composer/iTop
6
0
Fork 0
mirror of https://github.com/Combodo/iTop.git synced 2026-09-19 07:59:08 +02:00
Code Issues Packages Projects Releases Wiki Activity

WIP

Browse Source
This commit is contained in:
jf-cbd
2026-09-15 17:56:57 +02:00
parent 2ac4229ee0
commit 53eb4558db
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
datamodels/2.x/itop-attachments/ajax.itop-attachment.php
View File

@@ -106,10 +106,21 @@ try {
break;
case 'remove':
$sTempId = utils::ReadParam('temp_id', '', false, 'transaction_id');
if (utils::IsTransactionValid($sTempId)) {
throw new SecurityException(Dict::S('UI:Error:InvalidToken'));
}
$iAttachmentId = utils::ReadParam('att_id', '');
$oSearch = DBObjectSearch::FromOQL("SELECT Attachment WHERE id = :id");
$oSet = new DBObjectSet($oSearch, [], ['id' => $iAttachmentId]);
// get host object related to attachment
while ($oAttachment = $oSet->Fetch()) {
$sHostClass = $oAttachment->Get('item_class');
if (!UserRights::IsActionAllowed($sHostClass, UR_ACTION_MODIFY)) {
throw new SecurityException('Caller is not allowed to delete the host.'); // TODO translate
}
}
while ($oAttachment = $oSet->Fetch()) { // if no exception happened
$oAttachment->DBDelete();
}
break;