lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add hook for more permissions control

Browse Source
This commit is contained in:
altatof 2018-05-05 14:31:17 +02:00
parent e673b18871
commit a8ecce9e6d
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
htdocs/core/lib/security.lib.php
View File

@ -331,10 +331,17 @@ function restrictedArea($user, $features, $objectid=0, $tableandshare='', $featu
// is linked to a company allowed to $user. // is linked to a company allowed to $user.
if (! empty($objectid) && $objectid > 0) if (! empty($objectid) && $objectid > 0)
{ {
$ok = checkUserAccessToObject($user, $featuresarray, $objectid, $tableandshare, $feature2, $dbt_keyfield, $dbt_select); if (!checkUserAccessToObject($user, $featuresarray, $objectid, $tableandshare, $feature2, $dbt_keyfield, $dbt_select))
return $ok ? 1 : accessforbidden(); accessforbidden();
} }
// get more permissions checks from hooks
global $hookmanager;
$hookmanager->initHooks(array('permissions'));
$parameters=array('features'=>$features,'objectid'=>preg_replace("/'/", '', $objectid),'idtype'=>$dbt_select);
$reshook=$hookmanager->executeHooks('restricted',$parameters);
if ($reshook < 0) accessforbidden();
return 1; return 1;
} }