related module permission will be checked before process trigger

modules/Vtiger/views/Detail.php

@@ -514,9 +514,15 @@ class Vtiger_Detail_View extends Vtiger_Index_View {
 				$targetControllerClass = Vtiger_Loader::getComponentClassName('View', 'RelatedList', $moduleName);
 			}
 		}
+		global $log;
+		$log->fatal('Related list target class => ');
+		$log->fatal($targetControllerClass);
 		if($targetControllerClass) {
 			$targetController = new $targetControllerClass();
-			return $targetController->process($request);
+			if($targetController->checkPermission($request)){
+				$log->fatal('Entered check permission loop');
+				return $targetController->process($request);
+			}
 		}
 	}
 

modules/Vtiger/views/RelatedList.php

@@ -9,6 +9,17 @@
  *************************************************************************************/
 
 class Vtiger_RelatedList_View extends Vtiger_Index_View {
+	
+	function checkPermission(Vtiger_Request $request) {
+		$relatedModuleName = $request->get('relatedModule');
+
+		$relatedModulePermission = Users_Privileges_Model::isPermitted($relatedModuleName, 'DetailView');
+		if(!$relatedModulePermission) {
+			throw new AppException(vtranslate('LBL_PERMISSION_DENIED'));
+		}
+		return true;
+	}
+	
 	function process(Vtiger_Request $request) {
 		$moduleName = $request->getModule();
 		$relatedModuleName = $request->get('relatedModule');