Merge pull request #150 from AlexanderBlanchardAC/25.01.00_custom_for…

…m_permissions

25.01.00 custom form permissions

code/web/release_notes/25.01.00.MD

@@ -12,6 +12,8 @@
 //james
 
 //alexander
+### Web Builder Updates
+- When adding a form to a custom page, limit the forms displayed in the dropdown to those from the user's own library if their permissions are Administer Library Custom Forms. (*AB*)
 
 //chloe
 

code/web/services/WebBuilder/AJAX.php

@@ -61,6 +61,37 @@ function getPortalCellValuesForSource() {
 
 				$customForm = new CustomForm();
 				$customForm->orderBy('title');
+				if (!UserAccount::userHasPermission('Administer All Custom Forms')) {
+					$libraryCustomForm = new LibraryCustomForm();
+					$userLibrary = Library::getPatronHomeLibrary();
+
+					if ($userLibrary) {
+						$userLibraryId = $userLibrary->libraryId;
+						$libraryCustomForm->whereAdd('libraryId = ' . $userLibraryId);
+
+						$validCustomForms = [];
+						$libraryCustomForm->find();
+						while ($libraryCustomForm->fetch()) {
+							$validCustomForms[] = $libraryCustomForm->formId;
+						}
+
+						if (count($validCustomForms) > 0) {
+							$customForm->whereAddIn('id', $validCustomForms, true);
+						} else {
+							$result = [
+								'success' => true,
+								'values' => $list,
+							];
+							break;
+						}
+					} else {
+						$result = [
+							'success' => false,
+							'message' => 'Unable to determine the home library for this user.',
+						];
+						break;
+					}
+				}
 				$customForm->find();
 
 				while ($customForm->fetch()) {