AS1024/itflow
1
0
Fork 0
mirror of https://github.com/itflow-org/itflow synced 2026-02-28 02:44:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1173 from itflow-org/small-fix

Browse Source 
Small perms fixes
This commit is contained in:
Johnny
2025-02-22 13:38:05 -05:00
committed by GitHub
parent 69850f83d3 8eea19d03d
commit 2d39f21b51
5 changed files with 43 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
quote.php
View File

@@ -3,10 +3,17 @@
// If client_id is in URI then show client Side Bar and client header
if (isset($_GET['client_id'])) {
require_once "includes/inc_all_client.php";
} else {
} else {
require_once "includes/inc_all.php";
}
// Perms
enforceUserPermission('module_sales');
$quote_permission_snippet = '';
if (!empty($client_access_string)) {
$quote_permission_snippet = "AND quote_client_id IN ($client_access_string)";
}
if (isset($_GET['quote_id'])) {
$quote_id = intval($_GET['quote_id']);
@@ -17,7 +24,8 @@ if (isset($_GET['quote_id'])) {
LEFT JOIN clients ON quote_client_id = client_id
LEFT JOIN contacts ON clients.client_id = contacts.contact_client_id AND contact_primary = 1
LEFT JOIN locations ON clients.client_id = locations.location_client_id AND location_primary = 1
WHERE quote_id = $quote_id"
WHERE quote_id = $quote_id
$quote_permission_snippet"
);
if (mysqli_num_rows($sql) == 0) {
@@ -186,7 +194,7 @@ if (isset($_GET['quote_id'])) {
</a>
<?php if (lookupUserPermission("module_sales") >= 2) { ?>
<a class="dropdown-item" href="#"
data-toggle = "ajax-modal"
data-toggle = "ajax-modal"
data-ajax-url = "ajax/ajax_quote_copy.php"
data-ajax-id = "<?php echo $quote_id; ?>"
>