FrontAccounting forum — Restricting sales Invoice price edition for unauthorized users

Re: Restricting sales Invoice price edition for unauthorized users

null@example.com (detkenn) — Sun, 28 Feb 2021 17:58:43 +0000

Any Updates?

Re: Restricting sales Invoice price edition for unauthorized users

null@example.com (joe) — Sun, 10 Jan 2021 06:52:11 +0000

I will ask Janusz to take a look at thisl

/Joe

Re: Restricting sales Invoice price edition for unauthorized users

null@example.com (apmuthu) — Sun, 10 Jan 2021 04:51:26 +0000

@joe: Does this warrant a commit? Is the hidden price field safe as is? The patch is attached for current repo.

Restricting sales Invoice price edition for unauthorized users

null@example.com (detkenn) — Sat, 09 Jan 2021 20:21:25 +0000

A feature to restrict users, with no sales pricing edition permissions, from editing prices while creating a Sales Order/Delivery /Invoice is admirable. Here is the code:

File: sales/includes/ui/sales_order_ui.inc
Change function sales_order_item_controls as follows:

if (list_updated('stock_id')) {            
            $Ajax->activate('price');
            $Ajax->activate('units');
            $Ajax->activate('qty');
            $Ajax->activate('line_total');
            $Ajax->activate('price_lbl');
            $Ajax->activate('Disc_lbl');
        }

label_cell($units, '', 'units');

        if($_SESSION["wa_current_user"]->can_access('SA_SALESPRICE')){
            amount_cells(null, 'price');
            small_amount_cells(null, 'Disc', percent_format($_POST['Disc']), null, null, user_percent_dec());
        } else {
            amount_cell(input_num('price'),false,'','price_lbl');
            hidden("price",$_POST['price']);
            
            amount_cell(input_num('Disc'),false,'','Disc_lbl');
            hidden("Disc",$_POST['Disc']);
        }