diff --git a/pandora_console/include/rest-api/models/VisualConsole/Item.php b/pandora_console/include/rest-api/models/VisualConsole/Item.php index 2c35b3b79f..2cb365f3f7 100644 --- a/pandora_console/include/rest-api/models/VisualConsole/Item.php +++ b/pandora_console/include/rest-api/models/VisualConsole/Item.php @@ -1052,6 +1052,19 @@ class Item extends CachedModel // The layout can be from another node. $linkedLayoutNodeId = $linkedVisualConsole['linkedLayoutNodeId']; + // Check ACL. + $visualConsole = VC::fromDB(['id' => $vcId]); + $visualConsoleData = $visualConsole->toArray(); + $vcGroupId = $visualConsoleData['groupId']; + + $aclRead = \check_acl($config['id_user'], $vcGroupId, 'VR'); + // To build the link to another visual console + // you must have read permissions of the visual console + // with which it is linked. + if ($aclRead === 0) { + return null; + } + if (empty($linkedLayoutNodeId) === true && \is_metaconsole()) { /* * A Visual Console from this console.