restrict access to mention

2015-10-29 15:20:55 +02:00
parent deee30eb3e
commit ecc6e9f4ec
4 changed files with 79 additions and 54 deletions
@@ -63,6 +63,9 @@ class Mentions extends \Espo\Core\Hooks\Base
                $userName = substr($item, 1);
                $user = $this->getEntityManager()->getRepository('User')->where(array('userName' => $userName))->findOne();
                if ($user) {
+                    if (!$this->getAcl()->checkPermission('assignmentPermission', $user)) {
+                        continue;
+                    }
                    $m = array(
                        'id' => $user->id,
                        'name' => $user->get('name'),