ACLs

diff --git a/httemplate/misc/email_events.cgi b/httemplate/misc/email_events.cgi
index c6efa7d..e7a0e77 100644 (file)
--- a/httemplate/misc/email_events.cgi
+++ b/httemplate/misc/email_events.cgi
@@ -1,4 +1,9 @@
-%
-%my $server = new FS::UI::Web::JSRPC 'FS::cust_event::process_reemail', $cgi;
-%
 <% $server->process %>
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Resend invoices');
+
+my $server = new FS::UI::Web::JSRPC 'FS::cust_event::process_reemail', $cgi;
+
+</%init>

diff --git a/httemplate/misc/fax_events.cgi b/httemplate/misc/fax_events.cgi
index bf5ddd1..39cba07 100644 (file)
--- a/httemplate/misc/fax_events.cgi
+++ b/httemplate/misc/fax_events.cgi
@@ -1,4 +1,9 @@
-% 
-%my $server = new FS::UI::Web::JSRPC 'FS::cust_event::process_refax', $cgi;
-%
 <% $server->process %>
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Resend invoices');
+
+my $server = new FS::UI::Web::JSRPC 'FS::cust_event::process_refax', $cgi;
+
+</%init>

diff --git a/httemplate/misc/order_pkg.html b/httemplate/misc/order_pkg.html
index a49404b..05cd99c 100644 (file)
--- a/httemplate/misc/order_pkg.html
+++ b/httemplate/misc/order_pkg.html
@@ -41,8 +41,13 @@ function enable_order_pkg () {
 <INPUT NAME="submit" TYPE="submit" VALUE="Order Package" disabled>
 
 </FORM>
+</BODY>
+</HTML>
 <%init>
 
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Order customer package');
+
 my $conf = new FS::Conf;
 
 my($query) = $cgi->keywords;

diff --git a/httemplate/misc/print_events.cgi b/httemplate/misc/print_events.cgi
index db7f984..8d83d3d 100644 (file)
--- a/httemplate/misc/print_events.cgi
+++ b/httemplate/misc/print_events.cgi
@@ -1,4 +1,9 @@
-%
-%my $server = new FS::UI::Web::JSRPC 'FS::cust_event::process_reprint', $cgi; 
-
 <% $server->process %>
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Resend invoices');
+
+my $server = new FS::UI::Web::JSRPC 'FS::cust_event::process_reprint', $cgi; 
+
+</%init>