From 9739b72bf8fb873160f9ac2d4c5ee31a74da8d77 Mon Sep 17 00:00:00 2001
From: bnu <bnufactory@gmail.com>
Date: Wed, 24 May 2017 13:59:00 +0900
Subject: [PATCH] =?UTF-8?q?fix=20#2091=20=EA=B6=8C=ED=95=9C=EC=9D=B4=20?=
 =?UTF-8?q?=EC=97=86=EB=8A=94=20=EB=B9=84=EB=B0=80=EA=B8=80=EC=9D=84=20?=
 =?UTF-8?q?=EC=8A=A4=ED=81=AC=EB=9E=A9=ED=95=A0=20=EC=88=98=20=EC=97=86?=
 =?UTF-8?q?=EB=8F=84=EB=A1=9D=20=EA=B3=A0=EC=B9=A8?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 modules/member/member.controller.php | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/modules/member/member.controller.php b/modules/member/member.controller.php
index f62881fe6..9d5dc34b5 100644
--- a/modules/member/member.controller.php
+++ b/modules/member/member.controller.php
@@ -127,9 +127,16 @@ class memberController extends member
 		$document_srl = (int)Context::get('document_srl');
 		if(!$document_srl) $document_srl = (int)Context::get('target_srl');
 		if(!$document_srl) return new Object(-1,'msg_invalid_request');
+
 		// Get document
 		$oDocumentModel = getModel('document');
 		$oDocument = $oDocumentModel->getDocument($document_srl);
+
+		if($oDocument->isSecret() && !$oDocument->isGranted())
+		{
+			return new Object(-1, 'msg_is_secret');
+		}
+
 		// Variables
 		$args = new stdClass();
 		$args->document_srl = $document_srl;
@@ -139,9 +146,11 @@ class memberController extends member
 		$args->nick_name = $oDocument->get('nick_name');
 		$args->target_member_srl = $oDocument->get('member_srl');
 		$args->title = $oDocument->get('title');
+
 		// Check if already scrapped
 		$output = executeQuery('member.getScrapDocument', $args);
 		if($output->data->count) return new Object(-1, 'msg_alreay_scrapped');
+
 		// Insert
 		$output = executeQuery('member.addScrapDocument', $args);
 		if(!$output->toBool()) return $output;