Merge pull request #14 from christopherdarling/patch-2

FIX: SS_Report canView should check permissions
This commit is contained in:
Damian Mooyman 2015-12-18 10:21:07 +13:00
commit fc81b1f582

View File

@ -309,9 +309,16 @@ class SS_Report extends ViewableData {
$member = Member::currentUser();
}
$extended = $this->extendedCan('canView', $member);
if($extended !== null) return $extended;
if($member && Permission::checkMember($member, array('CMS_ACCESS_LeftAndMain', 'CMS_ACCESS_ReportAdmin'))) {
return true;
}
return false;
}
/**
* Return the name of this report, which