Index: core/units/configuration/configuration_event_handler.php IDEA additional info: Subsystem: com.intellij.openapi.diff.impl.patch.CharsetEP <+>UTF-8 =================================================================== --- core/units/configuration/configuration_event_handler.php (revision 15716) +++ core/units/configuration/configuration_event_handler.php (revision ) @@ -478,12 +478,6 @@ */ protected function OnSuggestValues(kEvent $event) { - if ( !$this->Application->isAdminUser ) { - // very careful here, because this event allows to - // view every object field -> limit only to logged-in admins - return; - } - $event->status = kEvent::erSTOP; $field = $this->Application->GetVar('field'); \ No newline at end of file Index: core/kernel/db/db_event_handler.php IDEA additional info: Subsystem: com.intellij.openapi.diff.impl.patch.CharsetEP <+>UTF-8 =================================================================== --- core/kernel/db/db_event_handler.php (revision 15733) +++ core/kernel/db/db_event_handler.php (revision ) @@ -83,10 +83,6 @@ $this->Application->LinkVar('m_cat_id'); } - if ( $event->Name == 'OnSaveWidths' ) { - return $this->Application->isAdminUser; - } - return parent::CheckPermission($event); } @@ -104,7 +100,7 @@ $permissions = Array ( 'OnLoad' => Array ('self' => 'view', 'subitem' => 'view'), 'OnItemBuild' => Array ('self' => 'view', 'subitem' => 'view'), - 'OnSuggestValues' => Array ('self' => 'view', 'subitem' => 'view'), + 'OnSuggestValues' => Array ('self' => 'admin', 'subitem' => 'admin'), 'OnBuild' => Array ('self' => true), @@ -168,7 +164,7 @@ 'OnDeleteFile' => Array ('self' => true, 'subitem' => true), 'OnViewFile' => Array ('self' => true, 'subitem' => true), - 'OnSaveWidths' => Array ('self' => true, 'subitem' => true), + 'OnSaveWidths' => Array ('self' => 'admin', 'subitem' => 'admin'), 'OnValidateMInputFields' => Array ('self' => 'view'), 'OnValidateField' => Array ('self' => true, 'subitem' => true), @@ -3463,12 +3459,6 @@ */ protected function OnSuggestValues(kEvent $event) { - if ( !$this->Application->isAdminUser ) { - // very careful here, because this event allows to - // view every object field -> limit only to logged-in admins - return; - } - $event->status = kEvent::erSTOP; $field = $this->Application->GetVar('field'); \ No newline at end of file