From 107996918e002dc71992e35940f0f5ba6f81fb77 Mon Sep 17 00:00:00 2001
From: conory <conorycom@gmail.com>
Date: Tue, 19 Apr 2016 22:02:28 +0900
Subject: [PATCH] =?UTF-8?q?=EB=B9=84=EB=B0=80=EA=B8=80=EC=9D=BC=20?=
 =?UTF-8?q?=EA=B2=BD=EC=9A=B0=EC=97=90=EB=8F=84=20=EC=A0=81=EC=9A=A9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 classes/module/ModuleHandler.class.php | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/classes/module/ModuleHandler.class.php b/classes/module/ModuleHandler.class.php
index d8581b0dc..7206adc91 100644
--- a/classes/module/ModuleHandler.class.php
+++ b/classes/module/ModuleHandler.class.php
@@ -207,6 +207,17 @@ class ModuleHandler extends Handler
 				{
 					unset($module_info);
 				}
+				
+				// if the secret document permission does not have, specify HTTP 403
+				if(Context::getRequestMethod() == 'GET')
+				{
+					$oDocumentModel = getModel('document');
+					$oDocument = $oDocumentModel->getDocument($this->document_srl);
+					if($oDocument->isSecret() && !$oDocument->isGranted())
+					{
+						$this->httpStatusCode = '403';
+					}
+				}
 			}
 		}
 
@@ -1050,6 +1061,12 @@ class ModuleHandler extends Handler
 			}
 		}
 		
+		// Set http status code
+		if($this->httpStatusCode && (!$oModule->getHttpStatusCode() || $oModule->getHttpStatusCode() == '200'))
+		{
+			$oModule->setHttpStatusCode($this->httpStatusCode);
+		}
+		
 		// Set http status message
 		self::_setHttpStatusMessage($oModule->getHttpStatusCode());