Skip to content
Snippets Groups Projects
Commit 7fe98ed2 authored by Uma's avatar Uma
Browse files

Checkpermission on QuickcreateAjax is addressed

parent 88a9388b
No related branches found
No related tags found
No related merge requests found
......@@ -50,6 +50,7 @@ class Vtiger_Detail_View extends Vtiger_Index_View {
$request->set('custom_module', 'Calendar');
break;
default:
$permissions[] = array('module_parameter' => 'module', 'action' => 'DetailView', 'record_parameter' => 'record');
break;
}
}
......
......@@ -10,12 +10,14 @@
class Vtiger_QuickCreateAjax_View extends Vtiger_IndexAjax_View {
public function requiresPermission(\Vtiger_Request $request) {
$permissions = parent::requiresPermission($request);
$permissions[] = array('module_parameter' => 'module', 'action' => 'CreateView');
return $permissions;
}
public function checkPermission(Vtiger_Request $request) {
$moduleName = $request->getModule();
if (!(Users_Privileges_Model::isPermitted($moduleName, 'CreateView'))) {
throw new AppException(vtranslate('LBL_PERMISSION_DENIED', $moduleName));
}
return parent::checkPermission($request);
}
public function process(Vtiger_Request $request) {
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment