X-Git-Url: http://git.freeside.biz/gitweb/?a=blobdiff_plain;f=httemplate%2Fmisc%2Fcancel-unaudited.cgi;h=4919c6632df4227404e49279fffb3dc79427e5f5;hb=dfba562ff61f541ba7c75f2c02b32951b73aa002;hp=43e439b58e0a62e345044f9ee4b404082c598db6;hpb=e3f327b2af9e6a591bae41d315fda731ec7f5128;p=freeside.git

diff --git a/httemplate/misc/cancel-unaudited.cgi b/httemplate/misc/cancel-unaudited.cgi
index 43e439b58..4919c6632 100755
--- a/httemplate/misc/cancel-unaudited.cgi
+++ b/httemplate/misc/cancel-unaudited.cgi
@@ -1,7 +1,15 @@
-<%
+%if ( $error ) {
+%  errorpage($error);
+%} else {
+<% $cgi->redirect(popurl(2)) %>
+%}
+
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Unprovision customer service')
+      && $FS::CurrentUser::CurrentUser->access_right('View/link unlinked services');
 
-my $dbh = dbh;
- 
 #untaint svcnum
 my($query) = $cgi->keywords;
 $query =~ /^(\d+)$/;
@@ -14,7 +22,7 @@ my $cust_svc = qsearchs('cust_svc',{'svcnum'=>$svcnum});
 die "Unknown svcnum!" unless $cust_svc;
 my $cust_pkg = $cust_svc->cust_pkg;
 if ( $cust_pkg ) {
-  &eidiot( 'This account has already been audited.  Cancel the '.
+  errorpage( 'This account has already been audited.  Cancel the '.
            qq!<A HREF="${p}view/cust_main.cgi?!. $cust_pkg->custnum.
            '#cust_pkg'. $cust_pkg->pkgnum. '">'.
            'package</A> instead.');
@@ -22,13 +30,4 @@ if ( $cust_pkg ) {
 
 my $error = $cust_svc->cancel;
 
-if ( $error ) {
-  %>
-<!-- mason kludge -->
-<%
-  &eidiot($error);
-} else {
-  print $cgi->redirect(popurl(2));
-}
-
-%>
+</%init>