nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2026-02-15 07:35:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

CDR: Prevent users with no assigned extensions from viewing records. Search form mods. Fix issue with CDR Delete removing the wrong call recording.

Browse Source
This commit is contained in:
Nate Jones
2015-03-14 00:03:16 +00:00
parent 90448da105
commit 37bf2da79b
3 changed files with 9 additions and 70 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
app/xml_cdr/xml_cdr_inc.php
View File

@@ -127,9 +127,7 @@ else {
if (strlen($remote_media_ip) > 0) { $sql_where_ands[] = "remote_media_ip like '%".$remote_media_ip."%'"; }
if (strlen($network_addr) > 0) { $sql_where_ands[] = "network_addr like '%".$network_addr."%'"; }
//example sql
// select caller_id_number, destination_number from v_xml_cdr where domain_uuid = ''
// and (caller_id_number = '1001' or destination_number = '1001' or destination_number = '*991001')
//if not admin or superadmin, only show own calls
if (!permission_exists('xml_cdr_domain')) {
if (count($_SESSION['user']['extension']) > 0) { // extensions are assigned to this user
// create simple user extension array
@@ -165,6 +163,9 @@ else {
$sql_where_ands[] = "( ".implode(" or ", $sql_where_ors)." )";
}
}
else {
$sql_where_ands[] = "1 <> 1"; //disable viewing of cdr records by users with no assigned extensions
}
}
// concatenate the 'ands's array, add to where clause