From: Bernd Bleßmann <bernd@kivitendo-premium.de>
Date: Wed, 19 Feb 2014 12:20:32 +0000 (+0100)
Subject: Rechteprüfung im Part-Controller nicht für Part-Picker-Aktionen durchführen.
X-Git-Tag: release-3.1.0rc1~11
X-Git-Url: http://wagnertech.de/git?a=commitdiff_plain;h=63575bd21459f4253f3841cf1095bdbd0b438b5d;p=kivitendo-erp.git

Rechteprüfung im Part-Controller nicht für Part-Picker-Aktionen durchführen.

Behebt #2451.
---

diff --git a/SL/Controller/Part.pm b/SL/Controller/Part.pm
index 6b76252cc..4349b1fda 100644
--- a/SL/Controller/Part.pm
+++ b/SL/Controller/Part.pm
@@ -14,7 +14,8 @@ use Rose::Object::MakeMethods::Generic (
 );
 
 # safety
-__PACKAGE__->run_before(sub { $::auth->assert('part_service_assembly_edit') });
+__PACKAGE__->run_before(sub { $::auth->assert('part_service_assembly_edit') },
+                        except => [ qw(ajax_autocomplete part_picker_search part_picker_result) ]);
 
 sub action_ajax_autocomplete {
   my ($self, %params) = @_;