getNoteDetails: checkIssuePermissions

eventum · May 26, 2020 · 42f75f5 · 42f75f5
1 parent b11f30b
commit 42f75f5
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/RPC/RemoteApi.php b/src/RPC/RemoteApi.php
@@ -707,6 +707,8 @@ public function getNoteDetails($note_id, $fields)
             throw new RemoteApiException($e->getMessage(), $e->getCode(), $e);
         }
 
+        $this->checkIssuePermissions($note['not_iss_id']);
+
         if ($fields) {
             $note = $this->filterKeys($note, $fields);
         }
@@ -1386,7 +1388,7 @@ private static function getRemoteAssocListByUser($usr_id, $only_customer_project
      * @param int $issue_id
      * @since 3.2.2
      */
-    private function checkIssuePermissions($issue_id)
+    private function checkIssuePermissions(int $issue_id): void
     {
         $projects = $this->getUserAssignedProjects(false);
         $details = $this->getIssueDetails($issue_id);