From 618f27a750537cae4df1fb319c20b30477081c92 Mon Sep 17 00:00:00 2001 From: erickson Date: Thu, 22 May 2008 02:25:52 +0000 Subject: [PATCH] also checking create-po perm based on ordering agency as wel git-svn-id: svn://svn.open-ils.org/ILS/branches/acq-experiment@9660 dcc99617-32d9-48b4-a31d-7c20da2025e4 --- Open-ILS/src/perlmods/OpenILS/Application/Acq/Financials.pm | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/Open-ILS/src/perlmods/OpenILS/Application/Acq/Financials.pm b/Open-ILS/src/perlmods/OpenILS/Application/Acq/Financials.pm index 28d3eb2278..cca95edeef 100644 --- a/Open-ILS/src/perlmods/OpenILS/Application/Acq/Financials.pm +++ b/Open-ILS/src/perlmods/OpenILS/Application/Acq/Financials.pm @@ -545,14 +545,16 @@ sub create_purchase_order { my($self, $conn, $auth, $p_order) = @_; my $e = new_editor(xact=>1, authtoken=>$auth); return $e->die_event unless $e->checkauth; + $p_order->owner($e->requestor->id); + $p_order->ordering_agency($e->requestor->ws_ou); + return $e->die_event unless + $e->allowed('CREATE_PURCHASE_ORDER', $p_order->ordering_agency); my $provider = $e->retrieve_acq_provider($p_order->provider) or return $e->die_event; - - $p_order->ordering_agency($e->requestor->ws_ou) or return $e->die_event; - - return $e->die_event unless $e->allowed('MANAGE_PROVIDER', $provider->owner, $provider); + return $e->die_event unless + $e->allowed('MANAGE_PROVIDER', $provider->owner, $provider); $e->create_acq_purchase_order($p_order) or return $e->die_event; $e->commit; -- 2.11.0