CRM-14832 added permission check for entity relationship
authorJaap Jansma <info@edeveloper.nl>
Tue, 10 Jun 2014 10:30:29 +0000 (12:30 +0200)
committerJaap Jansma <info@edeveloper.nl>
Tue, 10 Jun 2014 10:30:29 +0000 (12:30 +0200)
CRM/Core/DAO/permissions.php

index ff53041ae8b42598dde652ea107c98c65a0c1189..7c304efac139a73aba46f65ed1c14e6d445d391a 100644 (file)
@@ -107,6 +107,22 @@ function _civicrm_api3_permissions($entity, $action, &$params) {
   $permissions['entity_tag'] = $permissions['address'];
   $permissions['note'] = $permissions['address'];
 
+  //relationship permissions
+  $permissions['relationship'] = array(
+    'get' => array(
+      'access CiviCRM',
+      'view all contacts',
+    ),
+    'delete' => array(
+      'access CiviCRM',
+      'delete contacts',
+    ),
+    'default' => array(
+      'access CiviCRM',
+      'edit all contacts',
+    ),
+  );
+  
   // Activity permissions
   $permissions['activity'] = array(
     'delete' => array(