From 2775280263cbf1d6474bbc89fdac598ce18a1830 Mon Sep 17 00:00:00 2001 From: Coleman Watts Date: Fri, 21 Jan 2022 15:00:35 -0500 Subject: [PATCH] SearchKit - Fix loading metadata for anonymous users The `checkPermissions` param was previously not getting copied into `$this->savedSearch['api_params']` which caused trouble for less- permissioned users, esp when the Run action is trying to internally load field metadata. --- .../Civi/Api4/Action/SearchDisplay/AbstractRunAction.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ext/search_kit/Civi/Api4/Action/SearchDisplay/AbstractRunAction.php b/ext/search_kit/Civi/Api4/Action/SearchDisplay/AbstractRunAction.php index f6957086d0..795bb7d492 100644 --- a/ext/search_kit/Civi/Api4/Action/SearchDisplay/AbstractRunAction.php +++ b/ext/search_kit/Civi/Api4/Action/SearchDisplay/AbstractRunAction.php @@ -115,7 +115,7 @@ abstract class AbstractRunAction extends \Civi\Api4\Generic\AbstractAction { throw new UnauthorizedException('Access denied'); } - $this->_apiParams['checkPermissions'] = empty($this->display['acl_bypass']); + $this->_apiParams['checkPermissions'] = $this->savedSearch['api_params']['checkPermissions'] = empty($this->display['acl_bypass']); $this->display['settings']['columns'] = $this->display['settings']['columns'] ?? []; $this->processResult($result); -- 2.25.1