From d273898308bb748ccb2cb1f0d3212a3c472d1082 Mon Sep 17 00:00:00 2001 From: Pradeep Nayak Date: Mon, 31 Jul 2017 12:21:02 +0530 Subject: [PATCH] CRM-20988, list only permissioned batches ---------------------------------------- * CRM-20988: Don't display option of Export, Delete etc to users who lack that permission https://issues.civicrm.org/jira/browse/CRM-20988 --- CRM/Batch/BAO/Batch.php | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/CRM/Batch/BAO/Batch.php b/CRM/Batch/BAO/Batch.php index 19b02e58ae..7a4db7ce05 100644 --- a/CRM/Batch/BAO/Batch.php +++ b/CRM/Batch/BAO/Batch.php @@ -391,6 +391,15 @@ class CRM_Batch_BAO_Batch extends CRM_Batch_DAO_Batch { "created_id.sort_name", "created_id", ); + if (!CRM_Core_Permission::check("view all manual batches")) { + if (CRM_Core_Permission::check("view own manual batches")) { + $loggedInContactId = CRM_Core_Session::singleton()->get('userID'); + $params['created_id'] = $loggedInContactId; + } + else { + $params['created_id'] = 0; + } + } foreach ($return as $field) { if (!isset($params[$field])) { continue; -- 2.25.1