[Vtigercrm-commits] [vtiger-commits] r5190 - /vtigercrm/trunk/modules/Leads/DetailView.php

[vtigercrm-commits at vtiger.fosslabs.com]

Author: don
Date: Thu Apr 20 06:28:29 2006
New Revision: 5190

Log:
Added Security Check for Convert Lead Buttons

Modified:
    vtigercrm/trunk/modules/Leads/DetailView.php

Modified: vtigercrm/trunk/modules/Leads/DetailView.php
==============================================================================
--- vtigercrm/trunk/modules/Leads/DetailView.php (original)
+++ vtigercrm/trunk/modules/Leads/DetailView.php Thu Apr 20 06:28:29 2006
@@ -77,8 +77,12 @@
 $tab_per_Data = getAllTabsPermission($profile_id);
 $permissionData = $_SESSION['action_permission_set'];
 
-if(isPermitted("Leads",1,$_REQUEST['record']) == 'yes' && $tab_per_Data[getTabid("Accounts")] == 0 && $tab_per_Data[getTabid("Contacts")] == 0 && $permissionData[getTabid("Accounts")][1] == 0 && $permissionData[getTabid("Contacts")][1] ==0)
+
+if(isPermitted("Leads","ConvertLead") =='yes' && isPermitted("Accounts","EditView") =='yes' && isPermitted("Contacts","EditView"))
+{
 	$smarty->assign("CONVERTLEAD","permitted");
+}
+
 $category = getParentTab();
 $smarty->assign("CATEGORY",$category);