From f6268eee463a6f3bf8b4739272922047beb4c352 Mon Sep 17 00:00:00 2001
From: Dany De Bontridder <dany@alchimerys.be>
Date: Sat, 21 Dec 2013 02:28:00 +0000
Subject: [PATCH] task #952 Transforme une action en facture
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Ajout sécurité : vérifie que l'action est accessible à l'utilisateur
Task #952 - Transform une action en facture
---
 include/class_acc_ledger.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/include/class_acc_ledger.php b/include/class_acc_ledger.php
index de352951e..e4963c165 100644
--- a/include/class_acc_ledger.php
+++ b/include/class_acc_ledger.php
@@ -3679,8 +3679,9 @@ class Acc_Ledger extends jrn_def_sql
 	}
         function convert_from_follow($p_ag_id)
         {
+            global $g_user;
             if (isNumber($p_ag_id)==0) return null;
-            
+            if (! $g_user->can_read_action($p_ag_id)) die ('Action non accessible');
             $array=array();
             
             // retrieve info from action_gestion