Merge remote-tracking branch 'origin/feature/HOR-3559' into bugfix/HOR-3633-C

workflow/engine/methods/roles/roles_Ajax.php

@@ -21,6 +21,18 @@
  * For more information, contact Colosa Inc, 2566 Le Jeune Rd.,
  * Coral Gables, FL, 33134, USA, or email info@colosa.com.
  */
+use ProcessMaker\Exception\RBACException;
+
+global $RBAC;
+switch ($RBAC->userCanAccess('PM_USERS')) {
+    case -2:
+        throw new RBACException('ID_USER_HAVENT_RIGHTS_SYSTEM', -2);
+        break;
+    case -1:
+    case -3:
+        throw new RBACException('ID_USER_HAVENT_RIGHTS_PAGE', -1);
+        break;
+}
 
 $REQUEST = (isset( $_GET['request'] )) ? $_GET['request'] : $_POST['request'];