Apply permissions on Exposed Image Argument/Views for ML

esmero · Jun 20, 2024 · 9e26bda · 9e26bda
1 parent adc699b
commit 9e26bda
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/Plugin/views/argument/StrawberryRunnersMLImageArgument.php b/src/Plugin/views/argument/StrawberryRunnersMLImageArgument.php
@@ -316,6 +316,10 @@ public function setArgument($arg) {
 
 
     public function query($group_by = FALSE) {
+        // if the User has not this permission simply return as nothing was sent.
+        if ($this->currentUser->isAnonymous() || (!$this->currentUser->hasPermission('execute Image ML queries') && !$this->currentUser->hasRole('administrator'))) {
+          return;
+        }
         $this->argument_validated;
         if (empty($this->expanded_argument) || ! $this->query) {
             // basically not validated, not present as a value and also someone cancelled/nuklled the query before?