Fix subuser permission checks to use resolved customer context
This commit is contained in:
@@ -356,7 +356,7 @@ trait route_t
|
||||
if ($cached !== null) {
|
||||
self::$__perm_subuser_grant_cache[$cacheKey] = $cached;
|
||||
} else {
|
||||
$subuser_has_permission = $subuser->hasPermission($permission->subusers_node_key);
|
||||
$subuser_has_permission = $subuser->hasPermission($permission->subusers_node_key, (int)$resolvedCustomer);
|
||||
if (defined('redis')) {
|
||||
redis->cache_permission($cacheKey, $subuser_has_permission);
|
||||
}
|
||||
@@ -816,4 +816,4 @@ trait route_t
|
||||
// Check if route is the same, or if it matches the regex pattern
|
||||
return $route === $this->route || preg_match($route, $this->route);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user