mirror of
https://git.code.sf.net/p/seeddms/code
synced 2025-02-06 07:04:57 +00:00
also check for access on document content
This commit is contained in:
parent
bdcf9d8e93
commit
c6f7b03700
|
@ -78,11 +78,17 @@ foreach($tmprevs as $rev) {
|
|||
if($rev['type'] == 0) {
|
||||
$ruser = $dms->getUser($rev['required']);
|
||||
$mode = $doc->getAccessMode($ruser);
|
||||
$content = $doc->getContentByVersion($rev['version']);
|
||||
$cmode = $content->getAccessMode($ruser);
|
||||
} elseif($rev['type'] == 1) {
|
||||
$rgroup = $dms->getGroup($rev['required']);
|
||||
$mode = $doc->getGroupAccessMode($rgroup);
|
||||
$cmode = M_READ;
|
||||
}
|
||||
if($mode < M_READ)
|
||||
/* Caution: $content->getAccessMode($ruser) doesn't work as it uses the role
|
||||
* restrictions of the currently logged in user
|
||||
*/
|
||||
if($mode < M_READ || $cmode < M_READ)
|
||||
$docsinrevision[] = $doc;
|
||||
}
|
||||
}
|
||||
|
@ -93,11 +99,17 @@ foreach($tmprevs as $rev) {
|
|||
if($rev['type'] == 0) {
|
||||
$ruser = $dms->getUser($rev['required']);
|
||||
$mode = $doc->getAccessMode($ruser);
|
||||
$content = $doc->getContentByVersion($rev['version']);
|
||||
$cmode = $content->getAccessMode($ruser);
|
||||
} elseif($rev['type'] == 1) {
|
||||
$rgroup = $dms->getGroup($rev['required']);
|
||||
$mode = $doc->getGroupAccessMode($rgroup);
|
||||
$cmode = M_READ;
|
||||
}
|
||||
if($mode < M_READ)
|
||||
/* Caution: $content->getAccessMode($ruser) doesn't work as it uses the role
|
||||
* restrictions of the currently logged in user
|
||||
*/
|
||||
if($mode < M_READ || $cmode < M_READ)
|
||||
$docsinreception[] = $doc;
|
||||
}
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue
Block a user