Respect access of editor plugin inside profile form

joomla · Jun 11, 2018 · f136619 · f136619
1 parent 0c737b5
commit f136619
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 0 deletions.
diff --git a/administrator/components/com_admin/models/forms/profile.xml b/administrator/components/com_admin/models/forms/profile.xml
@@ -137,6 +137,7 @@
 				label="COM_ADMIN_USER_FIELD_EDITOR_LABEL"
 				description="COM_ADMIN_USER_FIELD_EDITOR_DESC"
 				folder="editors"
+				useaccess="1"
 				>
 				<option value="">JOPTION_USE_DEFAULT</option>
 			</field>

diff --git a/components/com_users/models/forms/frontend.xml b/components/com_users/models/forms/frontend.xml
@@ -9,6 +9,7 @@
 				label="COM_USERS_USER_FIELD_EDITOR_LABEL"
 				description="COM_USERS_USER_FIELD_EDITOR_DESC"
 				folder="editors"
+				useaccess="1"
 				>
 				<option value="">JOPTION_USE_DEFAULT</option>
 			</field>

diff --git a/libraries/joomla/form/fields/plugins.php b/libraries/joomla/form/fields/plugins.php
@@ -117,6 +117,8 @@ protected function getOptions()
 
 		if (!empty($folder))
 		{
+			$useAccess = (int) $this->element['useaccess'];
+
 			// Get list of plugins
 			$db    = JFactory::getDbo();
 			$query = $db->getQuery(true)
@@ -126,6 +128,12 @@ protected function getOptions()
 				->where('enabled = 1')
 				->order('ordering, name');
 
+			if ($useAccess)
+			{
+				$groups = implode(',', JFactory::getUser()->getAuthorisedViewLevels());
+				$query->where('access IN (' . $groups . ')');
+			}
+
 			$options   = $db->setQuery($query)->loadObjectList();
 			$lang      = JFactory::getLanguage();
 			$useGlobal = $this->element['useglobal'];