PMCORE-4079

2022-12-05 13:16:01 -04:00
parent 631913a5d2
commit 6b2c5594c3
2 changed files with 16 additions and 12 deletions
--- a/workflow/engine/classes/WsBase.php
+++ b/workflow/engine/classes/WsBase.php
@@ -3007,11 +3007,14 @@ class WsBase
            }

            if (!in_array($userIdTarget, $userList)) {
-                $result = new WsResponse(34, G::loadTranslation('ID_TARGET_USER_DOES_NOT_HAVE_RIGHTS'));
-
-                $g->sessionVarRestore();
-
-                return $result;
+                $bmCase = new BmCases();
+                if (!$bmCase->isSupervisor($userIdTarget, $rows['APP_NUMBER'])){
+                    $result = new WsResponse(34, G::loadTranslation('ID_TARGET_USER_DOES_NOT_HAVE_RIGHTS'));
+    
+                    $g->sessionVarRestore();
+    
+                    return $result;
+                }
            }

            /**