[Vtigercrm-commits] [vtiger-commits] r10847 - /vtigercrm/branches/5.0.3/soap/vtigerolservice.php

[vtigercrm-commits at vtiger.fosslabs.com]

Author: jerrydgeorge
Date: Thu May 10 16:33:24 2007
New Revision: 10847

Log:
Security Issue in Outlook Plugin Has been fixed.Fixes #3764

Modified:
    vtigercrm/branches/5.0.3/soap/vtigerolservice.php

Modified: vtigercrm/branches/5.0.3/soap/vtigerolservice.php
==============================================================================
--- vtigercrm/branches/5.0.3/soap/vtigerolservice.php (original)
+++ vtigercrm/branches/5.0.3/soap/vtigerolservice.php Thu May 10 16:33:24 2007
@@ -421,7 +421,7 @@
 	$current_user=$seed_user;
 	$current_user->retrieve_entity_info($user_id, 'Users');
 
-	if(isPermitted("Contacts","Delete") == "yes")
+	if(isPermitted("Contacts","Delete") == "yes" && isPermitted("Contacts","EditView") == "yes")
 	{
 		return "allowed";
 	}else
@@ -439,7 +439,7 @@
 	$current_user=$seed_user;
 	$current_user->retrieve_entity_info($user_id, 'Users');
 
-	if(isPermitted("Calendar","Delete") == "yes")
+	if(isPermitted("Calendar","Delete") == "yes" && isPermitted("Calendar","EditView") == "yes")
 	{
 		return "allowed";
 	}else