Make sure that viewing permissions are obeyed in the method, and that the DataForm just doesn't hide the link. Fixes bug #12353.

This commit is contained in:
Colin Kuskie 2012-04-17 19:02:12 -07:00
parent 2c225f30f5
commit 70c9939169
2 changed files with 3 additions and 0 deletions

View file

@ -1280,6 +1280,8 @@ Renders the list view of the DataForm.
sub viewList {
my $self = shift;
return $self->session->privilege->insufficient
unless $self->session->user->isInGroup($self->get("groupToViewEntries"));
my $var = $self->getTemplateVars;
return $self->processTemplate($self->getListTemplateVars($var), undef, $self->{_viewListTemplate});
}