From 8ba5ea3cf832f42e93e98c3b984962ace3abf2d1 Mon Sep 17 00:00:00 2001
From: Bharat Mediratta <bharat@menalto.com>
Date: Sat, 13 Dec 2008 19:49:33 +0000
Subject: Make sure that access::can fails if the item is not loaded

---
 core/helpers/access.php | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'core/helpers')

diff --git a/core/helpers/access.php b/core/helpers/access.php
index f3880b89..3fb7548d 100644
--- a/core/helpers/access.php
+++ b/core/helpers/access.php
@@ -99,6 +99,10 @@ class access_Core {
    * @return boolean
    */
   public static function can($perm_name, $item) {
+    if (!$item->loaded) {
+      return false;
+    }
+
     if ($perm_name == "view") {
       $resource = $item;
     } else {
-- 
cgit v1.2.3