From 80bee61fcda7e0f8e09e2f286514537c8555beef Mon Sep 17 00:00:00 2001
From: ftimme <ft@falkotimme.com>
Date: Thu, 24 May 2012 06:26:55 -0400
Subject: [PATCH] - Added circle access control so that 1) a reseller can create circles that contain only his clients, not all clients, and 2) a reseller can send messages only to his own circles instead of all circles.
---
interface/web/help/support_message_list.php | 9 +++------
1 files changed, 3 insertions(+), 6 deletions(-)
diff --git a/interface/web/help/support_message_list.php b/interface/web/help/support_message_list.php
index ce990e4..dcf779e 100644
--- a/interface/web/help/support_message_list.php
+++ b/interface/web/help/support_message_list.php
@@ -5,17 +5,14 @@
//* Path to the list definition file
$list_def_file = "list/support_message.list.php";
-//* Check the module permissions
-if(!stristr($_SESSION['s']['user']["modules"], 'help')) {
- header('Location: ../index.php');
- exit;
-}
+//* Check permissions for module
+$app->auth->check_module_permissions('help');
//* Loading the class
$app->uses('listform_actions');
//* Optional limit
-// $app->listform_actions->SQLExtWhere = "type = 'alias'";
+$app->listform_actions->SQLExtWhere = "recipient_id = ".$_SESSION['s']['user']['userid'];
//* Start the form rendering and action ahndling
$app->listform_actions->onLoad();
--
Gitblit v1.9.1