use SL::DB::PurchaseInvoice;
use SL::DB::RecordLink;
use SL::DB::RequirementSpec;
+use SL::DBUtils qw(like);
use SL::JSON;
use SL::Locale::String;
scalar => [ qw(object object_model object_id link_type link_direction link_type_desc) ],
);
+__PACKAGE__->run_before('check_auth');
__PACKAGE__->run_before('check_object_params', only => [ qw(ajax_list ajax_delete ajax_add_select_type ajax_add_filter ajax_add_list ajax_add_do) ]);
__PACKAGE__->run_before('check_link_params', only => [ qw( ajax_add_list ajax_add_do) ]);
my $filter = $self->link_type_desc->{filter};
my @where = $filter && $manager->can($filter) ? $manager->$filter($self->link_type) : ();
- push @where, ("${vc}.${vc}number" => { ilike => '%' . $::form->{vc_number} . '%' }) if $::form->{vc_number};
- push @where, ("${vc}.name" => { ilike => '%' . $::form->{vc_name} . '%' }) if $::form->{vc_name};
- push @where, ($description => { ilike => '%' . $::form->{transaction_description} . '%' }) if $::form->{transaction_description};
- push @where, ($project_id => $::form->{globalproject_id}) if $::form->{globalproject_id} && $manager->can($project_id);
+ push @where, ("${vc}.${vc}number" => { ilike => like($::form->{vc_number}) }) if $::form->{vc_number};
+ push @where, ("${vc}.name" => { ilike => like($::form->{vc_name}) }) if $::form->{vc_name};
+ push @where, ($description => { ilike => like($::form->{transaction_description}) }) if $::form->{transaction_description};
+ push @where, ($project_id => $::form->{globalproject_id}) if $::form->{globalproject_id} && $manager->can($project_id);
my @with_objects = ($vc);
push @with_objects, $project if $manager->can($project_id);
return 1;
}
+sub check_auth {
+ $::auth->assert('record_links');
+}
+
1;