summaryrefslogtreecommitdiff
path: root/httemplate/misc/process/payment.cgi
diff options
context:
space:
mode:
authorivan <ivan>2008-01-13 21:14:19 +0000
committerivan <ivan>2008-01-13 21:14:19 +0000
commitf49f11d4c3c4ba9480cc5c9acfaa606a5ba73ad1 (patch)
tree2104b5d1a05433756d3b91ee436cfaa8c24ab464 /httemplate/misc/process/payment.cgi
parent2d53d2ebdce80d0f0dc7f75ccf506a06c2f852f9 (diff)
ACLs
Diffstat (limited to 'httemplate/misc/process/payment.cgi')
-rw-r--r--httemplate/misc/process/payment.cgi3
1 files changed, 3 insertions, 0 deletions
diff --git a/httemplate/misc/process/payment.cgi b/httemplate/misc/process/payment.cgi
index 889670d12..2baca1e39 100644
--- a/httemplate/misc/process/payment.cgi
+++ b/httemplate/misc/process/payment.cgi
@@ -15,6 +15,9 @@
% }
<%init>
+die "access denied"
+ unless $FS::CurrentUser::CurrentUser->access_right('Process payment');
+
#some false laziness w/MyAccount::process_payment
$cgi->param('custnum') =~ /^(\d+)$/