[Web] Allow to select aliases for BCC

2021-06-03 08:00:59 +02:00
parent 1bad74101f
commit 735bcb2f55
3 changed files with 21 additions and 5 deletions
--- a/data/web/inc/functions.inc.php
+++ b/data/web/inc/functions.inc.php
@@ -949,6 +949,9 @@ function user_get_alias_details($username) {
  if (!filter_var($username, FILTER_VALIDATE_EMAIL)) {
    return false;
  }
+  if (!hasMailboxObjectAccess($username, $_SESSION['mailcow_cc_role'], $username)) {
+    return false;
+  }
  $data['address'] = $username;
  $stmt = $pdo->prepare("SELECT `address` AS `shared_aliases`, `public_comment` FROM `alias`
    WHERE `goto` REGEXP :username_goto