gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-05-09 13:06:14 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

also check for access on document content

Browse Source
This commit is contained in:
Uwe Steinmann 2017-07-05 10:48:24 +02:00
parent bdcf9d8e93
commit c6f7b03700
1 changed files with 14 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
out/out.ObjectCheck.php
View File

@ -78,11 +78,17 @@ foreach($tmprevs as $rev) {
if($rev['type'] == 0) { if($rev['type'] == 0) {
$ruser = $dms->getUser($rev['required']); $ruser = $dms->getUser($rev['required']);
$mode = $doc->getAccessMode($ruser); $mode = $doc->getAccessMode($ruser);
$content = $doc->getContentByVersion($rev['version']);
$cmode = $content->getAccessMode($ruser);
} elseif($rev['type'] == 1) { } elseif($rev['type'] == 1) {
$rgroup = $dms->getGroup($rev['required']); $rgroup = $dms->getGroup($rev['required']);
$mode = $doc->getGroupAccessMode($rgroup); $mode = $doc->getGroupAccessMode($rgroup);
$cmode = M_READ;
} }
if($mode < M_READ) /* Caution: $content->getAccessMode($ruser) doesn't work as it uses the role
* restrictions of the currently logged in user
*/
if($mode < M_READ || $cmode < M_READ)
$docsinrevision[] = $doc; $docsinrevision[] = $doc;
} }
} }
@ -93,11 +99,17 @@ foreach($tmprevs as $rev) {
if($rev['type'] == 0) { if($rev['type'] == 0) {
$ruser = $dms->getUser($rev['required']); $ruser = $dms->getUser($rev['required']);
$mode = $doc->getAccessMode($ruser); $mode = $doc->getAccessMode($ruser);
$content = $doc->getContentByVersion($rev['version']);
$cmode = $content->getAccessMode($ruser);
} elseif($rev['type'] == 1) { } elseif($rev['type'] == 1) {
$rgroup = $dms->getGroup($rev['required']); $rgroup = $dms->getGroup($rev['required']);
$mode = $doc->getGroupAccessMode($rgroup); $mode = $doc->getGroupAccessMode($rgroup);
$cmode = M_READ;
} }
if($mode < M_READ) /* Caution: $content->getAccessMode($ruser) doesn't work as it uses the role
* restrictions of the currently logged in user
*/
if($mode < M_READ || $cmode < M_READ)
$docsinreception[] = $doc; $docsinreception[] = $doc;
} }
} }