Fixed access control issues on finish page of Direct Sales and Purchase Invoice
authorJanusz Dobrowolski <janusz@frontaccouting.eu>
Sat, 25 Aug 2012 18:01:15 +0000 (20:01 +0200)
committerJanusz Dobrowolski <janusz@frontaccouting.eu>
Sat, 25 Aug 2012 18:01:15 +0000 (20:01 +0200)
purchasing/po_entry_items.php
sales/sales_order_entry.php

index d14769b10af55340e69188cbae0a100cecec03d9..6e35437e6902767fb4de998f719ef6f3a4ad4c19 100644 (file)
@@ -23,8 +23,11 @@ set_page_security( @$_SESSION['PO']->trans_type,
                        ST_SUPPINVOICE => 'SA_SUPPLIERINVOICE'),
        array(  'NewOrder' => 'SA_PURCHASEORDER',
                        'ModifyOrderNumber' => 'SA_PURCHASEORDER',
+                       'AddedID' => 'SA_PURCHASEORDER',
                        'NewGRN' => 'SA_GRN',
-                       'NewInvoice' => 'SA_SUPPLIERINVOICE')
+                       'AddedGRN' => 'SA_GRN',
+                       'NewInvoice' => 'SA_SUPPLIERINVOICE',
+                       'AddedPI' => 'SA_SUPPLIERINVOICE')
 );
 
 $js = '';
index f44baf48ef1effd236ef06399c981db1cb73ff20..309f60277ddd08b2b9590689e641e836f38fd941 100644 (file)
@@ -34,11 +34,19 @@ set_page_security( @$_SESSION['Items']->trans_type,
                        ST_CUSTDELIVERY => 'SA_SALESDELIVERY',
                        ST_SALESINVOICE => 'SA_SALESINVOICE'),
        array(  'NewOrder' => 'SA_SALESORDER',
-                       'ModifySalesOrder' => 'SA_SALESORDER',
+                       'ModifyOrderNumber' => 'SA_SALESORDER',
+                       'AddedID' => 'SA_SALESORDER',
+                       'UpdatedID' => 'SA_SALESORDER',
                        'NewQuotation' => 'SA_SALESQUOTE',
                        'ModifyQuotationNumber' => 'SA_SALESQUOTE',
+                       'NewQuoteToSalesOrder' => 'SA_SALESQUOTE',
+                       'AddedQU' => 'SA_SALESQUOTE',
+                       'UpdatedQU' => 'SA_SALESQUOTE',
                        'NewDelivery' => 'SA_SALESDELIVERY',
-                       'NewInvoice' => 'SA_SALESINVOICE')
+                       'AddedDN' => 'SA_SALESDELIVERY', 
+                       'NewInvoice' => 'SA_SALESINVOICE',
+                       'AddedDI' => 'SA_SALESINVOICE'
+                       )
 );
 
 $js = '';