* [task#145691,done,0.5h] Check viewTemplate priviledge.

2025-06-24 17:04:24 +08:00
parent 6ce88f330b
commit bc4180f056
1 changed files with 1 additions and 0 deletions
@@ -956,6 +956,7 @@ class actionTao extends actionModel
            if($todo && $todo->private == 1 && $todo->account != $this->app->user->account) return false;
        }

+        if($action->objectType == 'docTemplate' && !common::hasPriv('docTempalte', 'view')) return false;
        if($action->objectType == 'mr' && (empty($action->objectName) || $action->action == 'deleted')) return false;
        if($action->objectType == 'stakeholder' && $action->project == 0) return false;
        if($action->objectType == 'chartgroup') return false;