diff --git a/public/userarea/sales_orders_deliveries.php b/public/userarea/sales_orders_deliveries.php index f284bcfb..4a485472 100644 --- a/public/userarea/sales_orders_deliveries.php +++ b/public/userarea/sales_orders_deliveries.php @@ -10,8 +10,10 @@ $db = DBHandlerSelect::getInstance(); $pdo = $db->getConnection(); $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION); -// --- Permessi: pagina visibile solo con 'sales.stats.view' --- -if (!userCan('sales.stats.view')) { +// --- Permessi: pagina visibile solo con 'sales.deliveries.view' --- +$canStats = userCan('sales.stats.view'); // per i tab e il link al dettaglio ordine +$canDeliveries = userCan('sales.deliveries.view'); +if (!$canDeliveries) { if (isset($_GET['action']) || isset($_POST['action'])) { MagoSalesStats::jsonOut(['success' => false, 'ok' => false, 'message' => 'Non hai i permessi per questa pagina']); } @@ -603,8 +605,10 @@ if ($action === 'data') {