projects
/
freeside.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
|
inline
| side by side (parent:
1783fdb
)
resolve minor ACL glitch linking to payments
author
ivan
<ivan>
Thu, 27 Mar 2008 20:19:52 +0000
(20:19 +0000)
committer
ivan
<ivan>
Thu, 27 Mar 2008 20:19:52 +0000
(20:19 +0000)
httemplate/search/cust_pay.cgi
patch
|
blob
|
history
httemplate/view/cust_pay.html
patch
|
blob
|
history
diff --git
a/httemplate/search/cust_pay.cgi
b/httemplate/search/cust_pay.cgi
index
e5465ae
..
80a611d
100755
(executable)
--- a/
httemplate/search/cust_pay.cgi
+++ b/
httemplate/search/cust_pay.cgi
@@
-235,7
+235,10
@@
if ( $cgi->param('magic') ) {
}
}
-my $link = [ "${p}view/cust_pay.html?paynum=", 'paynum' ];
+my $link = '';
+$link = [ "${p}view/cust_pay.html?paynum=", 'paynum' ]
+ if $FS::CurrentUser::CurrentUser->access_right('View invoices'); #XXX for now
+ #later# if $FS::CurrentUser::CurrentUser->access_right('View customer payments');
my $cust_link = sub {
my $cust_pay = shift;
my $cust_link = sub {
my $cust_pay = shift;
diff --git
a/httemplate/view/cust_pay.html
b/httemplate/view/cust_pay.html
index
4037d35
..
2e2344d
100644
(file)
--- a/
httemplate/view/cust_pay.html
+++ b/
httemplate/view/cust_pay.html
@@
-101,7
+101,8
@@
my $curuser = $FS::CurrentUser::CurrentUser;
die "access denied"
my $curuser = $FS::CurrentUser::CurrentUser;
die "access denied"
- unless $curuser->access_right('View customer payments');
+ unless $curuser->access_right('View invoices') #remove this in 1.9 EVENTUALLY
+ || $curuser->access_right('View customer payments');
$cgi->param('paynum') =~ /^(\d+)$/ or die "no paynum";
my $paynum = $1;
$cgi->param('paynum') =~ /^(\d+)$/ or die "no paynum";
my $paynum = $1;