Allow view on the edit page

This commit is contained in:
FusionPBX
2025-08-28 14:08:11 -06:00
committed by GitHub
parent 358967fce6
commit f3628a532b
2 changed files with 12 additions and 8 deletions

View File

@@ -26,10 +26,7 @@
require_once "resources/check_auth.php";
//check permissions
if (permission_exists('access_control_add') || permission_exists('access_control_edit')) {
//access granted
}
else {
if (!permission_exists('access_control_view')) {
echo "access denied";
exit;
}
@@ -63,6 +60,12 @@
//process the user data and save it to the database
if (count($_POST) > 0 && empty($_POST["persistformvar"])) {
//check permissions
if (!permission_exists('access_control_add') || !permission_exists('access_control_edit')) {
echo "access denied";
exit;
}
//enforce valid data
if ($access_control_name == 'providers' || $access_control_name == 'domains') {
$access_control_default = 'deny';
@@ -334,7 +337,9 @@
echo button::create(['type'=>'button','label'=>$text['button-delete'],'icon'=>$settings->get('theme', 'button_icon_delete'),'id'=>'btn_delete','name'=>'btn_delete','style'=>'display: none; margin-right: 15px;','onclick'=>"modal_open('modal-delete','btn_delete');"]);
}
}
echo button::create(['type'=>'submit','label'=>$text['button-save'],'icon'=>$settings->get('theme', 'button_icon_save'),'id'=>'btn_save','collapse'=>'hide-xs']);
if (permission_exists('access_control_add') || permission_exists('access_control_edit')) {
echo button::create(['type'=>'submit','label'=>$text['button-save'],'icon'=>$settings->get('theme', 'button_icon_save'),'id'=>'btn_save','collapse'=>'hide-xs']);
}
echo " </div>\n";
echo " <div style='clear: both;'></div>\n";
echo "</div>\n";
@@ -485,4 +490,4 @@
//include the footer
require_once "resources/footer.php";
?>
?>

View File

@@ -212,7 +212,7 @@
$x = 0;
foreach ($access_controls as $row) {
$list_row_url = '';
if (permission_exists('access_control_edit')) {
if (permission_exists('access_control_view')) {
$list_row_url = "access_control_edit.php?id=".urlencode($row['access_control_uuid']);
if ($row['domain_uuid'] != $_SESSION['domain_uuid'] && permission_exists('domain_select')) {
$list_row_url .= '&domain_uuid='.urlencode($row['domain_uuid']).'&domain_change=true';
@@ -258,4 +258,3 @@
require_once "resources/footer.php";
?>