From c52a231bc08558077788601cbd8a97cd514f1a63 Mon Sep 17 00:00:00 2001 From: Bharat Mediratta Date: Wed, 13 May 2009 18:03:50 +0000 Subject: Create a new "add" permission and require it at the controller level when adding photos/movies/albums --- modules/server_add/helpers/server_add_task.php | 1 + 1 file changed, 1 insertion(+) (limited to 'modules/server_add/helpers/server_add_task.php') diff --git a/modules/server_add/helpers/server_add_task.php b/modules/server_add/helpers/server_add_task.php index 3ed770e8..e3e22ab4 100644 --- a/modules/server_add/helpers/server_add_task.php +++ b/modules/server_add/helpers/server_add_task.php @@ -32,6 +32,7 @@ class server_add_task_Core { $file = $context["files"][$path][$context["position"]]; $parent = ORM::factory("item", $file["parent_id"]); access::required("server_add", $parent); + access::required("add", $parent); if (!$parent->is_album()) { throw new Exception("@todo BAD_ALBUM"); } -- cgit v1.2.3