SearchKit - Pass-thu permission checks from SearchDisplay::run to underlying API
authorColeman Watts <coleman@civicrm.org>
Thu, 29 Apr 2021 00:49:06 +0000 (20:49 -0400)
committerColeman Watts <coleman@civicrm.org>
Mon, 3 May 2021 00:14:29 +0000 (20:14 -0400)
commitfaa79dbf28e2132ddd5911817dcd564a54dec0c6
tree9a91008165fbafe22f1e2b4a63ee218dcbba199d
parent7ae98304743df29fad6c42b9fe6f56b837c94f2e
SearchKit - Pass-thu permission checks from SearchDisplay::run to underlying API

The SearchDisplay::run api action essentially wraps api.get for the search entity,
so it makes sense to allow open access to the run api but require permission checks
on the delegated api call.
ext/search/Civi/Api4/Action/SearchDisplay/Run.php
ext/search/Civi/Api4/SearchDisplay.php
ext/search/tests/phpunit/api/v4/SearchDisplay/SearchRunTest.php
tests/phpunit/CRMTraits/ACL/PermissionTrait.php