From 725decf43a893cb8b007b1c86ceeb08db49e77a3 Mon Sep 17 00:00:00 2001
From: Dave MacFarlane <driusan@gmail.com>
Date: Mon, 17 Oct 2011 10:32:23 -0400
Subject: [PATCH] Fixed access profile bug (Redmine: #2432)

---
 php/libraries/NDB_Menu_Filter_candidate_list.class.inc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/php/libraries/NDB_Menu_Filter_candidate_list.class.inc b/php/libraries/NDB_Menu_Filter_candidate_list.class.inc
index 8eb11e931e4..cee8c1bf38d 100644
--- a/php/libraries/NDB_Menu_Filter_candidate_list.class.inc
+++ b/php/libraries/NDB_Menu_Filter_candidate_list.class.inc
@@ -47,6 +47,10 @@ class NDB_Menu_Filter_candidate_list extends NDB_Menu_Filter
         $this->query = " FROM psc, candidate LEFT JOIN session ON candidate.CandID = session.CandID AND session.Cancelled = 'N' AND session.Active = 'Y'
          LEFT JOIN feedback_bvl_thread ON (candidate.CandID=feedback_bvl_thread.CandID)
         WHERE candidate.CenterID = psc.CenterID AND candidate.Entity_type = 'Human' AND candidate.Cancelled = 'N' AND candidate.Active = 'Y' ";
+        $user =& User::singleton();
+        if (!$user->hasPermission('access_all_profiles')) {
+            $this->query .= " AND candidate.CenterID=" . $user->getCenterID();
+        }
         
         $this->group_by = 'candidate.CandID';
         $this->order_by = 'psc.Name, candidate.CandID DESC, session.VisitNo';