orocrm /
platform
| @@ 572-579 (lines=8) @@ | ||
| 569 | $extension |
|
| 570 | ); |
|
| 571 | // check class ACEs if object ACEs were not contains all requested privileges |
|
| 572 | if ($privilege->getPermissionCount() < count($permissions)) { |
|
| 573 | $this->addAcesPermissions( |
|
| 574 | $privilege, |
|
| 575 | $permissions, |
|
| 576 | $this->getAces($sid, $acl, AclManager::CLASS_ACE, $field), |
|
| 577 | $extension |
|
| 578 | ); |
|
| 579 | } |
|
| 580 | // check parent ACEs if object and class ACEs were not contains all requested privileges |
|
| 581 | if ($privilege->getPermissionCount() < count($permissions) && $acl->isEntriesInheriting()) { |
|
| 582 | $parentAcl = $acl->getParentAcl(); |
|
| @@ 589-597 (lines=9) @@ | ||
| 586 | } |
|
| 587 | } |
|
| 588 | // if so far not all requested privileges are found get them from the root ACL |
|
| 589 | if ($privilege->getPermissionCount() < count($permissions)) { |
|
| 590 | $this->addAcesPermissions( |
|
| 591 | $privilege, |
|
| 592 | $permissions, |
|
| 593 | $this->getAces($sid, $rootAcl, AclManager::OBJECT_ACE, $field), |
|
| 594 | $extension, |
|
| 595 | true |
|
| 596 | ); |
|
| 597 | } |
|
| 598 | } |
|
| 599 | ||
| 600 | /** |
|
