May browse with prices but may not buy

[dscotese2]

In the file functions_general.php, zen_get_buy_now_button function (I think) are the following lines:

// customer must be logged in and approved to add to cart
$login_for_price = '<a href="' . zen_href_link(FILENAME_LOGIN, '', 'SSL') . '">' . TEXT_LOGIN_TO_SHOP_BUTTON_REPLACE . '</a>';
return $login_for_price;
break;
case (CUSTOMERS_APPROVAL_AUTHORIZATION != '0' and $_SESSION['customers_authorization'] > '0'):
// customer must be logged in to browse
$login_for_price = TEXT_AUTHORIZATION_PENDING_BUTTON_REPLACE;
return $login_for_price;
break;
default:
// proceed normally
break;
}

In which the last case returns "Login for Price". I believe this made sense before the customer-specific "browse with prices but may not buy" option was added. Since that option was added, this last case needs to also make sure that the auth-level of the customer isn't 3, as you can see from the customers.php language file:

define('CUSTOMERS_AUTHORIZATION_0', 'Approved');
define('CUSTOMERS_AUTHORIZATION_1', 'Pending Approval - Must be Authorized to Browse');
define('CUSTOMERS_AUTHORIZATION_2', 'Pending Approval - May Browse No Prices');
define('CUSTOMERS_AUTHORIZATION_3', 'Pending Approval - May browse with prices but may not buy');

It may make more sense to convert this field to a bit field in which browsing and buying (and perhaps other features) are each a bit, but that is way more involved than this simple fix of adding

and $_SESSION['customers_authorization'] != '3'

to that last case.