summaryrefslogtreecommitdiff
path: root/httemplate/misc/process/payment.cgi
diff options
context:
space:
mode:
authorivan <ivan>2008-01-13 21:14:32 +0000
committerivan <ivan>2008-01-13 21:14:32 +0000
commit97e6cec67c0c99ce1b6f0667a09f1e009100189d (patch)
tree1d43c279a429c8284611e98e327a6049e971192d /httemplate/misc/process/payment.cgi
parentc223e0957b194e24dccbda5bbc29841385cc0961 (diff)
ACLs
Diffstat (limited to 'httemplate/misc/process/payment.cgi')
-rw-r--r--httemplate/misc/process/payment.cgi3
1 files changed, 3 insertions, 0 deletions
diff --git a/httemplate/misc/process/payment.cgi b/httemplate/misc/process/payment.cgi
index 889670d12..2baca1e39 100644
--- a/httemplate/misc/process/payment.cgi
+++ b/httemplate/misc/process/payment.cgi
@@ -15,6 +15,9 @@
% }
<%init>
+die "access denied"
+ unless $FS::CurrentUser::CurrentUser->access_right('Process payment');
+
#some false laziness w/MyAccount::process_payment
$cgi->param('custnum') =~ /^(\d+)$/