From 78916bdd0f37fdff2881a4f80b02a2d1cc042bfe Mon Sep 17 00:00:00 2001
From: Frank Schubert <fronk@fronk.at>
Date: Tue, 20 Feb 2024 22:37:47 +0100
Subject: [PATCH] Limited VatgroupController to Fibu user

---
 Layout/default/Vatgroup/Index.php           | 8 ++++----
 Layout/default/menu.php                     | 2 +-
 application/Vatgroup/VatgroupController.php | 2 +-
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/Layout/default/Vatgroup/Index.php b/Layout/default/Vatgroup/Index.php
index c9f95c7c3..6db6e6ce4 100644
--- a/Layout/default/Vatgroup/Index.php
+++ b/Layout/default/Vatgroup/Index.php
@@ -44,16 +44,16 @@
                       
                       <div class="row">
                         <div class="col-2 font-weight-medium">
-                          Zielland
+                          Zielland *
                         </div>
                         <div class="col-2 font-weight-medium">
-                          Erlöskonto
+                          Erlöskonto *
                         </div>
                         <div class="col-2 font-weight-medium">
                           Legacy Erlöskonto
                         </div>
                         <div class="col-2 font-weight-medium">
-                          Steuersatz %
+                          Steuersatz % *
                         </div>
                         <div class="col-4 font-weight-medium">
                           Rechnungstext
@@ -75,7 +75,7 @@
                           <input type="text" class="form-control" name="rates[<?=$area_key?>][rate]" value="<?=str_replace(".",",", round($vatgroup->rates[$area_key]->rate, 2))?>" placeholder="Steuersatz %" />
                         </div>
                         <div class="col-4">
-                          <textarea class="form-control" name="rates[<?=$area_key?>][invoice_text]" placeholder="Optionaler Rechnungstext" ><?=htmlentities($vatgroup->rates[$area_key]->invoice_text)?></textarea>
+                          <input type="text" class="form-control" name="rates[<?=$area_key?>][invoice_text]" value="<?=htmlentities($vatgroup->rates[$area_key]->invoice_text)?>" placeholder="Optionaler Rechnungstext" />
                         </div>
                       </div>
                       <?php endforeach; ?>
diff --git a/Layout/default/menu.php b/Layout/default/menu.php
index d7e393f7f..2bba195fe 100644
--- a/Layout/default/menu.php
+++ b/Layout/default/menu.php
@@ -74,7 +74,7 @@
               <?php if($me->is(["Admin"])): ?>
               <li class="mobile-hide"><a href="<?=self::getUrl("OpenAccessId")?>"><i class="fad fa-fw fa-link-simple text-info"></i> Open Access IDs</a></li>
               <li class="mobile-hide"><a href="<?=self::getUrl("Producttech")?>"><i class="fad fa-fw fa-microchip text-info"></i> Technologien</a></li>
-              <li class="mobile-hide"><a href="<?=self::getUrl("Vatgroup")?>"><i class="fas fa-fw fa-circle-dollar-to-slot text-info"></i> Steuersätze</a></li>
+              <?php if($me->can("Fibu")): ?><li class="mobile-hide"><a href="<?=self::getUrl("Vatgroup")?>"><i class="fas fa-fw fa-circle-dollar-to-slot text-info"></i> Steuersätze</a></li><?php endif; ?>
               <!--<li><a href="<?=self::getUrl("Contractconfig")?>"><i class="fad fa-gear text-info"></i> ContractConfig</a></li>-->
               <?php endif; ?>
 
diff --git a/application/Vatgroup/VatgroupController.php b/application/Vatgroup/VatgroupController.php
index 94f4250c4..5f1052c5c 100644
--- a/application/Vatgroup/VatgroupController.php
+++ b/application/Vatgroup/VatgroupController.php
@@ -9,7 +9,7 @@ class VatgroupController extends mfBaseController {
     $this->me = $me;
     $this->layout()->set("me",$me);
     
-    if(!$me->is(["Admin"])) {
+    if(!$me->is(["Admin"]) || !$me->can("Fibu")) {
       $this->redirect("Dashboard");
     }
   }