oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

visitors shouldn't be allowed to view their purchases

Browse source
This commit is contained in:
Matthew Wilson 2006-04-27 13:49:37 +00:00
parent 975344b1ce
commit a12d8b6815
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
lib/WebGUI/Asset/Wobject/EventManagementSystem.pm
View file

@ -1951,6 +1951,7 @@ Method to display list of purchases. Event admins can see everyone's purchases.
sub www_managePurchases {
my $self = shift;
return $self->session->privilege->insufficient if $self->session->var->get('userId') eq '1';
my %var = $self->get();
my $isAdmin = $self->canAddEvents;