From 246ffb3e12c40cde83110b4200e28c030de8051a Mon Sep 17 00:00:00 2001
From: FusionPBX <markjcrane@gmail.com>
Date: Mon, 18 Jan 2021 00:00:18 -0700
Subject: [PATCH] Add a permission check for xml_cdr_export_csv and
 xml_cdr_export_pdf to the CDR export.

---
 app/xml_cdr/xml_cdr_export.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/app/xml_cdr/xml_cdr_export.php b/app/xml_cdr/xml_cdr_export.php
index df0c0f78f6..b39ce53d03 100644
--- a/app/xml_cdr/xml_cdr_export.php
+++ b/app/xml_cdr/xml_cdr_export.php
@@ -51,7 +51,7 @@
 	$export_format = $_REQUEST['export_format'];
 
 //export the csv
-	if ($export_format == 'csv') {
+	if (permission_exists('xml_cdr_export_csv') && $export_format == 'csv') {
 
 		//define file name
 			if ($_GET['show'] == 'all' && permission_exists('xml_cdr_all')) {
@@ -104,7 +104,7 @@
 	}
 
 //export as a PDF
-	if ($export_format == 'pdf') {
+	if (permission_exists('xml_cdr_export_pdf') && $export_format == 'pdf') {
 
 		//load pdf libraries
 		require_once "resources/tcpdf/tcpdf.php";