Oauth - Use selectWhereClause to check perms instead of overriding API4 Get
authorColeman Watts <coleman@civicrm.org>
Wed, 8 Jun 2022 00:20:13 +0000 (20:20 -0400)
committerColeman Watts <coleman@civicrm.org>
Mon, 18 Jul 2022 16:37:22 +0000 (12:37 -0400)
commitee0d82c6681c1f26bc7f08367127712fc2298a36
tree078eab97c37257bc8a7562901f2d0e21ca328bc7
parent245f0957e0173ff8a9fdd5f65e578df2447357c0
Oauth - Use selectWhereClause to check perms instead of overriding API4 Get

Putting permission checks in the BAO ensures that they are always enforced
regardless of which layer accesses them (Api3, Api4, etc) and that they will be
enforced even if this is not the primary entity of the api call (e.g. using joins).
ext/oauth-client/CRM/OAuth/BAO/OAuthContactToken.php
ext/oauth-client/Civi/Api4/Action/OAuthContactToken/Get.php [deleted file]
ext/oauth-client/Civi/Api4/OAuthContactToken.php