bitPickups/friendica_2021.01_tupambae_shared_hosting
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Merge pull request #2631 from rabuzarus/1906-event-test

Browse source 
cal export && public calendar - fix permissions
This commit is contained in:
Michael Vogel 2016-06-23 23:24:27 +02:00 • committed by GitHub
commit eabf8734a8
2 changed files with 26 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

9
mod/cal.php
View file

@ -153,7 +153,10 @@ function cal_content(&$a) {
return;
}
$sql_extra = item_permissions_sql($owner_uid,$remote_contact,$groups);
// get the permissions
$sql_perms = item_permissions_sql($owner_uid,$remote_contact,$groups);
// we only want to have the events of the profile owner
$sql_extra = " AND `event`.`cid` = 0 " . $sql_perms;
// get the tab navigation bar
$tabs .= profile_tabs($a,false, $a->data['user']['nickname']);
@ -299,7 +302,9 @@ function cal_content(&$a) {
return;
}
if(! (feature_enabled($owner_uid, "export_calendar"))) {
// Test permissions
// Respect the export feature setting for all other /cal pages if it's not the own profile
if( ((local_user() !== $owner_uid)) && ! feature_enabled($owner_uid, "export_calendar")) {
notice( t('Permission denied.') . EOL);
return;
}