From 9e67b5b010277cb227e1b0a430cc5b9a8efae69e Mon Sep 17 00:00:00 2001 From: Kijin Sung Date: Mon, 7 Feb 2022 21:43:14 +0900 Subject: [PATCH] Determine administrator status more accurately #1851 --- modules/board/board.controller.php | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/modules/board/board.controller.php b/modules/board/board.controller.php index 343429058..50d656ed5 100644 --- a/modules/board/board.controller.php +++ b/modules/board/board.controller.php @@ -748,7 +748,7 @@ class boardController extends board /** * @brief the trigger for displaying 'view document' link when click the user ID **/ - function triggerMemberMenu(&$obj) + function triggerMemberMenu($obj) { if(!$mid = Context::get('cur_mid')) { @@ -757,10 +757,17 @@ class boardController extends board // get the module information $module_info = ModuleModel::getModuleInfoByMid($mid); - if(empty($module_info->module) || $module_info->module !== 'board' || $module_info->use_anonymous === 'Y') + if (!$module_info || !isset($module_info->module) || $module_info->module !== 'board') { return; } + if (($module_info->use_anonymous ?? 'N') === 'Y') + { + if (($module_info->anonymous_except_admin ?? 'N') !== 'Y' || !ModuleModel::isModuleAdmin($obj, $module_info->module_srl)) + { + return; + } + } $url = getUrl('', 'mid', $mid, 'member_srl', $obj->member_srl); getController('member')->addMemberPopupMenu($url, 'cmd_view_own_document', '', 'self', 'board_own_document');