Merge pull request #14 from christopherdarling/patch-2

FIX: SS_Report canView should check permissions
This commit is contained in:
Damian Mooyman 2015-12-18 10:21:07 +13:00
commit fc81b1f582

View File

@ -308,8 +308,15 @@ class SS_Report extends ViewableData {
if(!$member && $member !== FALSE) {
$member = Member::currentUser();
}
return true;
$extended = $this->extendedCan('canView', $member);
if($extended !== null) return $extended;
if($member && Permission::checkMember($member, array('CMS_ACCESS_LeftAndMain', 'CMS_ACCESS_ReportAdmin'))) {
return true;
}
return false;
}