Dolibarr ERP & CRM » Bugs » bug #1591 Linked object block shows Total HT/TTC even if not having permission to read themSnapshot| Details |
| Submitted by: | Marcos García (marcosgdf) | | Submitted on: | 2014-09-12 15:35 |
| Last Modified On: | 2014-09-12 15:35 | |
| Summary: | Linked object block shows Total HT/TTC even if not having permission to read them |
| Description: | If an external user has access to a particular object and a linked object block is shown, he has access to read the total amount of that linked ref, even if he doesn't have permission to read that object. |
| Step to reproduce bug: | |
| Detected in version: | 3.5.4 | | Category: | Core Problem |
| Severity: | 3 | | OS Type/Version: | |
| PHP version: | | | Database type and version: | |
| Status |
| Status: | Open | | Assigned to: | None |
| Resolution: | None | |
Answer now
|
|