fix API permission error in navigation when customer-hide-options include 'domains'; fixes #1183

Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
This commit is contained in:
Michael Kaufmann
2023-09-07 15:34:06 +02:00
parent 7e168f5a0e
commit 6ad1ca2ba9

View File

@@ -154,17 +154,21 @@ class CurrentUser
]); ]);
$addition = $result['emaildomains'] != 0; $addition = $result['emaildomains'] != 0;
} elseif ($resource == 'subdomains') { } elseif ($resource == 'subdomains') {
$parentDomainCollection = (new Collection( if (Settings::IsInList('panel.customer_hide_options', 'domains')) {
SubDomains::class, $addition = false;
$_SESSION['userinfo'], } else {
['sql_search' => [ $parentDomainCollection = (new Collection(
'd.parentdomainid' => 0, SubDomains::class,
'd.deactivated' => 0, $_SESSION['userinfo'],
'd.id' => ['op' => '<>', 'value' => $_SESSION['userinfo']['standardsubdomain']] ['sql_search' => [
'd.parentdomainid' => 0,
'd.deactivated' => 0,
'd.id' => ['op' => '<>', 'value' => $_SESSION['userinfo']['standardsubdomain']]
]
] ]
] ));
)); $addition = $parentDomainCollection->count() != 0;
$addition = $parentDomainCollection->count() != 0; }
} elseif ($resource == 'domains') { } elseif ($resource == 'domains') {
$customerCollection = (new Collection(Customers::class, $_SESSION['userinfo'])); $customerCollection = (new Collection(Customers::class, $_SESSION['userinfo']));
$addition = $customerCollection->count() != 0; $addition = $customerCollection->count() != 0;