From 390a653b94e038e3d9a66ca706636d59d9168d03 Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Fri, 3 Mar 2017 14:10:03 +0100
Subject: [PATCH] do not show 'AddFile' link if access is not allowed

---
 views/bootstrap/class.ViewDocument.php | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/views/bootstrap/class.ViewDocument.php b/views/bootstrap/class.ViewDocument.php
index 45071990e..9e2cf283f 100644
--- a/views/bootstrap/class.ViewDocument.php
+++ b/views/bootstrap/class.ViewDocument.php
@@ -1524,8 +1524,10 @@ class SeedDMS_View_ViewDocument extends SeedDMS_Bootstrap_Style {
 		}
 		else printMLText("no_attached_files");
 
-		if ($document->getAccessMode($user) >= M_READWRITE){
-			print "<ul class=\"unstyled\"><li>".$this->html_link('AddFile', array('documentid'=>$documentid), array('class'=>'btn'), getMLText("add"), false, true)."</li></ul>\n";
+		if($this->check_access('AddFile')) {
+			if ($document->getAccessMode($user) >= M_READWRITE){
+				print "<ul class=\"unstyled\"><li>".$this->html_link('AddFile', array('documentid'=>$documentid), array('class'=>'btn'), getMLText("add"), false, true)."</li></ul>\n";
+			}
 		}
 		$this->contentContainerEnd();
 ?>