fix permission check for the per option menus
authorTony Cook <tony@develop-help.com>
Sat, 11 Apr 2020 04:04:58 +0000 (14:04 +1000)
committerTony Cook <tony@develop-help.com>
Sat, 11 Apr 2020 04:04:58 +0000 (14:04 +1000)
site/templates/admin/edit_prodopts.tmpl

index 0af6ae8..f150284 100644 (file)
@@ -34,7 +34,7 @@
 <div id="prodopt<:= dboption.id:>" class="prodopt">
 <div id="prodoptmenu<:= dboption.id:>" class="prodoptmenu">Option:<span id="prodoptname<:= dboption.id:>"><:= dboption.name:></span>
 <div class="prodoptmenuoptions">
-<:.if request.user_can("bse_edit_prodopt_edit", "article") :>
+<:.if request.user_can("bse_edit_prodopt_edit", article) :>
 <a id="editoption<:= dboption.id:>" href="<:script:>?id=<:= article.id:>&amp;a_edit_option=1&amp;option_id=<:= dboption.id:>">Edit</a>
 <a href="<:script:>?id=<:= article.id:>&amp;a_delconf_option=1&amp;option_id=<:= dboption.id:>">Delete</a>
 <a id="sortvals<:= dboption.id:>" href="<:script:>?id=<:article id:>&amp;a_option_value_reorder=1&amp;option_id=<:= dboption.id:>&amp;_csrfp=<:csrfp admin_move_option_value:>&amp;_t=prodopts&amp;value_ids=<:= dboptions.sort(@{a,b: a.lc cmp b.lc }).map(@{o: o.id }).join(",") :>">Sort</a>