[Weberp-svn] SF.net SVN: weberp:[4913] trunk

[<tim...@us...>]

Revision: 4913
          http://weberp.svn.sourceforge.net/weberp/?rev=4913&view=rev
Author:   tim_schofield
Date:     2011-03-27 13:40:35 +0000 (Sun, 27 Mar 2011)

Log Message:
-----------
Check if the user has authority to create a tender

Modified Paths:
--------------
    trunk/SupplierTenderCreate.php
    trunk/includes/UserLogin.php

Modified: trunk/SupplierTenderCreate.php
===================================================================
--- trunk/SupplierTenderCreate.php	2011-03-27 13:40:20 UTC (rev 4912)
+++ trunk/SupplierTenderCreate.php	2011-03-27 13:40:35 UTC (rev 4913)
@@ -13,6 +13,17 @@
 	unset($_SESSION['tender']);
 }
 
+if (isset($_GET['New']) and $_SESSION['CanCreateTender']==0) {
+	$title = _('Authorisation Problem');
+	include('includes/header.inc');
+	echo '<p class="page_title_text"><img src="'.$rootpath.'/css/'.$theme.'/images/supplier.png" title="' .
+		$title . '" alt="">  '.$title . '</p>';
+	prnMsg( _('You do not have authority to create supplier tenders for this company.') . '<br />' .
+			_('Please see your system administrator'), 'warn');
+	include('includes/footer.inc');
+	exit;
+}
+
 $ShowTender = 0;
 
 if (isset($_GET['ID'])) {

Modified: trunk/includes/UserLogin.php
===================================================================
--- trunk/includes/UserLogin.php	2011-03-27 13:40:20 UTC (rev 4912)
+++ trunk/includes/UserLogin.php	2011-03-27 13:40:35 UTC (rev 4913)
@@ -63,6 +63,7 @@
 			$_SESSION['UserID'] = $myrow['userid'];
 			$_SESSION['AttemptsCounter'] = 0;
 			$_SESSION['AccessLevel'] = $myrow['fullaccess'];
+			$_SESSION['CanCreateTender'] = $myrow['cancreatetender'];
 			$_SESSION['CustomerID'] = $myrow['customerid'];
 			$_SESSION['UserBranch'] = $myrow['branchcode'];
 			$_SESSION['DefaultPageSize'] = $myrow['pagesize'];


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.