Merge pull request #21410 from artemChernitsov/fix-recruitment-module-patch-1

Add check file permission in recruitment module
This commit is contained in:
Laurent Destailleur 2022-07-01 17:10:38 +02:00 committed by GitHub
commit 28b60e6c00
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -2977,6 +2977,10 @@ function dol_check_secure_access_document($modulepart, $original_file, $entity,
// Wrapping for import module
$accessallowed = $user->rights->import->run;
$original_file = $conf->import->dir_temp.'/'.$original_file;
} elseif ($modulepart == 'recruitment' && !empty($conf->recruitment->dir_temp)) {
// Wrapping for recruitment module
$accessallowed = $user->rights->$modulepart->recruitmentjobposition->read;
$original_file = $conf->recruitment->dir_output .'/'. $original_file;
} elseif ($modulepart == 'editor' && !empty($conf->fckeditor->dir_output)) {
// Wrapping for wysiwyg editor
$accessallowed = 1;