AfformCrudTrait - When delegating to another API call, use same permissions

diff --git a/ext/afform/Civi/Api4/Traits/AfformCrudTrait.php b/ext/afform/Civi/Api4/Traits/AfformCrudTrait.php
index ad47df041fe35104ca546e19e6169f3c220f5592..668b90fbd2990ecd5071767100a7bd1a2eee6b72 100644 (file)
--- a/ext/afform/Civi/Api4/Traits/AfformCrudTrait.php
+++ b/ext/afform/Civi/Api4/Traits/AfformCrudTrait.php
@@ -65,7 +65,10 @@ trait AfformCrudTrait {
     }
 
     // Create or update meta.json.
-    $orig = \Civi\Api4\Afform::get()->addWhere('name', '=', $name)->execute();
+    $orig = \Civi\Api4\Afform::get()
+      ->setCheckPermissions($this->getCheckPermissions())
+      ->addWhere('name', '=', $name)
+      ->execute();
 
     if (isset($orig[0])) {
       $meta = _afform_fields_filter(array_merge($orig[0], $updates));