vignesh/dolibarr
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix permission to update stock

Browse source
This commit is contained in:
Laurent Destailleur 2024-08-31 19:13:26 +02:00
parent 79b1a293e9
commit 686c60e0bc
2 changed files with 5 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
htdocs/product/stock/movement_card.php
View file

@ -169,7 +169,7 @@ if (GETPOST('button_removefilter_x', 'alpha') || GETPOST('button_removefilter.x'
}
// Correct stock
if ($action == "correct_stock") {
if ($action == "correct_stock" && !$cancel && $usercancreate) {
$product = new Product($db);
if (!empty($product_id)) {
$result = $product->fetch($product_id);
@ -249,7 +249,7 @@ if ($action == "correct_stock") {
}
// Transfer stock from a warehouse to another warehouse
if ($action == "transfert_stock" && !$cancel) {
if ($action == "transfert_stock" && !$cancel && $usercancreate) {
$error = 0;
$product = new Product($db);
if (!empty($product_id)) {

5
htdocs/product/stock/product.php
View file

@ -118,6 +118,7 @@ $error = 0;
$usercanread = (($object->type == Product::TYPE_PRODUCT && $user->hasRight('produit', 'lire')) || ($object->type == Product::TYPE_SERVICE && $user->hasRight('service', 'lire')));
$usercancreate = (($object->type == Product::TYPE_PRODUCT && $user->hasRight('produit', 'creer')) || ($object->type == Product::TYPE_SERVICE && $user->hasRight('service', 'creer')));
$usercancreadprice = getDolGlobalString('MAIN_USE_ADVANCED_PERMS') ? $user->hasRight('product', 'product_advance', 'read_prices') : $user->hasRight('product', 'lire');
$usercanupdatestock = $user->hasRight('stock', 'mouvement', 'creer');
if ($object->isService()) {
$label = $langs->trans('Service');
@ -244,7 +245,7 @@ if ($action == 'setdesiredstock' && $usercancreate) {
// Correct stock
if ($action == "correct_stock" && !$cancel && $usercancreate) {
if ($action == "correct_stock" && !$cancel && $usercanupdatestock) {
if (!(GETPOSTINT("id_entrepot") > 0)) {
setEventMessages($langs->trans("ErrorFieldRequired", $langs->transnoentitiesnoconv("Warehouse")), null, 'errors');
$error++;
@ -337,7 +338,7 @@ if ($action == "correct_stock" && !$cancel && $usercancreate) {
}
// Transfer stock from a warehouse to another warehouse
if ($action == "transfert_stock" && !$cancel && $usercancreate) {
if ($action == "transfert_stock" && !$cancel && $usercanupdatestock) {
if (!(GETPOSTINT("id_entrepot") > 0) || !(GETPOSTINT("id_entrepot_destination") > 0)) {
setEventMessages($langs->trans("ErrorFieldRequired", $langs->transnoentitiesnoconv("Warehouse")), null, 'errors');
$error++;