viscous/espocrm
1
0
Fork 0
mirror of https://github.com/espocrm/espocrm.git synced 2026-06-28 06:56:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Formula relate write access check

Browse Source
This commit is contained in:
Yurii
2026-05-22 12:26:29 +03:00
parent 67763ac574
commit 80dc443f91
3 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
application/Espo/Core/Formula/Functions/RecordGroup/RelateType.php
View File

@@ -123,6 +123,10 @@ class RelateType extends BaseFunction implements
{
$restriction = $this->injectableFactory->create(SystemRestriction::class);
if (!$restriction->checkEntityTypeWrite($entityType)) {
throw new NotAllowedUsage("Cannot write '$entityType'.");
}
if (!$restriction->checkLinkWrite($entityType, $link) ) {
throw new NotAllowedUsage("Cannot write restricted link $entityType.$link.");
}

4
application/Espo/Core/Formula/Functions/RecordGroup/UnrelateType.php
View File

@@ -99,6 +99,10 @@ class UnrelateType extends BaseFunction implements
{
$restriction = $this->injectableFactory->create(SystemRestriction::class);
if (!$restriction->checkEntityTypeWrite($entityType)) {
throw new NotAllowedUsage("Cannot write '$entityType'.");
}
if (!$restriction->checkLinkWrite($entityType, $link) ) {
throw new NotAllowedUsage("Cannot write restricted link $entityType.$link.");
}

4
application/Espo/Core/Formula/Functions/RecordGroup/UpdateRelationColumnType.php
View File

@@ -111,6 +111,10 @@ class UpdateRelationColumnType extends BaseFunction implements
{
$restriction = $this->injectableFactory->create(SystemRestriction::class);
if (!$restriction->checkEntityTypeWrite($entityType)) {
throw new NotAllowedUsage("Cannot write '$entityType'.");
}
if (!$restriction->checkLinkWrite($entityType, $link) ) {
throw new NotAllowedUsage("Cannot write restricted link $entityType.$link.");
}