Fix #1599 카테고리 권한을 검사하지 않던 문제 고침

This commit is contained in:
BJRambo 2021-02-03 20:05:45 +09:00
parent 02499c5a2a
commit 04147e7606

View file

@ -800,6 +800,11 @@ class documentController extends document
{
$category_list = DocumentModel::getCategoryList($obj->module_srl);
if(!$category_list[$obj->category_srl]) $obj->category_srl = 0;
if(!$category_list[$obj->category_srl]->grant)
{
return new BaseObject(-1, 'msg_not_permitted');
}
}
// Change the update order