4 files changed, 29 insertions, 9 deletions
diff --git a/httemplate/misc/email_events.cgi b/httemplate/misc/email_events.cgi
index c6efa7dc9..e7a0e77f8 100644
--- a/httemplate/misc/email_events.cgi
+++ b/httemplate/misc/email_events.cgi
@@ -1,4 +1,9 @@
-%
-%my $server = new FS::UI::Web::JSRPC 'FS::cust_event::process_reemail', $cgi;
-%
 <% $server->process %>
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Resend invoices');
+
+my $server = new FS::UI::Web::JSRPC 'FS::cust_event::process_reemail', $cgi;
+
+</%init>
diff --git a/httemplate/misc/fax_events.cgi b/httemplate/misc/fax_events.cgi
index bf5ddd138..39cba0707 100644
--- a/httemplate/misc/fax_events.cgi
+++ b/httemplate/misc/fax_events.cgi
@@ -1,4 +1,9 @@
-% 
-%my $server = new FS::UI::Web::JSRPC 'FS::cust_event::process_refax', $cgi;
-%
 <% $server->process %>
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Resend invoices');
+
+my $server = new FS::UI::Web::JSRPC 'FS::cust_event::process_refax', $cgi;
+
+</%init>
diff --git a/httemplate/misc/order_pkg.html b/httemplate/misc/order_pkg.html
index a49404bb8..05cd99cc5 100644
--- a/httemplate/misc/order_pkg.html
+++ b/httemplate/misc/order_pkg.html
@@ -41,8 +41,13 @@ function enable_order_pkg () {
 <INPUT NAME="submit" TYPE="submit" VALUE="Order Package" disabled>
 
 </FORM>
+</BODY>
+</HTML>
 <%init>
 
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Order customer package');
+
 my $conf = new FS::Conf;
 
 my($query) = $cgi->keywords;
diff --git a/httemplate/misc/print_events.cgi b/httemplate/misc/print_events.cgi
index db7f9843e..8d83d3de1 100644
--- a/httemplate/misc/print_events.cgi
+++ b/httemplate/misc/print_events.cgi
@@ -1,4 +1,9 @@
-%
-%my $server = new FS::UI::Web::JSRPC 'FS::cust_event::process_reprint', $cgi; 
-
 <% $server->process %>
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Resend invoices');
+
+my $server = new FS::UI::Web::JSRPC 'FS::cust_event::process_reprint', $cgi; 
+
+</%init>