From c52a231bc08558077788601cbd8a97cd514f1a63 Mon Sep 17 00:00:00 2001 From: Bharat Mediratta Date: Wed, 13 May 2009 18:03:50 +0000 Subject: Create a new "add" permission and require it at the controller level when adding photos/movies/albums --- modules/server_add/controllers/server_add.php | 1 + 1 file changed, 1 insertion(+) (limited to 'modules/server_add/controllers/server_add.php') diff --git a/modules/server_add/controllers/server_add.php b/modules/server_add/controllers/server_add.php index 8d3986b0..7cb9a9e2 100644 --- a/modules/server_add/controllers/server_add.php +++ b/modules/server_add/controllers/server_add.php @@ -23,6 +23,7 @@ class Server_Add_Controller extends Controller { $item = ORM::factory("item", $id); access::required("server_add", $item); + access::required("add", $item); $view = new View("server_add_tree_dialog.html"); $view->action = url::site("__ARGS__/{$id}__TASK_ID__?csrf=" . access::csrf_token()); -- cgit v1.2.3