From 01b3e8288ea863e5c3f6cf9b96b463d9f4a4e853 Mon Sep 17 00:00:00 2001
From: michaelschal <35957947-michaelschal@users.noreply.replit.com>
Date: Mon, 8 Sep 2025 20:58:20 +0000
Subject: [PATCH] Restrict file uploads and status changes for managers
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Prevent managers from uploading files for 'Reçu' status and sending files via webhook.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 9fcf4b21-eb0c-4e53-a567-e2ce4a6ad869
Replit-Commit-Checkpoint-Type: intermediate_checkpoint
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/1957c339-2757-4d1f-8e92-e9f71a1ce58e/9fcf4b21-eb0c-4e53-a567-e2ce4a6ad869/7eY9Hl8
---
 client/src/pages/Avoirs.tsx | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/client/src/pages/Avoirs.tsx b/client/src/pages/Avoirs.tsx
index 6bf4ee4..18eac56 100644
--- a/client/src/pages/Avoirs.tsx
+++ b/client/src/pages/Avoirs.tsx
@@ -1024,8 +1024,8 @@ export default function Avoirs() {
                 </td>
                 <td className="px-6 py-4 whitespace-nowrap text-right text-sm font-medium">
                   <div className="flex items-center space-x-2">
-                    {/* Upload pour avoirs "Reçu" */}
-                    {avoir?.status === 'Reçu' && (
+                    {/* Upload pour avoirs "Reçu" - interdit aux managers */}
+                    {avoir?.status === 'Reçu' && (user as any)?.role !== 'manager' && (
                       <Button
                         variant="outline"
                         size="sm"