Fixed issue #7225: Data entry screen without the privilege of reading…

… responses.
LimeSurvey · Jan 29, 2013 · 33776e5 · 33776e5
1 parent dcf048f
commit 33776e5
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/application/controllers/admin/dataentry.php b/application/controllers/admin/dataentry.php
@@ -1527,7 +1527,7 @@ public function insert()
         'clang' => $clang
         );
 
-        if (hasSurveyPermission($surveyid, 'responses','read'))
+        if (hasSurveyPermission($surveyid, 'responses','create'))
         {
             if ($subaction == "insert" && hasSurveyPermission($surveyid,'responses','create'))
             {
@@ -1906,7 +1906,7 @@ public function view($surveyid, $lang=NULL)
         if(isset($lang)) $lang=sanitize_languagecode($lang);
         $aViewUrls = array();
 
-        if (hasSurveyPermission($surveyid, 'responses', 'read'))
+        if (hasSurveyPermission($surveyid, 'responses', 'create'))
         {
             $clang = Yii::app()->lang;
 

diff --git a/application/views/admin/dataentry/insert.php b/application/views/admin/dataentry/insert.php
@@ -81,7 +81,7 @@
         <input type='submit' value='<?php $clang->eT("Return to survey administration"); ?>' onclick="window.open('<?php echo $this->createUrl('admin/survey/sa/view/surveyid/'.$surveyid); ?>', '_top')" />
         <br /><br />
 
-        <?php if(isset($thisid)): ?>
+        <?php if(isset($thisid) && hasSurveyPermission($surveyid, 'responses','read')): ?>
 			<input type='submit' value='<?php $clang->eT("View this record"); ?>' onclick="window.open('<?php echo $this->createUrl('/admin/responses/sa/action/surveyid/'.$surveyid.'/id/'.$thisid); ?>', '_top')" />
 			<br /><br />
         <?php endif; ?>