X-Git-Url: http://git.freeside.biz/gitweb/?a=blobdiff_plain;f=httemplate%2Fsearch%2Fsql.html;h=df9b8cddbf50bdc1cbd8952d7f83732bfc94a005;hb=718f65eee1c797ea90a315b5f03fae75c80a5112;hp=681a95d6018039d0f9d94f411c70a575728857bd;hpb=c8cccb4a92adceb943c635fe62dad0d034462ce0;p=freeside.git

diff --git a/httemplate/search/sql.html b/httemplate/search/sql.html
index 681a95d60..df9b8cddb 100644
--- a/httemplate/search/sql.html
+++ b/httemplate/search/sql.html
@@ -2,6 +2,12 @@
                'title' => 'Query Results',
                'name'  => 'rows',
                'query' => 'SELECT '. ( $cgi->param('sql')
-                                       || eidiot('Empty query') ),
+                             || errorpage('Empty query') ),
     )
 %>
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Raw SQL');
+
+</%init>