}
-my $link = [ "${p}view/cust_pay.html?paynum=", 'paynum' ];
+my $link = '';
+$link = [ "${p}view/cust_pay.html?paynum=", 'paynum' ]
+ if $FS::CurrentUser::CurrentUser->access_right('View invoices'); #XXX for now
+ #later# if $FS::CurrentUser::CurrentUser->access_right('View customer payments');
my $cust_link = sub {
my $cust_pay = shift;
my $curuser = $FS::CurrentUser::CurrentUser;
die "access denied"
- unless $curuser->access_right('View customer payments');
+ unless $curuser->access_right('View invoices') #remove this in 1.9 EVENTUALLY
+ || $curuser->access_right('View customer payments');
$cgi->param('paynum') =~ /^(\d+)$/ or die "no paynum";
my $paynum = $1;