Show only assigned contacts if missing the contact_domain_view permission

This commit is contained in:
markjcrane
2021-06-30 13:13:37 -06:00
parent d42ddd2219
commit 056ce8368e

View File

@@ -86,7 +86,7 @@
$sql .= "and contact_setting_name = 'array' ";
$sql .= "and contact_setting_value <> '' ";
$sql .= "and contact_setting_value is not null ";
if (permission_exists('contact_domain_view')) {
if (!permission_exists('contact_domain_view')) {
$sql .= "and ( "; //only contacts assigned to current user's group(s) and those not assigned to any group
$sql .= " contact_uuid in ( ";
$sql .= " select contact_uuid from v_contact_groups ";
@@ -187,7 +187,7 @@
$sql = "select count(*) ";
$sql .= "from v_contacts as c ";
$sql .= "where domain_uuid = :domain_uuid ";
if (permission_exists('contact_domain_view')) {
if (!permission_exists('contact_domain_view')) {
$sql .= "and ( "; //only contacts assigned to current user's group(s) and those not assigned to any group
$sql .= " contact_uuid in ( ";
$sql .= " select contact_uuid from v_contact_groups ";