X-Git-Url: http://git.freeside.biz/gitweb/?a=blobdiff_plain;f=httemplate%2Fmisc%2Funapply-cust_pay.cgi;h=8cdac180be1d87fe4b5945deeb8dfb129418ea76;hb=dfba562ff61f541ba7c75f2c02b32951b73aa002;hp=28643ef6e6e9564006db377d87098779bb61cf9c;hpb=f7fd2a3e34da751cbc02bbf215e99c6dc89adc15;p=freeside.git

diff --git a/httemplate/misc/unapply-cust_pay.cgi b/httemplate/misc/unapply-cust_pay.cgi
index 28643ef6e..8cdac180b 100755
--- a/httemplate/misc/unapply-cust_pay.cgi
+++ b/httemplate/misc/unapply-cust_pay.cgi
@@ -1,4 +1,8 @@
-<%
+<% $cgi->redirect($p. "view/cust_main.cgi?". $custnum) %>
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Unapply payment');
 
 #untaint paynum
 my($query) = $cgi->keywords;
@@ -10,9 +14,7 @@ my $custnum = $cust_pay->custnum;
 
 foreach my $cust_bill_pay ( $cust_pay->cust_bill_pay ) {
   my $error = $cust_bill_pay->delete;
-  eidiot($error) if $error;
+  errorpage($error) if $error;
 }
 
-print $cgi->redirect($p. "view/cust_main.cgi?". $custnum);
-
-%>
+</%init>