51 |
|
|
52 |
$cn=DbConnect($_SESSION['g_dossier']); |
$cn=DbConnect($_SESSION['g_dossier']); |
53 |
|
|
54 |
|
// Security check |
55 |
|
$read=$User->CheckAction($cn,FICHE_READ); |
56 |
|
$write=$User->CheckAction($cn,FICHE_WRITE); |
57 |
|
if ($read+$write == 0 ){ |
58 |
// ShowMenuComptaRight($g_dossier,$g_UserProperty); |
/* Cannot Access */ |
59 |
if ( $User->admin == 0 ) { |
NoAccess(); |
|
$read=CheckAction($_SESSION['g_dossier'],$User->id,FICHE_READ); |
|
|
$write=CheckAction($_SESSION['g_dossier'],$User->id,FICHE_WRITE); |
|
|
if ($read+$write == 0 ){ |
|
|
/* Cannot Access */ |
|
|
NoAccess(); |
|
|
} |
|
|
}else { |
|
|
$write=1; |
|
60 |
} |
} |
61 |
|
|
62 |
// Creation of a new model of card |
// Creation of a new model of card |
63 |
// in the database |
// in the database |
64 |
if ( isset($_POST['add_modele']) and $write != 0) { |
if ( isset($_POST['add_modele']) and $write != 0) { |