Prototype access control model. There's much left to do, but it's a

working implementation.

1 files changed, 1 insertions, 2 deletions

diff --git a/core/controllers/items.php b/core/controllers/items.php
index 26b55492..6cf27fbf 100644
--- a/core/controllers/items.php
+++ b/core/controllers/items.php
@@ -99,11 +99,10 @@ class Items_Controller extends REST_Controller {
     // 1) Add security checks
     $parent = $item->parent();
     if ($parent->id) {
+      module::event("{$item->type}_before_delete", $item);
       $item->delete();
     }
 
-    module::event("{$item->type}_deleted", $item);
-
     url::redirect("{$parent->type}s/{$parent->id}");
   }