Merge branch '41062520_relatedModule_Permission' into 'master'

Fixes #1146 ::Uma::related module permission will be checked before process trigger

See merge request !363

modules/Vtiger/views/Detail.php

@@ -516,7 +516,9 @@ class Vtiger_Detail_View extends Vtiger_Index_View {
 		}
 		if($targetControllerClass) {
 			$targetController = new $targetControllerClass();
-			return $targetController->process($request);
+			if($targetController->checkPermission($request)){
+				return $targetController->process($request);
+			}
 		}
 	}
 

modules/Vtiger/views/RelatedList.php

@@ -9,6 +9,17 @@
  *************************************************************************************/
 
 class Vtiger_RelatedList_View extends Vtiger_Index_View {
+	
+	function checkPermission(Vtiger_Request $request) {
+		$relatedModuleName = $request->get('relatedModule');
+
+		$relatedModulePermission = Users_Privileges_Model::isPermitted($relatedModuleName, 'DetailView');
+		if(!$relatedModulePermission) {
+			throw new AppException(vtranslate('LBL_PERMISSION_DENIED'));
+		}
+		return true;
+	}
+	
 	function process(Vtiger_Request $request) {
 		$moduleName = $request->getModule();
 		$relatedModuleName = $request->get('relatedModule');