PM-1142 "Any user can reassign any case even if he/she is not assign to the task" SOLVED
This commit is contained in:
@@ -6569,8 +6569,8 @@ class Cases
|
||||
}
|
||||
|
||||
global $RBAC;
|
||||
//Adding the actual user if this has the PM_REASSIGNCASE permission assigned.
|
||||
if ($RBAC->userCanAccess('PM_REASSIGNCASE') == 1 && $aUser['USR_UID'] == $USR_UID) {
|
||||
//Adding the actual user if this has the PM_SUPERVISOR permission assigned.
|
||||
if ($RBAC->userCanAccess('PM_SUPERVISOR') == 1) {
|
||||
if(!in_array($RBAC->aUserInfo['USER_INFO']['USR_UID'], $row)) {
|
||||
$row[] = $RBAC->aUserInfo['USER_INFO']['USR_UID'];
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user