diff --git a/pandora_console/include/ajax/events.php b/pandora_console/include/ajax/events.php
index bacbad708d..d50c2c1100 100644
--- a/pandora_console/include/ajax/events.php
+++ b/pandora_console/include/ajax/events.php
@@ -1381,6 +1381,12 @@ if ($get_extended_event) {
'EW',
$event['clean_tags'],
$childrens_ids
+ )) || (tags_checks_event_acl(
+ $config['id_user'],
+ $event['id_grupo'],
+ 'ER',
+ $event['clean_tags'],
+ $childrens_ids
)))
) {
$tabs .= "
".html_print_image(
@@ -1444,6 +1450,12 @@ if ($get_extended_event) {
'EW',
$event['clean_tags'],
$childrens_ids
+ )) || (tags_checks_event_acl(
+ $config['id_user'],
+ $event['id_grupo'],
+ 'ER',
+ $event['clean_tags'],
+ $childrens_ids
)))
) {
$responses = events_page_responses($event);
diff --git a/pandora_console/include/functions_events.php b/pandora_console/include/functions_events.php
index 9a8f2b8a1c..ea85ed589b 100644
--- a/pandora_console/include/functions_events.php
+++ b/pandora_console/include/functions_events.php
@@ -3669,22 +3669,37 @@ function events_page_responses($event, $childrens_ids=[])
);
}
- $table_responses->data[] = $data;
+ if ((tags_checks_event_acl(
+ $config['id_user'],
+ $event['id_grupo'],
+ 'EM',
+ $event['clean_tags'],
+ $childrens_ids
+ )) || (tags_checks_event_acl(
+ $config['id_user'],
+ $event['id_grupo'],
+ 'EW',
+ $event['clean_tags'],
+ $childrens_ids
+ ))
+ ) {
+ $table_responses->data[] = $data;
- // Comments.
- $data = [];
- $data[0] = __('Comment');
- $data[1] = '';
- $data[2] = html_print_button(
- __('Add comment'),
- 'comment_button',
- false,
- '$(\'#link_comments\').trigger(\'click\');',
- 'class="sub next w70p"',
- true
- );
+ // Comments.
+ $data = [];
+ $data[0] = __('Comment');
+ $data[1] = '';
+ $data[2] = html_print_button(
+ __('Add comment'),
+ 'comment_button',
+ false,
+ '$(\'#link_comments\').trigger(\'click\');',
+ 'class="sub next w70p"',
+ true
+ );
- $table_responses->data[] = $data;
+ $table_responses->data[] = $data;
+ }
if (tags_checks_event_acl(
$config['id_user'],
diff --git a/pandora_console/operation/events/events.php b/pandora_console/operation/events/events.php
index 89f832f5a5..dd0275924a 100644
--- a/pandora_console/operation/events/events.php
+++ b/pandora_console/operation/events/events.php
@@ -1608,8 +1608,20 @@ try {
}
// Event responses.
-$sql_event_resp = "SELECT id, name FROM tevent_response WHERE type LIKE 'command'";
-$event_responses = db_get_all_rows_sql($sql_event_resp);
+if (is_user_admin($config['id_user'])) {
+ $sql_event_resp = "SELECT id, name FROM tevent_response WHERE type LIKE 'command'";
+ $event_responses = db_get_all_rows_sql($sql_event_resp);
+} else {
+ $id_groups = array_keys(users_get_groups(false, 'EW'));
+ $event_responses = db_get_all_rows_filter(
+ 'tevent_response',
+ [
+ 'id_group' => $id_groups,
+ 'type' => 'command',
+ ]
+ );
+}
+
if ($config['event_replication'] != 1) {
if ($event_w && !$readonly) {