fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-05-08 11:33:55 +09:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #684 from izuzero/develop

Browse source 
프로그램에 의해 글 작성 시 로그인한 회원에게 작성된 문서의 권한이 생기는 문제.
This commit is contained in:
akasima 2014-07-03 14:00:46 +09:00
commit a3e99d5075
2 changed files with 23 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

10
modules/comment/comment.controller.php
View file

@ -199,6 +199,8 @@ class commentController extends comment
// check if comment's module is using comment validation and set the publish status to 0 (false) // check if comment's module is using comment validation and set the publish status to 0 (false)
// for inserting query, otherwise default is 1 (true - means comment is published) // for inserting query, otherwise default is 1 (true - means comment is published)
$using_validation = $this->isModuleUsingPublishValidation($obj->module_srl); $using_validation = $this->isModuleUsingPublishValidation($obj->module_srl);
if(!$manual_inserted)
{
if(Context::get('is_logged')) if(Context::get('is_logged'))
{ {
$logged_info = Context::get('logged_info'); $logged_info = Context::get('logged_info');
@ -211,6 +213,11 @@ class commentController extends comment
$is_admin = FALSE; $is_admin = FALSE;
} }
} }
}
else
{
$is_admin = FALSE;
}
if(!$using_validation) if(!$using_validation)
{ {
@ -441,7 +448,10 @@ class commentController extends comment
} }
// grant autority of the comment // grant autority of the comment
if(!$manual_inserted)
{
$this->addGrant($obj->comment_srl); $this->addGrant($obj->comment_srl);
}
// call a trigger(after) // call a trigger(after)
if($output->toBool()) if($output->toBool())

3
modules/document/document.controller.php
View file

@ -333,7 +333,10 @@ class documentController extends document
$oDB->commit(); $oDB->commit();
// return // return
if(!$manual_inserted)
{
$this->addGrant($obj->document_srl); $this->addGrant($obj->document_srl);
}
$output->add('document_srl',$obj->document_srl); $output->add('document_srl',$obj->document_srl);
$output->add('category_srl',$obj->category_srl); $output->add('category_srl',$obj->category_srl);