From f40e966a82c30987de9c8fc2b7e8f0d1948e973f Mon Sep 17 00:00:00 2001 From: jitendrapurohit Date: Tue, 30 Aug 2016 16:22:22 +0530 Subject: [PATCH] CRM-19270 - show contact reference custom field only if accessible --- CRM/Core/BAO/CustomField.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/CRM/Core/BAO/CustomField.php b/CRM/Core/BAO/CustomField.php index 2f74319daa..77fe06bebf 100644 --- a/CRM/Core/BAO/CustomField.php +++ b/CRM/Core/BAO/CustomField.php @@ -1029,6 +1029,10 @@ class CRM_Core_BAO_CustomField extends CRM_Core_DAO_CustomField { } } if ($field->data_type == 'ContactReference') { + // break if contact does not have permission to access ContactReference + if (!CRM_Core_Permission::check('access contact reference fields')) { + break; + } $attributes['class'] = (isset($attributes['class']) ? $attributes['class'] . ' ' : '') . 'crm-form-contact-reference huge'; $attributes['data-api-entity'] = 'Contact'; $element = $qf->add('text', $elementName, $label, $attributes, $useRequired && !$search); -- 2.25.1