From 82edd2a37bde6f42f5ff69c1363c5dbeb3cec599 Mon Sep 17 00:00:00 2001 From: Tim Almdal Date: Mon, 17 Aug 2009 19:52:40 -0700 Subject: This patch adds some security to the organize dialog. 1) If images are dragged from the content pane and dropped on a branch in the tree that the user only has view priviledges, then the drop is cancelled and the images are reverted. 2) The user cannot click on a branch, to which they only have view priviledges, the content pane does not change to the new album --- modules/organize/controllers/organize.php | 1 + 1 file changed, 1 insertion(+) (limited to 'modules/organize/controllers') diff --git a/modules/organize/controllers/organize.php b/modules/organize/controllers/organize.php index 7d6b651e..76a22b73 100644 --- a/modules/organize/controllers/organize.php +++ b/modules/organize/controllers/organize.php @@ -118,6 +118,7 @@ class Organize_Controller extends Controller { $v->album = $item; $keys = array_keys($parents); $v->selected = end($keys) == $item->id; + $v->can_edit= access::can("edit", $item); $v->children = array(); $v->album_icon = "gBranchEmpty"; -- cgit v1.2.3