X-Git-Url: http://git.freeside.biz/gitweb/?p=freeside.git;a=blobdiff_plain;f=httemplate%2Fmisc%2Funapply-cust_credit.cgi;h=aa1a3a9c20d799f7aed46e7a4e49da831ce682a7;hp=c658d2acc9663074b67fc3915be76dcdf4360025;hb=e803d5f00368e951f7a4b82d5d390b53c4a6c827;hpb=673b9a458d9138523026963df6fa3b4683e09bae

diff --git a/httemplate/misc/unapply-cust_credit.cgi b/httemplate/misc/unapply-cust_credit.cgi
index c658d2acc..aa1a3a9c2 100755
--- a/httemplate/misc/unapply-cust_credit.cgi
+++ b/httemplate/misc/unapply-cust_credit.cgi
@@ -1,4 +1,8 @@
-<%
+<% $cgi->redirect($p. "view/cust_main.cgi?custnum=". $custnum. ";show=payment_history") %>
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Unapply credit');
 
 #untaint crednum
 my($query) = $cgi->keywords;
@@ -10,9 +14,7 @@ my $custnum = $cust_credit->custnum;
 
 foreach my $cust_credit_bill ( $cust_credit->cust_credit_bill ) {
   my $error = $cust_credit_bill->delete;
-  eidiot($error) if $error;
+  errorpage($error) if $error;
 }
 
-print $cgi->redirect($p. "view/cust_main.cgi?". $custnum);
-
-%>
+</%init>