From c900f49d7209720228f87ae4653f17574de00398 Mon Sep 17 00:00:00 2001 From: Kijin Sung Date: Fri, 16 Dec 2016 23:43:46 +0900 Subject: [PATCH] Fix #654 don't display send message link if not permitted for current user --- modules/communication/communication.controller.php | 4 ++++ modules/communication/communication.view.php | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/modules/communication/communication.controller.php b/modules/communication/communication.controller.php index 8f6c2bee1..0a86fa5ae 100644 --- a/modules/communication/communication.controller.php +++ b/modules/communication/communication.controller.php @@ -835,6 +835,10 @@ class communicationController extends communication { return new Object(); } + if(!$oCommunicationModel->checkGrant($config->grant_send)) + { + return new Object(); + } $mid = Context::get('cur_mid'); $member_srl = Context::get('target_srl'); diff --git a/modules/communication/communication.view.php b/modules/communication/communication.view.php index e87e4842a..f56de4b2a 100644 --- a/modules/communication/communication.view.php +++ b/modules/communication/communication.view.php @@ -178,6 +178,10 @@ class communicationView extends communication { return $this->stop('msg_invalid_request'); } + if(!getModel('communication')->checkGrant($this->config->grant_send)) + { + return $this->stop('msg_not_permitted'); + } // Error appears if not logged-in if(!Context::get('is_logged'))