Jingga/oms-News
1
0
Fork 0
mirror of https://github.com/Karaka-Management/oms-News.git synced 2026-01-29 16:48:40 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix permission condition

Browse Source
This commit is contained in:
Dennis Eichhorn 2017-09-16 11:47:52 +02:00
parent 515a2ab746
commit 091913de60
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Controller.php
View File

@ -150,8 +150,8 @@ class Controller extends ModuleAbstract implements WebInterface
$article = NewsArticleMapper::get((int) $request->getData('id'));
$accountId = $request->getHeader()->getAccount();
if (!$article->getCreatedBy()->getId() === $accountId
|| !$this->app->accountManager->get($accountId)->hasPermission(
if ($article->getCreatedBy()->getId() !== $accountId
&& !$this->app->accountManager->get($accountId)->hasPermission(
PermissionType::READ, 1, $this->app->appName, self::MODULE_ID, PermissionState::ARTICLE, $article->getId())
) {
$view->setTemplate('/Web/Backend/Error/403_inline');