HEX
Server: Microsoft-IIS/8.5
System: Windows NT YDAWBH120 6.3 build 9600 (Windows Server 2012 R2 Standard Edition) AMD64
User: tentjecom_web (0)
PHP: 7.4.14
Disabled: NONE
Upload Files
File: D:/HostingSpaces/TDijk1/erp-apps.eu/wwwroot/CMSModules/Ecommerce/CMSPages/GetInvoice.aspx.cs
using System;
using System.Web.UI;

using CMS.DataEngine;
using CMS.Ecommerce;
using CMS.Helpers;
using CMS.Membership;
using CMS.SiteProvider;

public partial class CMSModules_Ecommerce_CMSPages_GetInvoice : Page
{
    protected void Page_Load(object sender, EventArgs e)
    {
        var orderId = QueryHelper.GetInteger("orderid", 0);
        var order = OrderInfoProvider.GetOrderInfo(orderId);
        
        if (order != null)
        {
            var currentUser = MembershipContext.AuthenticatedUser;
            var customer = CustomerInfoProvider.GetCustomerInfo(order.OrderCustomerID);
            var siteName = SiteInfoProvider.GetSiteName(order.OrderSiteID);

            // To see invoice user needs to be global admin or have read order permission or access her own order
            if (((customer != null) && (customer.CustomerUserID == currentUser.UserID)) ||
                currentUser.CheckPrivilegeLevel(UserPrivilegeLevelEnum.GlobalAdmin) ||
                order.CheckPermissions(PermissionsEnum.Read, siteName, currentUser))
            {
                ltlInvoice.Text = URLHelper.MakeLinksAbsolute(order.OrderInvoice);
            }
        }
    }
}