Duh... when I added user_can, I passed in the user, but still used the groups from the session

1 files changed, 2 insertions, 2 deletions

diff --git a/modules/gallery/helpers/access.php b/modules/gallery/helpers/access.php
index 224b51e0..65316a8a 100644
--- a/modules/gallery/helpers/access.php
+++ b/modules/gallery/helpers/access.php
@@ -100,8 +100,8 @@ class access_Core {
 
     $resource = $perm_name == "view" ?
       $item : model_cache::get("access_cache", $item->id, "item_id");
-    foreach (user::group_ids() as $id) {
-      if ($resource->__get("{$perm_name}_$id") === self::ALLOW) {
+    foreach ($user->groups as $group) {
+      if ($resource->__get("{$perm_name}_{$group->id}") === self::ALLOW) {
         return true;
       }
     }