X-Git-Url: http://git.freeside.biz/gitweb/?a=blobdiff_plain;f=httemplate%2Fmisc%2Fdelete-cust_pay.cgi;h=38e7e4ba17fe32fb01a55d5db3cb09a2162f9014;hb=5fdd19665fb7c0ad425a99d3dbf9ad7e27fbf44a;hp=3efd918abc2df637f3616fe5e3738fd473a258d4;hpb=673b9a458d9138523026963df6fa3b4683e09bae;p=freeside.git

diff --git a/httemplate/misc/delete-cust_pay.cgi b/httemplate/misc/delete-cust_pay.cgi
index 3efd918ab..38e7e4ba1 100755
--- a/httemplate/misc/delete-cust_pay.cgi
+++ b/httemplate/misc/delete-cust_pay.cgi
@@ -1,4 +1,12 @@
-<%
+% if ( $error ) {
+%   errorpage($error);
+% } else {
+<% $cgi->redirect($p. "view/cust_main.cgi?". $custnum) %>
+% }
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Delete payment');
 
 #untaint paynum
 my($query) = $cgi->keywords;
@@ -9,8 +17,5 @@ my $cust_pay = qsearchs('cust_pay',{'paynum'=>$paynum});
 my $custnum = $cust_pay->custnum;
 
 my $error = $cust_pay->delete;
-eidiot($error) if $error;
-
-print $cgi->redirect($p. "view/cust_main.cgi?". $custnum);
 
-%>
+</%init>