From 2dabecbae39df4e5dee71e6762b7ff9b8b530b49 Mon Sep 17 00:00:00 2001
From: yuri <yurikuzn@users.noreply.github.com>
Date: Tue, 6 Aug 2019 14:59:55 +0300
Subject: [PATCH] acl strict mode by default

---
 application/Espo/Core/defaults/config.php       | 2 +-
 application/Espo/Core/defaults/systemConfig.php | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/application/Espo/Core/defaults/config.php b/application/Espo/Core/defaults/config.php
index a722ec5b5b..41f6b3933b 100644
--- a/application/Espo/Core/defaults/config.php
+++ b/application/Espo/Core/defaults/config.php
@@ -166,7 +166,7 @@ return [
     'cleanupAuthTokenPeriod' => '1 month',
     'currencyFormat' => 2,
     'currencyDecimalPlaces' => 2,
-    'aclStrictMode' => false,
+    'aclStrictMode' => true,
     'aclAllowDeleteCreated' => false,
     'aclAllowDeleteCreatedThresholdPeriod' => '24 hours',
     'inlineAttachmentUploadMaxSize' => 20,
diff --git a/application/Espo/Core/defaults/systemConfig.php b/application/Espo/Core/defaults/systemConfig.php
index 99c9bb12ea..191fef3862 100644
--- a/application/Espo/Core/defaults/systemConfig.php
+++ b/application/Espo/Core/defaults/systemConfig.php
@@ -282,4 +282,5 @@ return [
     'requiredMariadbVersion' => '5.5.3',
     'recommendedMariadbParams' => [],
     'ldapPortalUserLdapAuth' => false,
+    'aclStrictMode' => true,
 ];