mirror of
https://github.com/Lastorder-DC/rhymix.git
synced 2026-04-02 01:52:10 +09:00
Merge branch 'security/rve-2026-4'
This commit is contained in:
commit
f3a08ba8f3
3 changed files with 31 additions and 11 deletions
|
|
@ -318,6 +318,8 @@ class BoardView extends Board
|
|||
{
|
||||
if (abs($oDocument->get('member_srl')) != $this->user->member_srl)
|
||||
{
|
||||
$oDocument = DocumentModel::getDocument(0);
|
||||
$oDocument->add('module_srl', $this->module_srl);
|
||||
Context::set('document_srl', null, true);
|
||||
$this->dispBoardMessage('msg_not_founded', 404);
|
||||
}
|
||||
|
|
@ -326,6 +328,8 @@ class BoardView extends Board
|
|||
// if the document is TEMP saved, pretend that it doesn't exist.
|
||||
if($oDocument->getStatus() == 'TEMP')
|
||||
{
|
||||
$oDocument = DocumentModel::getDocument(0);
|
||||
$oDocument->add('module_srl', $this->module_srl);
|
||||
Context::set('document_srl', null, true);
|
||||
$this->dispBoardMessage('msg_not_founded', 404);
|
||||
}
|
||||
|
|
@ -355,6 +359,7 @@ class BoardView extends Board
|
|||
if(!$this->grant->view && !$oDocument->isGranted())
|
||||
{
|
||||
$oDocument = DocumentModel::getDocument(0);
|
||||
$oDocument->add('module_srl', $this->module_srl);
|
||||
Context::set('document_srl', null, true);
|
||||
$this->dispBoardMessage($this->user->isMember() ? 'msg_not_permitted' : 'msg_not_logged');
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue