Fixed merge_organisations permission check
This commit is contained in:
@@ -363,7 +363,7 @@ class OrganisationController extends SimpleController
|
|||||||
$currentUser = $this->ci->currentUser;
|
$currentUser = $this->ci->currentUser;
|
||||||
|
|
||||||
// Access-controlled page
|
// Access-controlled page
|
||||||
if (!$authorizer->checkAccess($currentUser, 'merge_organisation')) {
|
if (!$authorizer->checkAccess($currentUser, 'merge_organisations')) {
|
||||||
throw new ForbiddenException();
|
throw new ForbiddenException();
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -733,7 +733,7 @@ class OrganisationController extends SimpleController
|
|||||||
$translator = $this->ci->translator;
|
$translator = $this->ci->translator;
|
||||||
|
|
||||||
// Access-controlled resource - check that currentUser has permission to merge organisations.
|
// Access-controlled resource - check that currentUser has permission to merge organisations.
|
||||||
if (!$authorizer->checkAccess($currentUser, 'organisation_merge')) {
|
if (!$authorizer->checkAccess($currentUser, 'merge_organisations')) {
|
||||||
throw new ForbiddenException();
|
throw new ForbiddenException();
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user