Correction protection habilitations

htdocs/comm/fiche.php

@@ -75,7 +75,7 @@ if (! $sortorder) $sortorder="ASC";
 if (! $sortfield) $sortfield="nom";
 
 
-if ($_GET["action"] == 'attribute_prefix')
+if ($_GET["action"] == 'attribute_prefix' && $user->rights->societe->creer)
 {
     $societe = new Societe($db, $_GET["socid"]);
     $societe->attribute_prefix($db, $_GET["socid"]);

htdocs/soc.php

@@ -93,7 +93,7 @@ if ($_POST["getsuppliercode"])
 }
 
 if ((! $_POST["getcustomercode"] && ! $_POST["getsuppliercode"])
-	 && ($_POST["action"] == 'add' || $_POST["action"] == 'update'))
+	 && ($_POST["action"] == 'add' || $_POST["action"] == 'update') && $user->rights->societe->creer)
 {
     $soc->nom                   = $_POST["nom"];
     $soc->adresse               = $_POST["adresse"];

htdocs/socnote.php

@@ -119,7 +119,7 @@ if ($socidp > 0)
 		print "<input type=\"hidden\" name=\"socid\" value=\"".$societe->id."\">";
 
 	    // diteur wysiwyg
-		if ($conf->fckeditor->enabled && $conf->global->FCKEDITOR_ENABLE_MAILING)
+		if ($conf->fckeditor->enabled && $conf->global->FCKEDITOR_ENABLE_SOCIETE)
 	    {
 			require_once(DOL_DOCUMENT_ROOT."/lib/doleditor.class.php");
 			$doleditor=new DolEditor('note',$societe->note,280,'dolibarr_notes');