Allow only admin to change other user preferences. (59d831f0) · Commits · vtiger / vtigercrm

modules/Users/actions/Save.php

+1 −1

Original line number	Diff line number	Diff line
		@@ -21,7 +21,7 @@ class Users_Save_Action extends Vtiger_Save_Action {

		if ($allowed) {
		// Deny access if not administrator or account-owner or self
		if(!$currentUserModel->isAdminUser() && !$recordModel->isAccountOwner()) {
		if(!$currentUserModel->isAdminUser()) {
		if (empty($record)) {
		$allowed = false;
		} else if ($currentUserModel->get('id') != $recordModel->getId()) {