PM-1142 "Any user can reassign any case even if he/she is not assign to the task" SOLVED

This commit is contained in:
Freddy Daniel Rojas Valda
2014-12-19 11:59:40 -04:00
parent d9169e1163
commit dbe8219e6b

View File

@@ -6570,10 +6570,10 @@ class Cases
global $RBAC;
//Adding the actual user if this has the PM_REASSIGNCASE permission assigned.
if ($RBAC->userCanAccess('PM_REASSIGNCASE') == 1){
if(!in_array($RBAC->aUserInfo['USER_INFO']['USR_UID'], $row)){
$row[] = $RBAC->aUserInfo['USER_INFO']['USR_UID'];
}
if ($RBAC->userCanAccess('PM_REASSIGNCASE') == 1 && $aUser['USR_UID'] == $USR_UID) {
if(!in_array($RBAC->aUserInfo['USER_INFO']['USR_UID'], $row)) {
$row[] = $RBAC->aUserInfo['USER_INFO']['USR_UID'];
}
}
require_once 'classes/model/Users.php';