diff options
| author | Andy Staudacher <andy.st@gmail.com> | 2009-09-15 22:51:49 -0700 |
|---|---|---|
| committer | Andy Staudacher <andy.st@gmail.com> | 2009-09-15 22:51:49 -0700 |
| commit | 7608870537503ec571f45a175c8486d7945e7c63 (patch) | |
| tree | f37bc245d72541150ed65dfb5e91b32730561100 /modules/tag | |
| parent | 7ba93e264512a8a29213f680723e34007b737935 (diff) | |
Controller auth / CSRF fixes
Diffstat (limited to 'modules/tag')
| -rw-r--r-- | modules/tag/controllers/tags.php | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/modules/tag/controllers/tags.php b/modules/tag/controllers/tags.php index f4f98090..b9f2c61c 100644 --- a/modules/tag/controllers/tags.php +++ b/modules/tag/controllers/tags.php @@ -44,7 +44,8 @@ class Tags_Controller extends REST_Controller { public function _index() { // Far from perfection, but at least require view permission for the root album - access::required("view", 1); + $album = ORM::factory("item", 1); + access::required("view", $album); print tag::cloud(30); } |