diff --git a/libreplan-webapp/src/main/java/org/libreplan/web/orders/OrderCRUDController.java b/libreplan-webapp/src/main/java/org/libreplan/web/orders/OrderCRUDController.java index 17d2c08bb..125ba6e5d 100644 --- a/libreplan-webapp/src/main/java/org/libreplan/web/orders/OrderCRUDController.java +++ b/libreplan-webapp/src/main/java/org/libreplan/web/orders/OrderCRUDController.java @@ -1066,6 +1066,12 @@ public class OrderCRUDController extends GenericForwardComposer { } public void initEdit(Order order) { + checkUserCanRead(order); + orderModel.initEdit(order, getDesktop()); + prepareEditWindow(_("Edit project")); + } + + public void checkUserCanRead(Order order) { if (!orderModel.userCanRead(order, SecurityUtils.getSessionUserLoginName())) { try { Messagebox.show(_("Sorry, you do not have permissions to access this project"), @@ -1074,9 +1080,6 @@ public class OrderCRUDController extends GenericForwardComposer { throw new RuntimeException(e); } } - - orderModel.initEdit(order, getDesktop()); - prepareEditWindow(_("Edit project")); } public IOrderModel getOrderModel() { diff --git a/libreplan-webapp/src/main/java/org/libreplan/web/planner/tabs/PlanningTabCreator.java b/libreplan-webapp/src/main/java/org/libreplan/web/planner/tabs/PlanningTabCreator.java index 09aa3903e..793a0c1fa 100644 --- a/libreplan-webapp/src/main/java/org/libreplan/web/planner/tabs/PlanningTabCreator.java +++ b/libreplan-webapp/src/main/java/org/libreplan/web/planner/tabs/PlanningTabCreator.java @@ -273,6 +273,8 @@ public class PlanningTabCreator { breadcrumbs.appendChild(new Label(_("Project Scheduling"))); if (mode.isOf(ModeType.ORDER)) { + orderPlanningController.getOrderCRUDController() + .checkUserCanRead(order); Label nameLabel = new Label(order.getName()); nameLabel.setTooltiptext(order.getName() + "." + order.getDescription());