From 556ab22c792ac5622efc4edb38721ee666b52db5 Mon Sep 17 00:00:00 2001 From: johnnyq Date: Tue, 28 Jul 2026 17:53:13 -0400 Subject: [PATCH] Enfoce Sales Permission Read on products export --- agent/post/product.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/agent/post/product.php b/agent/post/product.php index ef40a997..3d4a9d55 100644 --- a/agent/post/product.php +++ b/agent/post/product.php @@ -248,6 +248,8 @@ if (isset($_POST['export_products_csv'])) { validateCSRFToken(); + enforceUserPermission('module_sales'); + //get records from database $sql = mysqli_query($mysqli,"SELECT * FROM products LEFT JOIN categories ON product_category_id = category_id