From: Tim Düsterhus <duesterhus@woltlab.com>
Date: Fri, 12 Feb 2021 14:46:44 +0000 (+0100)
Subject: Bind exportMailAddress bulk process to `canEditMailAddress` instead of `canMailUser`
X-Git-Tag: 5.3.5~22^2
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=b17cfdaf7cff17d14270f657ceb80c27c4c057e3;p=GitHub%2FWoltLab%2FWCF.git

Bind exportMailAddress bulk process to `canEditMailAddress` instead of `canMailUser`

Unfortunately the `permissions` form a logical disjunction, not a conjunction,
thus we can't check both permissions. The `canEditMailAddress` is more fitting,
because even without `canMailUser` the admin could simply look up all users
manually if they are allowed to edit (and thus see) mail addresses. It's just a
larger effort.

Resolves #3963
---

diff --git a/com.woltlab.wcf/objectType.xml b/com.woltlab.wcf/objectType.xml
index 83c353b2af..50c20e882a 100644
--- a/com.woltlab.wcf/objectType.xml
+++ b/com.woltlab.wcf/objectType.xml
@@ -1246,7 +1246,7 @@
 			<definitionname>com.woltlab.wcf.bulkProcessing.user.action</definitionname>
 			<classname>wcf\system\bulk\processing\user\ExportMailAddressUserBulkProcessingAction</classname>
 			<action>exportMailAddress</action>
-			<permissions>admin.user.canMailUser</permissions>
+			<permissions>admin.user.canEditMailAddress</permissions>
 		</type>
 		<!-- /user bulk processing actions -->
 		<!-- user bulk processing conditions -->