Make sure that viewing permissions are obeyed in the method, and that the DataForm just doesn't hide the link. Fixes bug #12353.
This commit is contained in:
parent
2c225f30f5
commit
70c9939169
2 changed files with 3 additions and 0 deletions
|
|
@ -1280,6 +1280,8 @@ Renders the list view of the DataForm.
|
|||
|
||||
sub viewList {
|
||||
my $self = shift;
|
||||
return $self->session->privilege->insufficient
|
||||
unless $self->session->user->isInGroup($self->get("groupToViewEntries"));
|
||||
my $var = $self->getTemplateVars;
|
||||
return $self->processTemplate($self->getListTemplateVars($var), undef, $self->{_viewListTemplate});
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue