Skip to content
Snippets Groups Projects
Commit 7e73fcd7 authored by Uma's avatar Uma
Browse files

Refinement on action controller checkpermission api

parent 09b7c4fc
No related branches found
No related tags found
No related merge requests found
......@@ -115,7 +115,17 @@ abstract class Vtiger_Action_Controller extends Vtiger_Controller {
function checkPermission(Vtiger_Request $request) {
$permissions = $this->requiresPermission($request);
foreach($permissions as $permission) {
if(!Users_Privileges_Model::isPermitted($request->get($permission['module_parameter']), $permission['action'], $request->get($permission['record_parameter']))) {
if(array_key_exists('module_parameter', $permission)){
$moduleParameter = $request->get($permission['module_parameter']);
}else{
$moduleParameter = 'module';
}
if(array_key_exists('record_parameter', $permission)){
$recordParameter = $request->get($permission['record_parameter']);
}else{
$recordParameter = '';
}
if(!Users_Privileges_Model::isPermitted($moduleParameter, $permission['action'], $recordParameter)) {
throw new AppException(vtranslate('LBL_PERMISSION_DENIED'));
}
}
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment