X-Git-Url: http://git.freeside.biz/gitweb/?p=freeside.git;a=blobdiff_plain;f=httemplate%2Fmisc%2Fdelete-part_export.cgi;h=52404e0c48df8ed85160ab01a512c5803b0e450f;hp=a5166d9445f66b08c053e6a55df8f3f0a8a71cb8;hb=79c8be3bd0c5db42794b36bf5b5dd25addba67cb;hpb=b159f42fa3f48cc2ca3b43773e7661e17d2fb072

diff --git a/httemplate/misc/delete-part_export.cgi b/httemplate/misc/delete-part_export.cgi
index a5166d944..52404e0c4 100755
--- a/httemplate/misc/delete-part_export.cgi
+++ b/httemplate/misc/delete-part_export.cgi
@@ -1,6 +1,14 @@
-<%
+% if ( $error ) {
+%   errorpage($error);
+% } else {
+<% $cgi->redirect($p. "browse/part_export.cgi") %>
+% }
+<%init>
 
-#untaint paynum
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Configuration');
+
+#untaint exportnum
 my($query) = $cgi->keywords;
 $query =~ /^(\d+)$/ || die "Illegal exportnum";
 my $exportnum = $1;
@@ -8,8 +16,5 @@ my $exportnum = $1;
 my $part_export = qsearchs('part_export',{'exportnum'=>$exportnum});
 
 my $error = $part_export->delete;
-eidiot($error) if $error;
-
-print $cgi->redirect($p. "browse/part_svc.cgi");
 
-%>
+</%init>