Skip to content
Snippets Groups Projects

Checkpermission is handled on SaveAjax operations

Merged Uma requested to merge uma.s/vtigercrm:38276053_checkPermission_Overall into master
+ 14
56
Compare changes
  • Side-by-side
  • Inline
Files
@@ -13,19 +13,8 @@ class Calendar_SaveAjax_Action extends Vtiger_SaveAjax_Action {
public function checkPermission(Vtiger_Request $request) {
$moduleName = $request->getModule();
$record = $request->get('record');
// Child class permission check support - DragDropAjax
$recordId = $request->get('id');
$actionName = ($record || $recordId) ? 'EditView' : 'CreateView';
if(!Users_Privileges_Model::isPermitted($moduleName, $actionName, $record)) {
throw new AppException(vtranslate('LBL_PERMISSION_DENIED'));
}
if(!Users_Privileges_Model::isPermitted($moduleName, 'Save', $record)) {
throw new AppException(vtranslate('LBL_PERMISSION_DENIED'));
}
parent::checkPermission($request);
if ($record) {
$activityModulesList = array('Calendar', 'Events');
$recordEntityName = getSalesEntityType($record);
Loading