diff --git a/modules/Vtiger/actions/ExportData.php b/modules/Vtiger/actions/ExportData.php index 648a9e20d8e61b575cdb40f93939cc08af2ed1af..8bbb63b36ea53b8300b22bf9d8bbbbb199aa01d1 100644 --- a/modules/Vtiger/actions/ExportData.php +++ b/modules/Vtiger/actions/ExportData.php @@ -12,10 +12,13 @@ class Vtiger_ExportData_Action extends Vtiger_Mass_Action { function checkPermission(Vtiger_Request $request) { $moduleName = $request->getModule(); + $sourceModule = $request->get('source_module'); $moduleModel = Vtiger_Module_Model::getInstance($moduleName); + $sourceModuleModel = Vtiger_Module_Model::getInstance($sourceModule); $currentUserPriviligesModel = Users_Privileges_Model::getCurrentUserPrivilegesModel(); - if(!$currentUserPriviligesModel->hasModuleActionPermission($moduleModel->getId(), 'Export')) { + if(!$currentUserPriviligesModel->hasModuleActionPermission($moduleModel->getId(), 'Export') || + !$currentUserPriviligesModel->hasModuleActionPermission($sourceModuleModel->getId(), 'Export')) { throw new AppException(vtranslate('LBL_PERMISSION_DENIED')); } }