From 31f0839f9b7c64707a88636e49840c196742768b Mon Sep 17 00:00:00 2001
From: Bharat Mediratta <bharat@menalto.com>
Date: Sun, 10 May 2009 20:02:40 +0000
Subject: Don't provide full-size link if the user can't see the full size
 image.  There's no security hole here, it's just a bad user experience.

---
 themes/default/views/photo.html.php | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/themes/default/views/photo.html.php b/themes/default/views/photo.html.php
index fef0fa07..ab46a528 100644
--- a/themes/default/views/photo.html.php
+++ b/themes/default/views/photo.html.php
@@ -26,8 +26,13 @@
 
   <div id="gPhoto">
     <?= $theme->resize_top($item) ?>
+    <? if (access::can("view_full", $item)): ?>
     <a href="#" class="gFullSizeLink" title="<?= t("View full size") ?>">
-<?= $item->resize_tag(array("id" => "gPhotoId-{$item->id}", "class" => "gResize")) ?></a>
+      <? endif ?>
+      <?= $item->resize_tag(array("id" => "gPhotoId-{$item->id}", "class" => "gResize")) ?>
+      <? if (access::can("view_full", $item)): ?>
+    </a>
+    <? endif ?>
     <?= $theme->resize_bottom($item) ?>
   </div>
 
-- 
cgit v1.2.3