From bc9f25988ddfff030e0a651ea1c9a6682bde4e10 Mon Sep 17 00:00:00 2001 From: greeshma <greeshma.kk@vtiger.com> Date: Sat, 12 Jun 2021 20:11:09 +0530 Subject: [PATCH] custom filter deletion supported for non admin --- modules/CustomView/actions/Delete.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/CustomView/actions/Delete.php b/modules/CustomView/actions/Delete.php index 963cf6baf..f6dc2c99e 100644 --- a/modules/CustomView/actions/Delete.php +++ b/modules/CustomView/actions/Delete.php @@ -25,7 +25,7 @@ class CustomView_Delete_Action extends Vtiger_Action_Controller { $moduleModel = $customViewModel->getModule(); $customViewOwner = $customViewModel->getOwnerId(); $currentUser = Users_Record_Model::getCurrentUserModel(); - if ((!$currentUser->isAdminUser()) || ($customViewOwner != $currentUser->getId())) { + if ((!$currentUser->isAdminUser()) && ($customViewOwner != $currentUser->getId())) { throw new AppException(vtranslate('LBL_PERMISSION_DENIED')); } $customViewModel->delete(); -- GitLab