X-Git-Url: http://git.freeside.biz/gitweb/?a=blobdiff_plain;f=httemplate%2Fbrowse%2Fcust_attachment.html;h=9d62e56094c15ca682bfc4bb994beaaf8f9702fa;hb=033709735189caa804476fc17e9946809516fcf7;hp=0fdc745a2cb21843a28b6e5ce96708cff022bf79;hpb=fc195fd7a0a2ca670cfdd62ef646436b58795c21;p=freeside.git

diff --git a/httemplate/browse/cust_attachment.html b/httemplate/browse/cust_attachment.html
index 0fdc745a2..9d62e5609 100755
--- a/httemplate/browse/cust_attachment.html
+++ b/httemplate/browse/cust_attachment.html
@@ -13,7 +13,7 @@
                     , 
                  'query'       => { 'table'     => 'cust_attachment',
                                     'hashref'   => $hashref,
-                                    'extra_sql' => 'ORDER BY '.$orderby,
+                                    'order_by' => 'ORDER BY '.$orderby,
                                   },
                  'count_query' => $count_query,
                  'header' => [ selflink('#',orderby => 'attachnum'),
@@ -62,6 +62,8 @@
 <%init>
 
 my $curuser = $FS::CurrentUser::CurrentUser;
+die "access denied" if !$curuser->access_right('View attachments')
+                    or !$curuser->access_right('Browse attachments');
 
 my $conf = new FS::Conf;