Skip to content
Snippets Groups Projects
Commit 7fe98ed2 authored by Uma's avatar Uma
Browse files

Checkpermission on QuickcreateAjax is addressed

parent 88a9388b
No related branches found
No related tags found
1 merge request!374Checkpermission is handled on SaveAjax operations
......@@ -50,6 +50,7 @@ class Vtiger_Detail_View extends Vtiger_Index_View {
$request->set('custom_module', 'Calendar');
break;
default:
$permissions[] = array('module_parameter' => 'module', 'action' => 'DetailView', 'record_parameter' => 'record');
break;
}
}
......
......@@ -10,12 +10,14 @@
class Vtiger_QuickCreateAjax_View extends Vtiger_IndexAjax_View {
public function requiresPermission(\Vtiger_Request $request) {
$permissions = parent::requiresPermission($request);
$permissions[] = array('module_parameter' => 'module', 'action' => 'CreateView');
return $permissions;
}
public function checkPermission(Vtiger_Request $request) {
$moduleName = $request->getModule();
if (!(Users_Privileges_Model::isPermitted($moduleName, 'CreateView'))) {
throw new AppException(vtranslate('LBL_PERMISSION_DENIED', $moduleName));
}
return parent::checkPermission($request);
}
public function process(Vtiger_Request $request) {
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment