diff options
| -rwxr-xr-x | httemplate/search/cust_pay.cgi | 5 | ||||
| -rw-r--r-- | httemplate/view/cust_pay.html | 3 |
2 files changed, 6 insertions, 2 deletions
diff --git a/httemplate/search/cust_pay.cgi b/httemplate/search/cust_pay.cgi index e5465aee8..80a611d97 100755 --- a/httemplate/search/cust_pay.cgi +++ b/httemplate/search/cust_pay.cgi @@ -235,7 +235,10 @@ if ( $cgi->param('magic') ) { } -my $link = [ "${p}view/cust_pay.html?paynum=", 'paynum' ]; +my $link = ''; +$link = [ "${p}view/cust_pay.html?paynum=", 'paynum' ] + if $FS::CurrentUser::CurrentUser->access_right('View invoices'); #XXX for now + #later# if $FS::CurrentUser::CurrentUser->access_right('View customer payments'); my $cust_link = sub { my $cust_pay = shift; diff --git a/httemplate/view/cust_pay.html b/httemplate/view/cust_pay.html index 4037d3525..2e2344d40 100644 --- a/httemplate/view/cust_pay.html +++ b/httemplate/view/cust_pay.html @@ -101,7 +101,8 @@ my $curuser = $FS::CurrentUser::CurrentUser; die "access denied" - unless $curuser->access_right('View customer payments'); + unless $curuser->access_right('View invoices') #remove this in 1.9 EVENTUALLY + || $curuser->access_right('View customer payments'); $cgi->param('paynum') =~ /^(\d+)$/ or die "no paynum"; my $paynum = $1; |