[Web-erp-svn] SF.net SVN: web-erp:[6453] trunk

[<te...@us...>]

Revision: 6453
          http://sourceforge.net/p/web-erp/reponame/6453
Author:   tehonu
Date:     2013-11-29 01:58:53 +0000 (Fri, 29 Nov 2013)
Log Message:
-----------
Restricted the user selection of bank accounts, only to previously authorized bank accounts

Modified Paths:
--------------
    trunk/BankMatching.php
    trunk/BankReconciliation.php
    trunk/CustomerReceipt.php
    trunk/Payments.php

Modified: trunk/BankMatching.php
===================================================================
--- trunk/BankMatching.php	2013-11-29 01:28:57 UTC (rev 6452)
+++ trunk/BankMatching.php	2013-11-29 01:58:53 UTC (rev 6453)
@@ -100,7 +100,12 @@
 			<td align="left">' . _('Bank Account') . ':</td>
 			<td colspan="3"><select tabindex="1" autofocus="autofocus" name="BankAccount">';
 
-$sql = "SELECT accountcode, bankaccountname FROM bankaccounts";
+$sql = "SELECT bankaccounts.accountcode, 
+				bankaccounts.bankaccountname 
+		FROM bankaccounts, bankaccountusers
+		WHERE bankaccounts.accountcode=bankaccountusers.accountcode
+			AND bankaccountusers.userid = '" . $_SESSION['UserID'] ."'
+		ORDER BY bankaccounts.bankaccountname";
 $resultBankActs = DB_query($sql,$db);
 while ($myrow=DB_fetch_array($resultBankActs)){
 	if (isset($_POST['BankAccount'])

Modified: trunk/BankReconciliation.php
===================================================================
--- trunk/BankReconciliation.php	2013-11-29 01:28:57 UTC (rev 6452)
+++ trunk/BankReconciliation.php	2013-11-29 01:58:53 UTC (rev 6453)
@@ -99,7 +99,12 @@
 
 echo '<table class="selection">';
 
-$SQL = "SELECT bankaccountname, accountcode FROM bankaccounts";
+$SQL = "SELECT bankaccounts.accountcode, 
+				bankaccounts.bankaccountname 
+		FROM bankaccounts, bankaccountusers
+		WHERE bankaccounts.accountcode=bankaccountusers.accountcode
+			AND bankaccountusers.userid = '" . $_SESSION['UserID'] ."'
+		ORDER BY bankaccounts.bankaccountname";
 
 $ErrMsg = _('The bank accounts could not be retrieved by the SQL because');
 $DbgMsg = _('The SQL used to retrieve the bank accounts was');

Modified: trunk/CustomerReceipt.php
===================================================================
--- trunk/CustomerReceipt.php	2013-11-29 01:28:57 UTC (rev 6452)
+++ trunk/CustomerReceipt.php	2013-11-29 01:58:53 UTC (rev 6453)
@@ -748,9 +748,13 @@
 $SQL = "SELECT bankaccountname,
 				bankaccounts.accountcode,
 				bankaccounts.currcode
-		FROM bankaccounts INNER JOIN chartmaster
-		ON bankaccounts.accountcode=chartmaster.accountcode
-		ORDER BY bankaccountname";
+		FROM bankaccounts 
+		INNER JOIN chartmaster
+			ON bankaccounts.accountcode=chartmaster.accountcode
+		INNER JOIN bankaccountusers
+			ON bankaccounts.accountcode=bankaccountusers.accountcode
+		WHERE bankaccountusers.userid = '" . $_SESSION['UserID'] ."'
+ORDER BY bankaccountname";
 
 $ErrMsg = _('The bank accounts could not be retrieved because');
 $DbgMsg = _('The SQL used to retrieve the bank accounts was');

Modified: trunk/Payments.php
===================================================================
--- trunk/Payments.php	2013-11-29 01:28:57 UTC (rev 6452)
+++ trunk/Payments.php	2013-11-29 01:58:53 UTC (rev 6453)
@@ -773,8 +773,12 @@
 $SQL = "SELECT bankaccountname,
 				bankaccounts.accountcode,
 				bankaccounts.currcode
-		FROM bankaccounts INNER JOIN chartmaster
-		ON bankaccounts.accountcode=chartmaster.accountcode
+		FROM bankaccounts 
+		INNER JOIN chartmaster
+			ON bankaccounts.accountcode=chartmaster.accountcode
+		INNER JOIN bankaccountusers
+			ON bankaccounts.accountcode=bankaccountusers.accountcode
+		WHERE bankaccountusers.userid = '" . $_SESSION['UserID'] ."'
 		ORDER BY bankaccountname";
 
 $ErrMsg = _('The bank accounts could not be retrieved because');