From 7c5f50804027577aac17d0fcefedcd0d0b6ca180 Mon Sep 17 00:00:00 2001
From: Mark Wells <mark@freeside.biz>
Date: Sun, 27 Nov 2016 16:43:19 -0800
Subject: add RT ACL for bulk updating tickets, #72964

Conflicts:
	rt/lib/RT/System.pm
---
 rt/share/html/Search/Bulk.html | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'rt/share/html/Search/Bulk.html')

diff --git a/rt/share/html/Search/Bulk.html b/rt/share/html/Search/Bulk.html
index bacd96c3f..38b29fe33 100755
--- a/rt/share/html/Search/Bulk.html
+++ b/rt/share/html/Search/Bulk.html
@@ -203,6 +203,13 @@ unless ( defined $Rows ) {
 }
 my $title = loc("Update multiple tickets");
 
+#freeside
+unless ( $session{'CurrentUser'}
+         ->HasRight( Right => 'BulkUpdateTickets', Object => RT->System) )
+{
+    Abort('You are not allowed to bulk-update tickets.');
+}
+
 # Iterate through the ARGS hash and remove anything with a null value.
 map ( $ARGS{$_} =~ /^$/ && ( delete $ARGS{$_} ), keys %ARGS );
 
-- 
cgit v1.2.1