[Vtigercrm-commits] [vtiger-commits] r5471 - in /vtigercrm/trunk/modules/SalesOrder: DetailView.php ListView.php

[vtigercrm-commits at vtiger.fosslabs.com]

Author: saraj
Date: Thu Apr 27 02:27:33 2006
New Revision: 5471

Log:
Added the Security Check for Buttons in List/Detail View of SalesOrder Module - Ahmed

Modified:
    vtigercrm/trunk/modules/SalesOrder/DetailView.php
    vtigercrm/trunk/modules/SalesOrder/ListView.php

Modified: vtigercrm/trunk/modules/SalesOrder/DetailView.php
==============================================================================
--- vtigercrm/trunk/modules/SalesOrder/DetailView.php (original)
+++ vtigercrm/trunk/modules/SalesOrder/DetailView.php Thu Apr 27 02:27:33 2006
@@ -70,15 +70,15 @@
 
 $permissionData = $_SESSION['action_permission_set'];
 
-if(isPermitted("SalesOrder",1,$_REQUEST['record']) == 'yes')
+if(isPermitted("SalesOrder","EditView",$_REQUEST['record']) == 'yes')
 	$smarty->assign("EDIT_DUPLICATE","permitted");
 
 $smarty->assign("CREATEPDF","permitted");
 
-if(isPermitted("Invoice",1,$_REQUEST['record']) == 'yes')
+if(isPermitted("Invoice","EditView",$_REQUEST['record']) == 'yes')
 	$smarty->assign("CONVERTINVOICE","permitted");
 
-if(isPermitted("SalesOrder",2,$_REQUEST['record']) == 'yes')
+if(isPermitted("SalesOrder","Delete",$_REQUEST['record']) == 'yes')
 	$smarty->assign("DELETE","permitted");
 
 $smarty->assign("MODULE", $module);

Modified: vtigercrm/trunk/modules/SalesOrder/ListView.php
==============================================================================
--- vtigercrm/trunk/modules/SalesOrder/ListView.php (original)
+++ vtigercrm/trunk/modules/SalesOrder/ListView.php Thu Apr 27 02:27:33 2006
@@ -107,7 +107,7 @@
 //<<<<<customview>>>>>
 $smarty->assign("CHANGE_OWNER",getUserslist());
 // Buttons and View options
-if(isPermitted('SalesOrder',2,'') == 'yes')
+if(isPermitted('SalesOrder','Delete','') == 'yes')
 {
 	$other_text['del'] = $app_strings[LBL_MASS_DELETE];
 }