|
@@ -236,7 +236,7 @@ class Procuremen extends Backend
|
|
|
'purchaseconfirmpick' => $this->hasProcuremenPerm(['purchaseconfirmpick', 'purchaseConfirmPick']),
|
|
'purchaseconfirmpick' => $this->hasProcuremenPerm(['purchaseconfirmpick', 'purchaseConfirmPick']),
|
|
|
'purchaseapprovalreject' => $this->hasProcuremenPerm(['purchaseapprovalreject', 'purchaseApprovalReject']),
|
|
'purchaseapprovalreject' => $this->hasProcuremenPerm(['purchaseapprovalreject', 'purchaseApprovalReject']),
|
|
|
'details' => $this->hasProcuremenPerm(['details']),
|
|
'details' => $this->hasProcuremenPerm(['details']),
|
|
|
- 'archiveabandon' => $this->hasProcuremenPerm(['archiveabandon']),
|
|
|
|
|
|
|
+ 'archiveabandon' => $this->hasProcuremenPerm(['archiveabandon', 'archiveAbandon', 'auditabandon', 'auditAbandon']),
|
|
|
'export_month_outward' => $this->hasProcuremenPerm(['export_month_outward', 'exportMonthOutward']),
|
|
'export_month_outward' => $this->hasProcuremenPerm(['export_month_outward', 'exportMonthOutward']),
|
|
|
'review' => $this->hasProcuremenPerm(['review', 'picksubmit', 'pickreview']),
|
|
'review' => $this->hasProcuremenPerm(['review', 'picksubmit', 'pickreview']),
|
|
|
'reviewcompanies' => $this->hasProcuremenPerm(['reviewcompanies', 'reviewCompanies', 'pickreview', 'picksubmit', 'review']),
|
|
'reviewcompanies' => $this->hasProcuremenPerm(['reviewcompanies', 'reviewCompanies', 'pickreview', 'picksubmit', 'review']),
|
|
@@ -6708,6 +6708,9 @@ class Procuremen extends Backend
|
|
|
if (!$this->request->isPost()) {
|
|
if (!$this->request->isPost()) {
|
|
|
$this->error(__('Invalid parameters'));
|
|
$this->error(__('Invalid parameters'));
|
|
|
}
|
|
}
|
|
|
|
|
+ if (!$this->hasProcuremenPerm(['archiveabandon', 'archiveAbandon', 'auditabandon', 'auditAbandon'])) {
|
|
|
|
|
+ $this->error(__('You have no permission'));
|
|
|
|
|
+ }
|
|
|
|
|
|
|
|
$anchorIds = [];
|
|
$anchorIds = [];
|
|
|
$batchRaw = trim((string)$this->request->post('scydgy_ids_json', ''));
|
|
$batchRaw = trim((string)$this->request->post('scydgy_ids_json', ''));
|