also check for access on document content

This commit is contained in:
Uwe Steinmann 2017-07-05 10:48:24 +02:00
parent bdcf9d8e93
commit c6f7b03700

View File

@ -78,11 +78,17 @@ foreach($tmprevs as $rev) {
if($rev['type'] == 0) {
$ruser = $dms->getUser($rev['required']);
$mode = $doc->getAccessMode($ruser);
$content = $doc->getContentByVersion($rev['version']);
$cmode = $content->getAccessMode($ruser);
} elseif($rev['type'] == 1) {
$rgroup = $dms->getGroup($rev['required']);
$mode = $doc->getGroupAccessMode($rgroup);
$cmode = M_READ;
}
if($mode < M_READ)
/* Caution: $content->getAccessMode($ruser) doesn't work as it uses the role
* restrictions of the currently logged in user
*/
if($mode < M_READ || $cmode < M_READ)
$docsinrevision[] = $doc;
}
}
@ -93,11 +99,17 @@ foreach($tmprevs as $rev) {
if($rev['type'] == 0) {
$ruser = $dms->getUser($rev['required']);
$mode = $doc->getAccessMode($ruser);
$content = $doc->getContentByVersion($rev['version']);
$cmode = $content->getAccessMode($ruser);
} elseif($rev['type'] == 1) {
$rgroup = $dms->getGroup($rev['required']);
$mode = $doc->getGroupAccessMode($rgroup);
$cmode = M_READ;
}
if($mode < M_READ)
/* Caution: $content->getAccessMode($ruser) doesn't work as it uses the role
* restrictions of the currently logged in user
*/
if($mode < M_READ || $cmode < M_READ)
$docsinreception[] = $doc;
}
}