viscous/espocrm
1
0
Fork 0
mirror of https://github.com/espocrm/espocrm.git synced 2026-06-28 06:56:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

email address search check email create access

Browse Source
This commit is contained in:
yuri
2016-02-05 16:06:07 +02:00
parent d0f715863c
commit e727196424
2 changed files with 10 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
application/Espo/Controllers/EmailAddress.php
View File

@@ -38,6 +38,9 @@ class EmailAddress extends \Espo\Core\Controllers\Record
if (!$this->getAcl()->checkScope('Email')) {
throw new Forbidden();
}
if (!$this->getAcl()->checkScope('Email', 'create')) {
throw new Forbidden();
}
$q = $request->get('q');
$limit = intval($request->get('limit'));
if (empty($limit) || $limit > 30) {