tonyair/silverstripe-reports
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-reports synced 2024-10-22 11:05:53 +02:00
Code Issues Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/3.1.0' into 3.1

Browse Source
This commit is contained in:
Ingo Schommer 2013-08-20 22:28:54 +02:00
commit f38d46224a
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
code/controllers/ContentController.php
View File

@ -101,6 +101,11 @@ class ContentController extends Controller {
if($this->redirectedTo()) return; if($this->redirectedTo()) return;
// Check page permissions
if($this->dataRecord && $this->URLSegment != 'Security' && !$this->dataRecord->canView()) {
return Security::permissionFailure($this);
}
// Draft/Archive security check - only CMS users should be able to look at stage/archived content // Draft/Archive security check - only CMS users should be able to look at stage/archived content
if( if(
$this->URLSegment != 'Security' $this->URLSegment != 'Security'
@ -128,9 +133,10 @@ class ContentController extends Controller {
), ),
Controller::join_links($this->Link(), "?stage=Live") Controller::join_links($this->Link(), "?stage=Live")
); );
return Security::permissionFailure($this, $permissionMessage);
} }
return Security::permissionFailure($this, $permissionMessage);
} }
// Use theme from the site config // Use theme from the site config