check access on RemoveDocumentFile and EditDocumentFile

This commit is contained in:
Uwe Steinmann 2024-05-13 10:09:19 +02:00
parent 42f7795d5f
commit 3d605272c8

View File

@ -371,8 +371,10 @@ $(document).ready( function() {
$this->showActions($items); $this->showActions($items);
$items = []; $items = [];
if (($document->getAccessMode($user) == M_ALL)||($file->getUserID()==$user->getID())) { if (($document->getAccessMode($user) == M_ALL)||($file->getUserID()==$user->getID())) {
$items[] = array('link'=>$this->html_url('RemoveDocumentFile', array('documentid'=>$document->getID(), 'fileid'=>$file->getID())), 'icon'=>'remove', 'label'=>'delete'); if($accessobject->check_view_access('RemoveDocumentFile'))
$items[] = array('link'=>$this->html_url('EditDocumentFile', array('documentid'=>$document->getID(), 'fileid'=>$file->getID())), 'icon'=>'edit', 'label'=>'edit'); $items[] = array('link'=>$this->html_url('RemoveDocumentFile', array('documentid'=>$document->getID(), 'fileid'=>$file->getID())), 'icon'=>'remove', 'label'=>'delete');
if($accessobject->check_view_access('EditDocumentFile'))
$items[] = array('link'=>$this->html_url('EditDocumentFile', array('documentid'=>$document->getID(), 'fileid'=>$file->getID())), 'icon'=>'edit', 'label'=>'edit');
} }
$this->showActions($items); $this->showActions($items);
print "</td>"; print "</td>";