mirrors/easyappointments
1
0
Fork 1
mirror of https://github.com/alextselegidis/easyappointments.git synced 2024-11-10 10:02:33 +03:00
Code Issues Projects Releases Packages Wiki Activity

Add a missing condition on permissions in Calendar.php

Browse source
This commit is contained in:
Alex Tselegidis 2022-11-30 11:22:43 +01:00
parent 80e52ca36d
commit bc0de8ec53
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
application/controllers/Calendar.php
View file

@ -494,6 +494,13 @@ class Calendar extends EA_Controller {
{ {
try try
{ {
$required_permissions = can('view', PRIV_APPOINTMENTS);
if ( ! $required_permissions)
{
throw new RuntimeException('You do not have the required permissions for this task.');
}
$start_date = request('start_date') . ' 00:00:00'; $start_date = request('start_date') . ' 00:00:00';
$end_date = request('end_date') . ' 23:59:59'; $end_date = request('end_date') . ' 23:59:59';