Kaynağa Gözat

Ticket #5741 - Mass Mailer: Subscribers list should check ACL permissions.

AntonLV 3 hafta önce
ebeveyn
işleme
7298f1bc65

+ 4 - 2
modules/boonex/massmailer/classes/BxMassMailerModule.php

@@ -250,11 +250,13 @@ class BxMassMailerModule extends BxBaseModGeneralModule
     */
     public function serviceCampagnSubscribers ($iContentId = 0, $iStart = 0, $iPerPage = 20)
     {
+        if($this->checkAllowed() !== CHECK_ACTION_RESULT_ALLOWED)
+            return $this->_bIsApi ? [] : '';
+
         if(!$iContentId)
             $iContentId = bx_process_input(bx_get('id'), BX_DATA_INT);
-
         if(!$iContentId)
-            return false;
+            return $this->_bIsApi ? [] : '';
         
         $CNF = &$this->_oConfig->CNF;