diff --git a/module/common/model.php b/module/common/model.php index 164a2741d3..1b8503aadd 100644 --- a/module/common/model.php +++ b/module/common/model.php @@ -2400,6 +2400,9 @@ EOD; if($inProject && $app->session->project && strpos(",{$app->user->rights['projects']},", ",{$app->session->project},") !== false) return true; } + /* White list of method. */ + if(in_array($module, array('user', 'task', 'story', 'bug', 'testcase')) and $method == 'showimport') return true; + /* If not super admin, check the rights. */ $rights = $app->user->rights['rights']; $acls = $app->user->rights['acls'];