From 6853ed0e5e3ca8b77f1dfb37910074fc913b6aaa Mon Sep 17 00:00:00 2001
From: Laurent Destailleur <eldy@destailleur.fr>
Date: Tue, 28 Aug 2012 18:39:34 +0200
Subject: [PATCH] Fix: permission for a user to view its own card using
webservice
---
htdocs/webservices/server_user.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/htdocs/webservices/server_user.php b/htdocs/webservices/server_user.php
index 2ad6d9acb45..d9a853f4d8a 100644
--- a/htdocs/webservices/server_user.php
+++ b/htdocs/webservices/server_user.php
@@ -180,7 +180,7 @@ function getUser($authentication,$id,$ref='',$ref_ext='')
{
$fuser->getrights();
- if ($fuser->rights->user->user->lire)
+ if ($fuser->rights->user->user->lire || ($fuser->rights->user->self->creer && $fuser->id = $id))
{
$user=new User($db);
$result=$user->fetch($id,$ref,$ref_ext);
--
GitLab