From 586de9f63b72f492256d088875a8473c7de2fcfc Mon Sep 17 00:00:00 2001
From: Alexander Ebert <ebert@woltlab.com>
Date: Tue, 30 Jan 2018 18:04:35 +0100
Subject: [PATCH] Check permissions before displaying the "send mail" link

---
 wcfsetup/install/files/acp/templates/userList.tpl | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/wcfsetup/install/files/acp/templates/userList.tpl b/wcfsetup/install/files/acp/templates/userList.tpl
index 6c22233477..6f603a9143 100644
--- a/wcfsetup/install/files/acp/templates/userList.tpl
+++ b/wcfsetup/install/files/acp/templates/userList.tpl
@@ -114,7 +114,9 @@
 									{event name='dropdownItems'}
 									
 									{if $user->userID !== $__wcf->user->userID}
-										<li><a href="{link controller='UserMail' id=$user->userID}{/link}">{lang}wcf.acp.user.action.sendMail{/lang}</a></li>
+										{if $__wcf->session->getPermission('admin.user.canMailUser')}
+											<li><a href="{link controller='UserMail' id=$user->userID}{/link}">{lang}wcf.acp.user.action.sendMail{/lang}</a></li>
+										{/if}
 										
 										{if $user->accessible && $__wcf->session->getPermission('admin.user.canEditPassword')}
 											<li><a href="#" class="jsSendNewPassword">{lang}wcf.acp.user.action.sendNewPassword{/lang}</a></li>
-- 
2.20.1