dbxe/fusionpbx
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Work on the permissions for contacts.

Browse Source
This commit is contained in:
markjcrane
2016-01-18 21:46:49 -07:00
parent 0689bedc48
commit 0834f67911
1 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/contacts/contacts.php
+9 -7
View File
@@ -72,7 +72,7 @@ else {
$sql .= "and contact_setting_name = 'array' "; $sql .= "and contact_setting_name = 'array' ";
$sql .= "and contact_setting_value <> '' "; $sql .= "and contact_setting_value <> '' ";
$sql .= "and contact_setting_value is not null "; $sql .= "and contact_setting_value is not null ";
if (sizeof($user_group_uuids) > 0) { if (!(if_group("superadmin") || if_group("admin"))) {
$sql .= "and ( \n"; //only contacts assigned to current user's group(s) and those not assigned to any group $sql .= "and ( \n"; //only contacts assigned to current user's group(s) and those not assigned to any group
$sql .= " contact_uuid in ( \n"; $sql .= " contact_uuid in ( \n";
$sql .= " select contact_uuid from v_contact_groups "; $sql .= " select contact_uuid from v_contact_groups ";
@@ -82,7 +82,8 @@ else {
$sql .= " or \n"; $sql .= " or \n";
$sql .= " contact_uuid not in ( \n"; $sql .= " contact_uuid not in ( \n";
$sql .= " select contact_uuid from v_contact_groups "; $sql .= " select contact_uuid from v_contact_groups ";
$sql .= " where domain_uuid = '".$_SESSION['domain_uuid']."' "; $sql .= " where user_uuid = '".$_SESSION['user_uuid']."' ";
$sql .= " and domain_uuid = '".$_SESSION['domain_uuid']."' ";
$sql .= " ) \n"; $sql .= " ) \n";
$sql .= ") \n"; $sql .= ") \n";
} }
@@ -100,17 +101,18 @@ else {
$sql = "select count(*) as num_rows "; $sql = "select count(*) as num_rows ";
$sql .= "from v_contacts as c "; $sql .= "from v_contacts as c ";
$sql .= "where domain_uuid = '".$_SESSION['domain_uuid']."' "; $sql .= "where domain_uuid = '".$_SESSION['domain_uuid']."' ";
if (sizeof($user_group_uuids) > 0) { if (!(if_group("superadmin") || if_group("admin"))) {
$sql .= "and ( \n"; //only contacts assigned to current user's group(s) and those not assigned to any group $sql .= "and ( \n"; //only contacts assigned to current user's group(s) and those not assigned to any group
$sql .= " contact_uuid in ( \n"; $sql .= " contact_uuid in ( \n";
$sql .= " select contact_uuid from v_contact_groups "; $sql .= " select contact_uuid from v_contact_groups ";
$sql .= " where group_uuid in ('".implode("','", $user_group_uuids)."') "; $sql .= " where group_uuid in ('".implode("','", $user_group_uuids)."') ";
$sql .= " and domain_uuid = '".$_SESSION['domain_uuid']."' "; $sql .= " and domain_uuid = '".$_SESSION['domain_uuid']."' ";
$sql .= " ) \n"; $sql .= " ) \n";
$sql .= " or \n"; $sql .= " or contact_uuid in ( \n";
$sql .= " contact_uuid not in ( \n"; $sql .= " select contact_uuid from v_contact_users ";
$sql .= " select contact_uuid from v_contact_groups "; $sql .= " where user_uuid = '".$_SESSION['user_uuid']."' ";
$sql .= " where domain_uuid = '".$_SESSION['domain_uuid']."' "; $sql .= " and domain_uuid = '".$_SESSION['domain_uuid']."' ";
$sql .= "";
$sql .= " ) \n"; $sql .= " ) \n";
$sql .= ") \n"; $sql .= ") \n";
} }