tonyair/silverstripe-reports
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-reports synced 2024-10-22 11:05:53 +02:00
Code Issues Projects Releases Wiki Activity

Merge pull request #14 from christopherdarling/patch-2

Browse Source 
FIX: SS_Report canView should check permissions
This commit is contained in:
Damian Mooyman 2015-12-18 10:21:07 +13:00
commit fc81b1f582
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
code/Report.php
View File

@ -308,8 +308,15 @@ class SS_Report extends ViewableData {
if(!$member && $member !== FALSE) { if(!$member && $member !== FALSE) {
$member = Member::currentUser(); $member = Member::currentUser();
} }
return true; $extended = $this->extendedCan('canView', $member);
if($extended !== null) return $extended;
if($member && Permission::checkMember($member, array('CMS_ACCESS_LeftAndMain', 'CMS_ACCESS_ReportAdmin'))) {
return true;
}
return false;
} }