From 9f4b217a918ce2fd00138fb91f50ee21a2a77bae Mon Sep 17 00:00:00 2001
From: jeff <jeff>
Date: Tue, 20 Mar 2007 20:11:07 +0000
Subject: [PATCH] acls on new import

---
 httemplate/misc/cust_main_note-import.cgi         | 7 +++++++
 httemplate/misc/cust_main_note-import.html        | 9 ++++++++-
 httemplate/misc/process/cust_main_note-import.cgi | 4 ++++
 3 files changed, 19 insertions(+), 1 deletion(-)

diff --git a/httemplate/misc/cust_main_note-import.cgi b/httemplate/misc/cust_main_note-import.cgi
index 07b922f6c..690ca783d 100644
--- a/httemplate/misc/cust_main_note-import.cgi
+++ b/httemplate/misc/cust_main_note-import.cgi
@@ -198,3 +198,10 @@
 </FORM>
 </BODY>
 </HTML>
+
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Import');
+
+</%init>
diff --git a/httemplate/misc/cust_main_note-import.html b/httemplate/misc/cust_main_note-import.html
index 67f49f326..d8fefa732 100644
--- a/httemplate/misc/cust_main_note-import.html
+++ b/httemplate/misc/cust_main_note-import.html
@@ -5,7 +5,7 @@
 Import a CSV file containing customer notes records.
 <BR><BR>
 
-File format is CSV, with the following field order: <i>[custnum], last, first, notefield1, notefield2, notefield3...</i>
+File format is CSV, with the following field order: <i>[custnum,] last, first, notefield1, notefield2, notefield3...</i>
 <BR>
 The optional custnum field is identified by being numeric.
 Anything after the character sequence #! is ignored.
@@ -30,3 +30,10 @@ Anything after the character sequence #! is ignored.
 
 <% include('/elements/footer.html') %>
 
+<%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Import');
+
+</%init>
+
diff --git a/httemplate/misc/process/cust_main_note-import.cgi b/httemplate/misc/process/cust_main_note-import.cgi
index af06ae95e..efc6224d0 100644
--- a/httemplate/misc/process/cust_main_note-import.cgi
+++ b/httemplate/misc/process/cust_main_note-import.cgi
@@ -22,6 +22,10 @@ The following items <% $op eq 'Preview' ? 'would be' : 'were' %> imported.  (See
 </PRE>
   
 <%init>
+
+die "access denied"
+  unless $FS::CurrentUser::CurrentUser->access_right('Import');
+
 my $date = time;
 my $otaker = $FS::CurrentUser::CurrentUser->username;
 my $csv = new Text::CSV_XS;
-- 
2.11.0