From 3ca46887d9dbbb002af092a1e59dcaf6a77a00a2 Mon Sep 17 00:00:00 2001 From: Nate Date: Thu, 23 Jan 2020 07:05:01 -0700 Subject: [PATCH] CDR: Only allow user to select assigned extensions when xml_cdr_search_extensions permission is assigned but xml_cdr_domain permission not assigned. --- app/xml_cdr/xml_cdr.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/app/xml_cdr/xml_cdr.php b/app/xml_cdr/xml_cdr.php index d8b056251f..b45f51cc16 100644 --- a/app/xml_cdr/xml_cdr.php +++ b/app/xml_cdr/xml_cdr.php @@ -239,6 +239,9 @@ if (permission_exists('xml_cdr_search_extension')) { $sql = "select extension_uuid, extension, number_alias from v_extensions "; $sql .= "where domain_uuid = :domain_uuid "; + if (!permission_exists('xml_cdr_domain') && is_array($extension_uuids) && @sizeof($extension_uuids != 0)) { + $sql .= "and extension_uuid in ('".implode("','",$extension_uuids)."') "; //only show the user their extensions + } $sql .= "order by extension asc, number_alias asc "; $parameters['domain_uuid'] = $_SESSION['domain_uuid']; $database = new database;