fix #2106 모듈 접근 권한이 없을 때 게시물을 스크랩할 수 있는 문제 고침

This commit is contained in:
bnu 2017-06-09 15:25:50 +09:00 committed by Kijin Sung
parent 9f632f2087
commit 007639ff84

View file

@ -120,6 +120,8 @@ class memberController extends member
*/
function procMemberScrapDocument()
{
$oModuleModel = &getModel('module');
// Check login information
if(!Context::get('is_logged')) return new Object(-1, 'msg_not_logged');
$logged_info = Context::get('logged_info');
@ -137,6 +139,13 @@ class memberController extends member
return new Object(-1, 'msg_is_secret');
}
// 모듈 권한 확인
$grant = $oModuleModel->getGrant($oModuleModel->getModuleInfoByModuleSrl($oDocument->get('module_srl')), $logged_info);
if(!$grant->access)
{
return new Object(-1, 'msg_not_permitted');
}
// Variables
$args = new stdClass();
$args->document_srl = $document_srl;