From 141480275e1407308d7479ca952ba96f64bd90b7 Mon Sep 17 00:00:00 2001 From: Marius Cramer Date: Tue, 30 Jun 2015 12:32:41 +0200 Subject: [PATCH] - added access check to limit template select box --- interface/web/client/client_edit.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/interface/web/client/client_edit.php b/interface/web/client/client_edit.php index 66a20c8d6..2bb169c01 100644 --- a/interface/web/client/client_edit.php +++ b/interface/web/client/client_edit.php @@ -125,7 +125,7 @@ class page_action extends tform_actions { global $app; - $sql = "SELECT template_id,template_name FROM client_template WHERE template_type = 'a' ORDER BY template_name ASC"; + $sql = "SELECT template_id,template_name FROM client_template WHERE template_type = 'a' and ".$app->tform->getAuthSQL('r')." ORDER BY template_name ASC"; $tpls = $app->db->queryAllRecords($sql); $option = ''; $tpl = array(); -- GitLab