standaloneusers - allow users with cms:administer users pass ACL chec…

…k for User.sendPasswordResetEmail
ufundo · Dec 4, 2024 · dce0f6d · dce0f6d
1 parent 31890cb
commit dce0f6d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/ext/standaloneusers/CRM/Standaloneusers/BAO/User.php b/ext/standaloneusers/CRM/Standaloneusers/BAO/User.php
@@ -37,6 +37,9 @@ public static function self_civi_api4_authorizeRecord(AuthorizeRecordEvent $e):
     elseif ($action === 'create') {
       $e->setAuthorized($mayAdminUsers);
     }
+    elseif ($action === 'sendPasswordResetEmail') {
+      $e->setAuthorized($mayAdminUsers);
+    }
     else {
       // Is there another write action we don't know about? If so, play it safe and say No.
       $e->setAuthorized(FALSE);