attachment take into account field level

2021-11-22 11:22:56 +02:00
parent b9e1660f92
commit 6207c8f547
2 changed files with 31 additions and 1 deletions
@@ -32,6 +32,7 @@ namespace Espo\Classes\AclPortal\Attachment;
 use Espo\Entities\{
    User,
    Note,
+    Attachment,
 };

 use Espo\ORM\Entity;
@@ -46,7 +47,7 @@ use Espo\Core\{
 };

 /**
- * @implements AccessEntityCREDChecker<User>
+ * @implements AccessEntityCREDChecker<Attachment>
 */
 class AccessChecker implements AccessEntityCREDChecker
 {
@@ -70,7 +71,10 @@ class AccessChecker implements AccessEntityCREDChecker

    public function checkEntityRead(User $user, Entity $entity, ScopeData $data): bool
    {
+        /** @var Attachment $entity */
+
        if ($entity->get('parentType') === 'Settings') {
+            // Allow the logo.
            return true;
        }

@@ -105,6 +109,16 @@ class AccessChecker implements AccessEntityCREDChecker
            }
        }
        else if ($this->aclManager->checkEntity($user, $parent)) {
+            if (
+                $entity->getTargetField() &&
+                in_array(
+                    $entity->getTargetField(),
+                    $this->aclManager->getScopeForbiddenFieldList($user, $parent->getEntityType())
+                )
+            ) {
+                return false;
+            }
+
            return true;
        }