Check permission handled on TransferOwnership action of Accounts module

includes/runtime/Controller.php

@@ -102,6 +102,24 @@ abstract class Vtiger_Action_Controller extends Vtiger_Controller {
 	function postProcess(Vtiger_Request $request) {
 		return true;
 	}
+	
+	/**
+	 * This will return all the permission checks that should be done
+	 * @param Vtiger_Request $request
+	 * @return <Array>
+	 */
+	function requiresPermission(Vtiger_Request $request) {
+		return array();
+	}
+	
+	function checkPermission(Vtiger_Request $request) {
+		$permissions = $this->requiresPermission($request);
+		foreach($permissions as $permission) {
+			if(!Users_Privileges_Model::isPermitted($request->get($permission['module_parameter']), $permission['action'], $request->get($permission['record_parameter']))) {
+				throw new AppException(vtranslate('LBL_PERMISSION_DENIED'));
+			}
+		}
+	}
 }
 
 /**