also fixing entity during post

Jon Bendtsen · JonBendtsen · commit 0909f6c46bdf · 2025-10-29T23:16:47.000+01:00
diff --git a/htdocs/contrat/class/api_contracts.class.php b/htdocs/contrat/class/api_contracts.class.php
@@ -245,7 +245,7 @@ public function post($request_data = null)
 			if ($field == 'id') {
 				throw new RestException(400, 'Creating with id field is forbidden');
 			}
-			if ($field == 'entity' && $value != $this->entity) {
+			if ($field == 'entity' && $value != $this->contract->entity) {
 				throw new RestException(403, 'Creating entity not the same as your API user is forbidden');
 			}
 

Original file line number	Diff line number	Diff line change
`@@ -245,7 +245,7 @@ public function post($request_data = null)`
`245`	`245`	`if ($field == 'id') {`
`246`	`246`	`throw new RestException(400, 'Creating with id field is forbidden');`
`247`	`247`	`}`
`248`		`- if ($field == 'entity' && $value != $this->entity) {`
	`248`	`+ if ($field == 'entity' && $value != $this->contract->entity) {`
`249`	`249`	`throw new RestException(403, 'Creating entity not the same as your API user is forbidden');`
`250`	`250`	`}`
`251`	`251`