Merge pull request #17540 from colemanw/getActionsPerm

APIv4 - filter getActions results based on user permissions
civicrm · Jun 8, 2020 · 10ba4c7 · 10ba4c7
2 parents c02d2eb + 7e67fdb
commit 10ba4c7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Civi/Api4/Action/GetActions.php b/Civi/Api4/Action/GetActions.php
@@ -75,7 +75,7 @@ private function loadAction($actionName, $method = NULL) {
     try {
       if (!isset($this->_actions[$actionName]) && (!$this->_actionsToGet || in_array($actionName, $this->_actionsToGet))) {
         $action = \Civi\API\Request::create($this->getEntityName(), $actionName, ['version' => 4]);
-        if (is_object($action)) {
+        if (is_object($action) && (!$this->checkPermissions || $action->isAuthorized())) {
           $this->_actions[$actionName] = ['name' => $actionName];
           if ($this->_isFieldSelected('description', 'comment', 'see')) {
             $vars = ['entity' => $this->getEntityName(), 'action' => $actionName];