diff --git a/modules/Vtiger/views/Detail.php b/modules/Vtiger/views/Detail.php index a512ea1a3ca537f59a7c5d82367354e76559816e..6a75d8b7c8ff014a9678cd977ddf48269ca8ddbf 100644 --- a/modules/Vtiger/views/Detail.php +++ b/modules/Vtiger/views/Detail.php @@ -50,6 +50,7 @@ class Vtiger_Detail_View extends Vtiger_Index_View { $request->set('custom_module', 'Calendar'); break; default: + $permissions[] = array('module_parameter' => 'module', 'action' => 'DetailView', 'record_parameter' => 'record'); break; } } diff --git a/modules/Vtiger/views/QuickCreateAjax.php b/modules/Vtiger/views/QuickCreateAjax.php index 6b3dda04892af785fb6f450a65e966f79f34c366..742d952c5344fb6614289bbfa281d90286d67cd2 100644 --- a/modules/Vtiger/views/QuickCreateAjax.php +++ b/modules/Vtiger/views/QuickCreateAjax.php @@ -10,12 +10,14 @@ class Vtiger_QuickCreateAjax_View extends Vtiger_IndexAjax_View { + public function requiresPermission(\Vtiger_Request $request) { + $permissions = parent::requiresPermission($request); + + $permissions[] = array('module_parameter' => 'module', 'action' => 'CreateView'); + return $permissions; + } public function checkPermission(Vtiger_Request $request) { - $moduleName = $request->getModule(); - - if (!(Users_Privileges_Model::isPermitted($moduleName, 'CreateView'))) { - throw new AppException(vtranslate('LBL_PERMISSION_DENIED', $moduleName)); - } + return parent::checkPermission($request); } public function process(Vtiger_Request $request) {