From fb6aa4b95554868a86f8d72477b2216e052afbe0 Mon Sep 17 00:00:00 2001 From: monishdeb Date: Wed, 27 May 2015 04:00:39 +0530 Subject: [PATCH] CRM-16496 fix - ACLs not respected when viewing custom data set on an activity when activity is viewed from Manage Case screen https://issues.civicrm.org/jira/browse/CRM-16496 --- CRM/Case/XMLProcessor/Report.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/CRM/Case/XMLProcessor/Report.php b/CRM/Case/XMLProcessor/Report.php index 8d13730cf3..cdbe24399e 100644 --- a/CRM/Case/XMLProcessor/Report.php +++ b/CRM/Case/XMLProcessor/Report.php @@ -625,7 +625,8 @@ SELECT cg.title as groupTitle, FROM civicrm_custom_group cg, civicrm_custom_field cf WHERE cf.custom_group_id = cg.id -AND cg.extends = 'Activity'"; +AND cg.extends = 'Activity' +AND " . CRM_Core_Permission::customGroupClause(CRM_Core_Permission::VIEW, 'cg.'); if ($activityTypeID) { $query .= "AND ( cg.extends_entity_column_value IS NULL OR cg.extends_entity_column_value LIKE '%" . CRM_Core_DAO::VALUE_SEPARATOR . "%1" . CRM_Core_DAO::VALUE_SEPARATOR . "%' )"; -- 2.25.1