049 author display for instances, operations, cfs params

This commit is contained in:
msyu
2025-02-06 14:15:51 +03:00
parent 2a9119925e
commit b2e7334f55
5 changed files with 47 additions and 27 deletions
+4
View File
@@ -33,6 +33,9 @@
<m:field>i.price</m:field><!--- *** не цена, а скидка (Считая ссылку на базовый тариф атрибутом сервиса) --->
<m:field>v.svc</m:field>
<m:field>v.code</m:field>
<m:field>e.updater_id</m:field>
<m:field>u.login as updater_login</m:field>
<m:field>u.shortname as updater_shortname</m:field>
</m:field_set>
from instance e
left outer join specification_item i on (e.specification_item_id=i.specification_item_id)
@@ -40,6 +43,7 @@
left outer join contract d on (s.contract_id=d.contract_id)
left outer join contragent k on (d.contragent_id=k.contragent_id)
left outer join svc v on (e.service_id=v.svc_id)
left outer join usr u on (e.updater_id=u.usr_id)
where e.instance_uid=<cfqueryparam cfsqltype="cf_sql_other" value="#arguments.instanceUid#" null=#!isValid('guid',arguments.instanceUid)#/>
AND s.specification_id=<cfqueryparam cfsqltype="cf_sql_integer" value=#arguments.specificationId#/><!--- access protection --->
</cfquery> <!--- *** правильнее при попытке доступа к чужому инстансу (НСД) выбрасывать 403, а тут будет 404 --->