fix customer searching with "List customers" right but not "List all customers",...
authorIvan Kohler <ivan@freeside.biz>
Thu, 27 Apr 2017 01:00:07 +0000 (18:00 -0700)
committerIvan Kohler <ivan@freeside.biz>
Thu, 27 Apr 2017 01:00:07 +0000 (18:00 -0700)
httemplate/search/cust_main.cgi

index b2c977a..a5293f4 100755 (executable)
 my $curuser = $FS::CurrentUser::CurrentUser;
 
 die "access denied"
-  unless $curuser->access_right('List all customers');
+  unless $curuser->access_right('List all customers')
+      || $curuser->access_right('List customers');
 
 my $conf = new FS::Conf;
 my $maxrecords = $conf->config('maxsearchrecordsperpage') || 100;
@@ -586,7 +587,7 @@ sub cardsearch {
 
   my($card)=$cgi->param('card');
   $card =~ s/\D//g;
-  $card =~ /^(\d{13,16}|\d{8,9})$/ or errorpage(emt("Illegal card number"));
+  $card =~ /^(\d{13,19}|\d{8,9})$/ or errorpage(emt("Illegal card number"));
   my($payinfo)=$1;
 
   [ qsearch('cust_main',{'payinfo'=>$payinfo, 'payby'=>'CARD'}),