Check view permissions before allowing view access to albums/photos.

1 files changed, 5 insertions, 2 deletions

diff --git a/core/helpers/access.php b/core/helpers/access.php
index f4e98082..c21583a8 100644
--- a/core/helpers/access.php
+++ b/core/helpers/access.php
@@ -102,12 +102,15 @@ class access_Core {
         throw new Exception("@todo MISSING_ACCESS for $item_id");
       }
 
+      if ($access->view_0 == self::ALLOW) {
+        return true;
+      }
       foreach ($user->groups as $group) {
         if ($access->__get("{$perm_name}_{$group->id}") === self::ALLOW) {
-          return self::ALLOW;
+          return true;
         }
       }
-      return self::DENY;
+      return false;
     } else {
       return self::group_can(group::EVERYBODY, $perm_name, $item_id);
     }