From e2e4d0931ba39437960b13f53ab4bdc14ad76fd8 Mon Sep 17 00:00:00 2001
From: tianshujie98 <tianshujie@easycorp.ltd>
Date: Wed, 28 Jul 2021 11:36:14 +0800
Subject: [PATCH] * Add authority.

---
 module/doc/view/tablecontents.html.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/module/doc/view/tablecontents.html.php b/module/doc/view/tablecontents.html.php
index 851814980e..942c7deb6f 100644
--- a/module/doc/view/tablecontents.html.php
+++ b/module/doc/view/tablecontents.html.php
@@ -76,11 +76,11 @@ if(empty($type)) $type = 'product';
       <div class="no-content-button">
         <?php
         $html = '';
-        if($type == 'book')
+        if($type == 'book' and common::hasPriv('doc', 'createLib'))
         {
             $html = html::a(helper::createLink('doc', 'createLib', "type=$type&objectID=$objectID"), '<i class="icon icon-plus"></i>' . $this->lang->doc->createBook, '', 'class="btn btn-info btn-wide iframe"');
         }
-        elseif($libID)
+        elseif($libID and common::hasPriv('doc', 'create'))
         {
             $html  = "<div class='dropdown' id='createDropdown'>";
             $html .= "<button class='btn btn-info btn-wide' type='button' data-toggle='dropdown'><i class='icon icon-plus'></i>" . $this->lang->doc->createAB . " <span class='caret'></span></button>";