diff --git a/modules/file/file.controller.php b/modules/file/file.controller.php index 6c27cea0f..146e5a76d 100644 --- a/modules/file/file.controller.php +++ b/modules/file/file.controller.php @@ -160,6 +160,8 @@ class fileController extends file { $oFileModel = getModel('file'); + if(isset($this->grant->access) && $this->grant->access !== true) return new Object(-1, 'msg_not_permitted'); + $file_srl = Context::get('file_srl'); $sid = Context::get('sid'); $logged_info = Context::get('logged_info');