From 734efbf89284aa8ae1833b504a65145a61d897d8 Mon Sep 17 00:00:00 2001 From: Luis Calvo Date: Fri, 11 Dec 2020 10:10:22 +0100 Subject: [PATCH] Added ACL check to custom view CSV donwload --- pandora_console/include/ajax/custom_fields.php | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/pandora_console/include/ajax/custom_fields.php b/pandora_console/include/ajax/custom_fields.php index 85066675a1..d8982da1d4 100644 --- a/pandora_console/include/ajax/custom_fields.php +++ b/pandora_console/include/ajax/custom_fields.php @@ -54,6 +54,16 @@ if (check_login()) { $update_filter_cf = (bool) get_parameter('update_filter_cf', 0); $delete_filter_cf = (bool) get_parameter('delete_filter_cf', 0); $change_name_filter = (bool) get_parameter('change_name_filter', 0); + $check_csv_button = (bool) get_parameter('check_csv_button', 0); + + if ($check_csv_button) { + if (check_acl($config['id_user'], 0, 'PM')) { + echo json_encode($permission); + return; + } else { + exit; + } + } if ($get_custom_fields_data) { $name_custom_fields = get_parameter('name_custom_fields', 0);