From 34894c15e0a124c49703e1760856906991e44417 Mon Sep 17 00:00:00 2001 From: ptibogxiv Date: Sat, 28 Nov 2020 10:28:23 +0100 Subject: [PATCH 1/2] New get permissions for connected user by API --- htdocs/user/class/api_users.class.php | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/htdocs/user/class/api_users.class.php b/htdocs/user/class/api_users.class.php index 9a89ad8e81c..278367888ac 100644 --- a/htdocs/user/class/api_users.class.php +++ b/htdocs/user/class/api_users.class.php @@ -246,12 +246,13 @@ class Users extends DolibarrApi * * @url GET /info * + * @param int $includepermissions Set this to 1 to have the array of permissions loaded (not done by default for performance purpose) * @return array|mixed Data without useless information * * @throws RestException 401 Insufficient rights * @throws RestException 404 User or group not found */ - public function getInfo() + public function getInfo($includepermissions = 0) { $apiUser = DolibarrApiAccess::$user; @@ -263,6 +264,10 @@ class Users extends DolibarrApi if (!DolibarrApi::_checkAccessToResource('user', $this->useraccount->id, 'user')) { throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login); } + + if ($includepermissions) { + $this->useraccount->getRights(); + } $usergroup = new UserGroup($this->db); $userGroupList = $usergroup->listGroupsForUser($apiUser->id, false); From 0b408b8012ea1f0937b33faf7ddc82697be6f0cc Mon Sep 17 00:00:00 2001 From: stickler-ci Date: Sat, 28 Nov 2020 09:32:02 +0000 Subject: [PATCH 2/2] Fixing style errors. --- htdocs/user/class/api_users.class.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/htdocs/user/class/api_users.class.php b/htdocs/user/class/api_users.class.php index 278367888ac..e68ecb8bc1d 100644 --- a/htdocs/user/class/api_users.class.php +++ b/htdocs/user/class/api_users.class.php @@ -264,7 +264,7 @@ class Users extends DolibarrApi if (!DolibarrApi::_checkAccessToResource('user', $this->useraccount->id, 'user')) { throw new RestException(401, 'Access not allowed for login '.DolibarrApiAccess::$user->login); } - + if ($includepermissions) { $this->useraccount->getRights(); }