ACLs

[freeside.git] / httemplate / view / svc_forward.cgi

diff --git a/httemplate/view/svc_forward.cgi b/httemplate/view/svc_forward.cgi
index fcc0bc9..7451477 100755 (executable)
--- a/httemplate/view/svc_forward.cgi
+++ b/httemplate/view/svc_forward.cgi
@@ -1,12 +1,20 @@
-<!-- mason kludge -->
-%
+% die "access denied"
+%   unless $FS::CurrentUser::CurrentUser->access_right('View customer services');
 %
 %my $conf = new FS::Conf;
 %
 %my($query) = $cgi->keywords;
 %$query =~ /^(\d+)$/;
 %my $svcnum = $1;
-%my $svc_forward = qsearchs('svc_forward',{'svcnum'=>$svcnum});
+%my $svc_forward = qsearchs({
+%  'select'    => 'svc_forward.*',
+%  'table'     => 'svc_forward',
+%  'addl_from' => ' LEFT JOIN cust_svc  USING ( svcnum  ) '.
+%                 ' LEFT JOIN cust_pkg  USING ( pkgnum  ) '.
+%                 ' LEFT JOIN cust_main USING ( custnum ) ',
+%  'hashref'   => {'svcnum'=>$svcnum},
+%  'extra_sql' => ' AND '. $FS::CurrentUser::CurrentUser->agentnums_sql,
+%});
 %die "Unknown svcnum" unless $svc_forward;
 %
 %my $cust_svc = qsearchs('cust_svc',{'svcnum'=>$svcnum});
@@ -29,8 +37,7 @@
 %      )
 %    : ( "Cancel this (unaudited) mail forward" =>
 %          "${p}misc/cancel-unaudited.cgi?$svcnum" )
-%  ),
-%  "Main menu" => $p,
+%  )
 %));
 %
 %my($srcsvc,$dstsvc,$dst) = (