PNBR#51782 Bij voorraadlijst ook autorisatie controleren per catalogus

svn path=/Website/branches/v2017.2/; revision=36620
This commit is contained in:
Jos Groot Lipman
2018-01-17 16:20:57 +00:00
parent e11b54a864
commit b6a1efaa65

View File

@@ -138,13 +138,6 @@ function bes_voorraad_list (pautfunction, params)
+ " AND g.ins_discipline_key = bd.ins_discipline_key"
+ " AND bd.ins_discipline_key = dp.bes_ins_discipline_key"
+ " AND sd.bes_srtdeel_verwijder IS NULL"
+ " AND dp.bes_ins_discipline_key_inkoop IN"
+ " (SELECT ins_discipline_key"
+ " FROM fac_v_webgebruiker g"
+ " , fac_functie f"
+ " WHERE g.prs_perslid_key = " + user_key
+ " AND f.fac_functie_key = g.fac_functie_key "
+ " AND f.fac_functie_code = " + safe.quoted_sql(pautfunction) + ")"
+ (params.catalogus_key
? " AND dp.bes_ins_discipline_key_inkoop = " + params.catalogus_key
+ " AND (sd.bes_srtdeel_vervaldatum IS NULL OR sd.bes_srtdeel_vervaldatum > SYSDATE)"
@@ -424,6 +417,13 @@ function bes_voorraad_list (pautfunction, params)
+ " WHERE a.bes_srtdeel_nr = b.bes_srtdeel_nr"
+ " AND a.inkoop_disc = b.ins_discipline_key"
+ " AND a.bes_srtdeel_key = c.bes_srtdeel_key(+)"
+ " AND a.inkoop_disc IN"
+ " (SELECT ins_discipline_key"
+ " FROM fac_v_webgebruiker g"
+ " , fac_functie f"
+ " WHERE g.prs_perslid_key = " + user_key
+ " AND f.fac_functie_key = g.fac_functie_key "
+ " AND f.fac_functie_code = " + safe.quoted_sql(pautfunction) + ")"
+ (params.catalogus_key
? " AND a.inkoop_disc = " + params.catalogus_key
: "")