
" to_date($3,'DD.MM.YYYY') >= j_date )".
" and $filter_sql ".
" order by j_date",array($this->id,$p_from,$p_to));
return $this->get_row_sql($Res);
}

4
include/class_fiche.php
View file

@ -922,6 +922,9 @@ av_text1=>'name'
echo_error("class_fiche",__LINE__,"id is 0");
return;
}
$user=new User($this->cn);
$filter_sql=$user->get_ledger_sql('ALL',1);
$qcode=$this->strAttribut(ATTR_DEF_QUICKCODE);
$Res=$this->cn->exec_sql("select distinct j_date,to_char(j_date,'DD.MM.YYYY') as j_date_fmt,j_qcode,".
"case when j_debit='t' then j_montant else 0 end as deb_montant,".
@ -933,6 +936,7 @@ av_text1=>'name'
" where j_qcode=$1 and ".
" ( to_date($2,'DD.MM.YYYY') <= j_date and ".
" to_date($3,'DD.MM.YYYY') >= j_date )".
" and $filter_sql ".
" order by j_date",array($qcode,$p_from,$p_to));
return $this->get_row_result($Res);
}