From ab0103527f959128c88217c9b1c96dd873e597eb Mon Sep 17 00:00:00 2001
From: =?utf8?q?Bernd=20Ble=C3=9Fmann?= <bernd@kivitendo-premium.de>
Date: Tue, 8 Mar 2022 17:12:42 +0100
Subject: [PATCH 1/1] =?utf8?q?Anbebots-/Auftragsbericht:=20Recht=20"Ansehe?=
 =?utf8?q?n=20von=20Belegen"=20ber=C3=BCcksichtigen?=
MIME-Version: 1.0
Content-Type: text/plain; charset=utf8
Content-Transfer-Encoding: 8bit

---
 SL/OE.pm | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/SL/OE.pm b/SL/OE.pm
index 332d6345a..b273d814a 100644
--- a/SL/OE.pm
+++ b/SL/OE.pm
@@ -192,7 +192,8 @@ SQL
     push(@values, (like($form->{"cp_name"}))x2);
   }
 
-  if ( !(($vc eq 'customer' && $main::auth->assert('sales_all_edit', 1)) || ($vc eq 'vendor' && $main::auth->assert('purchase_all_edit', 1))) ) {
+  if ( !(    ($vc eq 'customer' && ($main::auth->assert('sales_all_edit',    1) || $main::auth->assert('sales_order_view',    1)))
+          || ($vc eq 'vendor'   && ($main::auth->assert('purchase_all_edit', 1) || $main::auth->assert('purchase_order_view', 1))) ) ) {
     $query .= " AND o.employee_id = (select id from employee where login= ?)";
     push @values, $::myconfig{login};
   }
-- 
2.20.1