Merged in bugfix/HOR-2949 (pull request #5892)

HOR-2949

Approved-by: Julio Cesar Laura Avendaño <contact@julio-laura.com>

gulliver/system/class.rbac.php

@@ -165,6 +165,13 @@ class RBAC
                 'updateCategory' => array('PM_SETUP', 'PM_SETUP_PROCESS_CATEGORIES'),
                 'canDeleteCategory' => array('PM_SETUP', 'PM_SETUP_PROCESS_CATEGORIES'),
                 'deleteCategory' => array('PM_SETUP', 'PM_SETUP_PROCESS_CATEGORIES')
+            ),
+            'emailServerAjax.php' => array(
+                'INS' => array('PM_SETUP'),
+                'UPD' => array('PM_SETUP'),
+                'DEL' => array('PM_SETUP'),
+                'LST' => array('PM_SETUP'),
+                'TEST' => array('PM_SETUP')
             )
         );
     }

workflow/engine/methods/emailServer/emailServerAjax.php

@@ -1,8 +1,8 @@
 <?php
 $option = (isset($_POST["option"]))? $_POST["option"] : "";
-
 $response = array();
 
+$RBAC->allows(basename(__FILE__), $option);
 switch ($option) {
     case "INS":
         $arrayData = array();