diff --git a/modules/member/member.controller.php b/modules/member/member.controller.php index 9d5dc34b5..8f1456edb 100644 --- a/modules/member/member.controller.php +++ b/modules/member/member.controller.php @@ -120,6 +120,8 @@ class memberController extends member */ function procMemberScrapDocument() { + $oModuleModel = &getModel('module'); + // Check login information if(!Context::get('is_logged')) return new Object(-1, 'msg_not_logged'); $logged_info = Context::get('logged_info'); @@ -137,6 +139,13 @@ class memberController extends member return new Object(-1, 'msg_is_secret'); } + // 모듈 권한 확인 + $grant = $oModuleModel->getGrant($oModuleModel->getModuleInfoByModuleSrl($oDocument->get('module_srl')), $logged_info); + if(!$grant->access) + { + return new Object(-1, 'msg_not_permitted'); + } + // Variables $args = new stdClass(); $args->document_srl = $document_srl;