vignesh/dolibarr
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

FIX missmatch of permission check of button and action of cancel delivery note (expedition) (#36943)

Browse source 
In expedition/card.php there is the action "confirm_cancel" which checks for the right supprimer of expedition. The corresponding UI Button checks for creer of expedition. This means some people can see the button, but nothing happens when clicking on it (also no error message).
This commit is contained in:
splohmer 2026-01-21 14:25:24 +01:00 committed by Laurent Destailleur
parent 0daf289924
commit f39ef3d5c7
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
htdocs/expedition/card.php
View file

@ -648,7 +648,7 @@ if (empty($reshook)) {
}
}
}
} elseif ($action == 'confirm_cancel' && $confirm == 'yes' && $user->hasRight('expedition', 'supprimer')) {
} elseif ($action == 'confirm_cancel' && $confirm == 'yes' && $user->hasRight('expedition', 'creer')) {
$also_update_stock = (GETPOST('alsoUpdateStock', 'alpha') ? 1 : 0);
$result = $object->cancel($user, 0, (bool) $also_update_stock);
if ($result > 0) {