From: Ivan Kohler <ivan@freeside.biz>
Date: Thu, 27 Apr 2017 20:07:24 +0000 (-0700)
Subject: access control for List all customers, RT#75012
X-Git-Url: http://git.freeside.biz/gitweb/?p=freeside.git;a=commitdiff_plain;h=6d922e31555a5888a1c070ea403e5d80608d357c

access control for List all customers, RT#75012
---

diff --git a/httemplate/search/cust_main.cgi b/httemplate/search/cust_main.cgi
index a5293f455..1bd228801 100755
--- a/httemplate/search/cust_main.cgi
+++ b/httemplate/search/cust_main.cgi
@@ -351,9 +351,11 @@ my(@cust_main, $sortby, $orderby);
 my @select = ();
 my @addl_headers = ();
 my @addl_cols = ();
-if ( $cgi->param('browse')
-     || $cgi->param('otaker_on')
-     || $cgi->param('agentnum_on')
+if ( (    $cgi->param('browse')
+       || $cgi->param('otaker_on')
+       || $cgi->param('agentnum_on')
+     )
+     and $curuser->access_right('List all customers')
 ) {
 
   my %search = ();