Add access right to view attachments

[freeside.git] / httemplate / view / cust_main.cgi

diff --git a/httemplate/view/cust_main.cgi b/httemplate/view/cust_main.cgi
index 3e5a8ce..76f5a51 100755 (executable)
--- a/httemplate/view/cust_main.cgi
+++ b/httemplate/view/cust_main.cgi
@@ -40,6 +40,7 @@ function areyousure(href, message) {
                 'actionlabel' => 'Confirm Cancellation',
                 'color'       => '#ff0000',
                 'cust_main'   => $cust_main,
+                'width'       => 616, #make room for reasons
               }
             )
   %> | 
@@ -147,21 +148,23 @@ Comments
               'action'      => $p.'edit/cust_main_attach.cgi',
               'actionlabel' => 'Upload file',
               'cust_main'   => $cust_main,
-              'width'       => 616,
-              'height'      => 408,
+              'width'       => 480,
+              'height'      => 296,
           )
 %>
 % }
+% if( $curuser->access_right('View attachments') ) {
 <% include('cust_main/attachments.html', 'custnum' => $cust_main->custnum ) %>
-% if($cgi->param('show_deleted')) {
+%   if ($cgi->param('show_deleted')) {
 <A HREF="<% $p.'view/cust_main.cgi?custnum=' . $cust_main->custnum .
            ($view ? ";show=$view" : '') . '#notes' 
            %>"><I>(Show active attachments)</I></A>
-% }
+%   }
 % elsif($curuser->access_right('View deleted attachments')) {
 <A HREF="<% $p.'view/cust_main.cgi?custnum=' . $cust_main->custnum .
            ($view ? ";show=$view" : '') . ';show_deleted=1#notes'
            %>"><I>(Show deleted attachments)</I></A>
+%   }
 % }
 <BR>