From 1b9216903a2512dd7cbbb678f9e3f3d82f667d74 Mon Sep 17 00:00:00 2001
From: Holger Cremer <HolgerCremer@gmail.com>
Date: Sat, 4 Jan 2020 22:00:40 +0100
Subject: needs only cashbox permissino to access cashbox details

---
 src/web/web.vala | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/web/web.vala b/src/web/web.vala
index a4c24ca..0ed852d 100644
--- a/src/web/web.vala
+++ b/src/web/web.vala
@@ -1567,7 +1567,7 @@ public class WebServer {
 		try {
 			var session = new WebSession(server, msg, path, query, client);
 
-			if(!session.superuser) {
+			if(!session.superuser && !session.auth_cashbox) {
 				handler_403(server, msg, path, query, client);
 				return;
 			}
-- 
cgit v1.2.3