HOR-2677
[Zendesk - 4230] Any user can claim a case with a link generated by the PMFCaseLink function
This commit is contained in:
@@ -69,7 +69,6 @@ if (isset($_SESSION['__OPEN_APPLICATION_UID__'])) {
|
||||
|
||||
$confDefaultOption = 'CASES_SEARCH';
|
||||
$action = 'search';
|
||||
|
||||
$arrayResult = $case->getStatusInfo($_SESSION['__OPEN_APPLICATION_UID__'], 0, $_SESSION['USER_LOGGED']);
|
||||
$arrayDelIndex = [];
|
||||
|
||||
@@ -89,9 +88,21 @@ if (isset($_SESSION['__OPEN_APPLICATION_UID__'])) {
|
||||
|
||||
$arrayDelIndex = $arrayResult['DEL_INDEX'];
|
||||
} else {
|
||||
$arrayResult = $case->getStatusInfo($_SESSION['__OPEN_APPLICATION_UID__']);
|
||||
|
||||
$arrayDelIndex = $arrayResult['DEL_INDEX'];
|
||||
$arrayResultData = $case->getStatusInfo($_SESSION['__OPEN_APPLICATION_UID__']);
|
||||
$supervisor = new \ProcessMaker\BusinessModel\ProcessSupervisor();
|
||||
$isSupervisor = $supervisor->isUserProcessSupervisor($arrayResultData['PRO_UID'], $_SESSION['USER_LOGGED']);
|
||||
if ($isSupervisor) {
|
||||
$arrayResult = $arrayResultData;
|
||||
$arrayDelIndex = $arrayResultData['DEL_INDEX'];
|
||||
} else {
|
||||
$_SESSION['PROCESS'] = $arrayResultData['PRO_UID'];
|
||||
$_GET['APP_UID'] = $_SESSION['__OPEN_APPLICATION_UID__'];
|
||||
$_SESSION['ACTION'] = 'jump';
|
||||
$_SESSION['APPLICATION'] = $_SESSION['__OPEN_APPLICATION_UID__'];
|
||||
$_SESSION['INDEX'] = $arrayResultData['DEL_INDEX'][0];
|
||||
require_once(PATH_METHODS . 'cases' . PATH_SEP . 'cases_Resume.php');
|
||||
exit();
|
||||
}
|
||||
}
|
||||
|
||||
if (count($arrayDelIndex) == 1) {
|
||||
|
||||
Reference in New Issue
Block a user