Rechteprüfung im Part-Controller nicht für Part-Picker-Aktionen durchführen.

Behebt #2451.

diff --git a/SL/Controller/Part.pm b/SL/Controller/Part.pm
index 6b76252..4349b1f 100644 (file)
--- a/SL/Controller/Part.pm
+++ b/SL/Controller/Part.pm
@@ -14,7 +14,8 @@ use Rose::Object::MakeMethods::Generic (
 );
 
 # safety
-__PACKAGE__->run_before(sub { $::auth->assert('part_service_assembly_edit') });
+__PACKAGE__->run_before(sub { $::auth->assert('part_service_assembly_edit') },
+                        except => [ qw(ajax_autocomplete part_picker_search part_picker_result) ]);
 
 sub action_ajax_autocomplete {
   my ($self, %params) = @_;