summaryrefslogtreecommitdiff
path: root/modules/server_add/helpers/server_add_task.php
diff options
context:
space:
mode:
authorBharat Mediratta <bharat@menalto.com>2009-05-13 18:03:50 +0000
committerBharat Mediratta <bharat@menalto.com>2009-05-13 18:03:50 +0000
commitc52a231bc08558077788601cbd8a97cd514f1a63 (patch)
tree57e9e445ea2824d40405244d13b2fc5c919587a6 /modules/server_add/helpers/server_add_task.php
parent5c40669fd7b5a2b89d8e8dfb283c2703d0979d49 (diff)
Create a new "add" permission and require it at the controller level
when adding photos/movies/albums
Diffstat (limited to 'modules/server_add/helpers/server_add_task.php')
-rw-r--r--modules/server_add/helpers/server_add_task.php1
1 files changed, 1 insertions, 0 deletions
diff --git a/modules/server_add/helpers/server_add_task.php b/modules/server_add/helpers/server_add_task.php
index 3ed770e8..e3e22ab4 100644
--- a/modules/server_add/helpers/server_add_task.php
+++ b/modules/server_add/helpers/server_add_task.php
@@ -32,6 +32,7 @@ class server_add_task_Core {
$file = $context["files"][$path][$context["position"]];
$parent = ORM::factory("item", $file["parent_id"]);
access::required("server_add", $parent);
+ access::required("add", $parent);
if (!$parent->is_album()) {
throw new Exception("@todo BAD_ALBUM");
}