Restrict addGrant() to current request only

This commit is contained in:
Kijin Sung 2017-03-02 23:24:28 +09:00
parent e4fe2430d3
commit 9143493f13
6 changed files with 22 additions and 14 deletions

View file

@ -255,7 +255,11 @@ class commentController extends comment
*/ */
function addGrant($comment_srl) function addGrant($comment_srl)
{ {
$_SESSION['own_comment'][$comment_srl] = TRUE; $comment = getModel('comment')->getComment($comment_srl);
if ($comment->isExists())
{
$comment->setGrant();
}
} }
/** /**
@ -568,18 +572,18 @@ class commentController extends comment
} }
} }
// grant autority of the comment
if(!$manual_inserted)
{
$this->addGrant($obj->comment_srl);
}
// call a trigger(after) // call a trigger(after)
ModuleHandler::triggerCall('comment.insertComment', 'after', $obj); ModuleHandler::triggerCall('comment.insertComment', 'after', $obj);
// commit // commit
$oDB->commit(); $oDB->commit();
// grant autority of the comment
if(!$manual_inserted)
{
$this->addGrant($obj->comment_srl);
}
if(!$manual_inserted) if(!$manual_inserted)
{ {
// send a message if notify_message option in enabled in the original article // send a message if notify_message option in enabled in the original article

View file

@ -93,7 +93,7 @@ class commentItem extends Object
function isGranted() function isGranted()
{ {
if($_SESSION['own_comment'][$this->comment_srl]) if($_SESSION['granted_comment'][$this->comment_srl])
{ {
return TRUE; return TRUE;
} }
@ -130,7 +130,7 @@ class commentItem extends Object
function setGrantForSession() function setGrantForSession()
{ {
$_SESSION['own_comment'][$this->comment_srl] = true; $_SESSION['granted_comment'][$this->comment_srl] = true;
$this->setGrant(); $this->setGrant();
} }

View file

@ -121,7 +121,7 @@ class commentModel extends comment
*/ */
function isGranted($comment_srl) function isGranted($comment_srl)
{ {
return $_SESSION['own_comment'][$comment_srl]; return $_SESSION['granted_comment'][$comment_srl];
} }
/** /**

View file

@ -331,7 +331,11 @@ class documentController extends document
*/ */
function addGrant($document_srl) function addGrant($document_srl)
{ {
$_SESSION['own_document'][$document_srl] = true; $oDocument = getModel('document')->getDocument($document_srl);
if ($oDocument->isExists())
{
$oDocument->setGrant();
}
} }
/** /**

View file

@ -162,7 +162,7 @@ class documentItem extends Object
function isGranted() function isGranted()
{ {
if ($_SESSION['own_document'][$this->document_srl]) if ($_SESSION['granted_document'][$this->document_srl])
{ {
return $this->grant_cache = true; return $this->grant_cache = true;
} }
@ -203,7 +203,7 @@ class documentItem extends Object
function setGrantForSession() function setGrantForSession()
{ {
$_SESSION['own_document'][$this->document_srl] = true; $_SESSION['granted_document'][$this->document_srl] = true;
$this->setGrant(); $this->setGrant();
} }

View file

@ -25,7 +25,7 @@ class documentModel extends document
*/ */
function isGranted($document_srl) function isGranted($document_srl)
{ {
return $_SESSION['own_document'][$document_srl]; return $_SESSION['granted_document'][$document_srl];
} }
/** /**