mirror of
https://github.com/silverstripe/silverstripe-reports
synced 2024-10-22 09:05:53 +00:00
BUGFIX Disallow addition of members to groups with MemberTableField->addtogroup() when the editing member doesn't have permissions on the added member
git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/cms/branches/2.4@110859 467b73ca-7a2a-4603-9d3b-597d59a354a9
This commit is contained in:
parent
51fee3fe45
commit
01373cf4af
@ -176,6 +176,8 @@ class MemberTableField extends ComplexTableField {
|
||||
$className,
|
||||
sprintf('"%s" = \'%s\'', $identifierField, $data[$identifierField])
|
||||
);
|
||||
|
||||
if($record && !$record->canEdit()) return $this->httpError('401');
|
||||
}
|
||||
|
||||
// Fall back to creating a new record
|
||||
|
Loading…
x
Reference in New Issue
Block a user