fix: bugs (openemr#6552)

* more fixes * remove test.php * jerry's got this
DiscoverAndChange · Jun 16, 2023 · ec990f7 · ec990f7
1 parent 40636e7
commit ec990f7
Show file tree

Hide file tree

Showing 4 changed files with 32 additions and 0 deletions.
diff --git a/interface/billing/print_billing_report.php b/interface/billing/print_billing_report.php
@@ -18,8 +18,16 @@
 require_once("$srcdir/report.inc.php");
 
 use OpenEMR\Billing\BillingReport;
+use OpenEMR\Common\Acl\AclMain;
+use OpenEMR\Common\Twig\TwigContainer;
 use OpenEMR\Core\Header;
 
+//ensure user has proper access
+if (!AclMain::aclCheckCore('acct', 'eob', '', 'write') && !AclMain::aclCheckCore('acct', 'bill', '', 'write')) {
+ echo (new TwigContainer(null, $GLOBALS['kernel']))->getTwig()->render('core/unauthorized.html.twig', ['pageTitle' => xl("Billing Manager")]);
+ exit;
+}
+
 //how many columns to use when displaying information
 $COLS = 6;
 

diff --git a/interface/billing/print_daysheet_report_num1.php b/interface/billing/print_daysheet_report_num1.php
@@ -19,8 +19,16 @@
 require_once("$srcdir/daysheet.inc.php");
 
 use OpenEMR\Billing\BillingReport;
+use OpenEMR\Common\Acl\AclMain;
+use OpenEMR\Common\Twig\TwigContainer;
 use OpenEMR\Core\Header;
 
+//ensure user has proper access
+if (!AclMain::aclCheckCore('acct', 'eob', '', 'write') && !AclMain::aclCheckCore('acct', 'bill', '', 'write')) {
+ echo (new TwigContainer(null, $GLOBALS['kernel']))->getTwig()->render('core/unauthorized.html.twig', ['pageTitle' => xl("Billing Manager")]);
+ exit;
+}
+
 //global variables:
 if (!isset($_GET["mode"])) {
  if (!isset($_GET["from_date"])) {

diff --git a/interface/billing/print_daysheet_report_num2.php b/interface/billing/print_daysheet_report_num2.php
@@ -21,8 +21,16 @@
 require_once("$srcdir/daysheet.inc.php");
 
 use OpenEMR\Billing\BillingReport;
+use OpenEMR\Common\Acl\AclMain;
+use OpenEMR\Common\Twig\TwigContainer;
 use OpenEMR\Core\Header;
 
+//ensure user has proper access
+if (!AclMain::aclCheckCore('acct', 'eob', '', 'write') && !AclMain::aclCheckCore('acct', 'bill', '', 'write')) {
+ echo (new TwigContainer(null, $GLOBALS['kernel']))->getTwig()->render('core/unauthorized.html.twig', ['pageTitle' => xl("Billing Manager")]);
+ exit;
+}
+
 //global variables:
 if (!isset($_GET["mode"])) {
  if (!isset($_GET["from_date"])) {

diff --git a/interface/billing/print_daysheet_report_num3.php b/interface/billing/print_daysheet_report_num3.php
@@ -22,8 +22,16 @@
 require_once("$srcdir/daysheet.inc.php");
 
 use OpenEMR\Billing\BillingReport;
+use OpenEMR\Common\Acl\AclMain;
+use OpenEMR\Common\Twig\TwigContainer;
 use OpenEMR\Core\Header;
 
+//ensure user has proper access
+if (!AclMain::aclCheckCore('acct', 'eob', '', 'write') && !AclMain::aclCheckCore('acct', 'bill', '', 'write')) {
+ echo (new TwigContainer(null, $GLOBALS['kernel']))->getTwig()->render('core/unauthorized.html.twig', ['pageTitle' => xl("Billing Manager")]);
+ exit;
+}
+
 //global variables:
 if (!isset($_GET["mode"])) {
  if (!isset($_GET["from_date"])) {