Advertisement
Guest User

Untitled

a guest
Jul 31st, 2015
135
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.00 KB | None | 0 0
  1. diff --git a/CRM/Admin/Form/ScheduleReminders.php b/CRM/Admin/Form/ScheduleReminders.php
  2. index 6877fca..3d642ac 100644
  3. --- a/CRM/Admin/Form/ScheduleReminders.php
  4. +++ b/CRM/Admin/Form/ScheduleReminders.php
  5. @@ -58,6 +58,12 @@ class CRM_Admin_Form_ScheduleReminders extends CRM_Admin_Form {
  6. $providersCount = CRM_SMS_BAO_Provider::activeProviderCount();
  7. $this->_context = CRM_Utils_Request::retrieve('context', 'String', $this);
  8.  
  9. + //CRM-16777: Do not permit access to user to add, edit, delete schedule reminders through administer when,
  10. + //user that does NOT have 'administer CiviCRM', but does have 'edit all events' permission
  11. + if (empty($this->_context) && !CRM_Core_Permission::check('administer CiviCRM')) {
  12. + CRM_Core_Error::fatal(ts('You do not have permission to access this page.'));
  13. + }
  14. +
  15. if ($this->_action & (CRM_Core_Action::DELETE)) {
  16. $reminderName = CRM_Core_DAO::getFieldValue('CRM_Core_DAO_ActionSchedule', $this->_id, 'title');
  17. if ($this->_context == 'event') {
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement