liquid_feedback_frontend
changeset 1111:5b77825ecfa6
Backported missing access control for member profile images from version 3.0.3
author | bsw |
---|---|
date | Mon Nov 10 18:54:34 2014 +0100 (2014-11-10) |
parents | 9461c738ea0b |
children | 8fb4eab439c1 |
files | app/main/_filter/21_auth.lua |
line diff
1.1 --- a/app/main/_filter/21_auth.lua Mon Nov 10 18:48:58 2014 +0100 1.2 +++ b/app/main/_filter/21_auth.lua Mon Nov 10 18:54:34 2014 +0100 1.3 @@ -44,9 +44,20 @@ 1.4 1.5 end 1.6 1.7 +if app.session:has_access("authors_pseudonymous") then 1.8 + if module == "member_image" and view == "show" and param.get("image_type") == "avatar" then 1.9 + auth_needed = false 1.10 + end 1.11 +end 1.12 + 1.13 +if app.session:has_access("everything") then 1.14 + if module == "member_image" and view == "show" then 1.15 + auth_needed = false 1.16 + end 1.17 +end 1.18 + 1.19 if app.session:has_access("all_pseudonymous") then 1.20 - if module == "member_image" and view == "show" 1.21 - or module == "vote" and view == "show_incoming" 1.22 + if module == "vote" and view == "show_incoming" 1.23 or module == "interest" and view == "show_incoming" 1.24 or module == "supporter" and view == "show_incoming" 1.25 or module == "vote" and view == "list" then