Design/EasySoft-ZenTaoPMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 30 Wiki Activity

* Try to fix bug #35859.

Browse Source
This commit is contained in:
songchenxuan
2023-06-14 13:37:31 +08:00
parent 9d95ee8484
commit 1dd575d6ca
1 changed files with 18 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
module/doc/control.php
View File

@@ -377,16 +377,26 @@ class doc extends control
if(!empty($_POST))
{
$doclib = $this->loadModel('doc')->getLibById($objectID);
$doclib = $this->loadModel('doc')->getLibById($libID);
$canVisit = true;
if('custom' == $objectType)
switch($objectType)
{
$account = $this->app->user->account;
if(($doclib->acl == 'custom' or $doclib->acl == 'private') and strpos($doclib->users, $account) === false and $doclib->addedBy !== $account) $canVisit = false;
}
else
{
$canVisit = $this->loadModel('common')->checkPrivByObject($objectType, $doclib->$objectType);
case 'custom':
$account = (string)$this->app->user->account;
if(($doclib->acl == 'custom' or $doclib->acl == 'private') and strpos($doclib->users, $account) === false and $doclib->addedBy !== $account) $canVisit = false;
break;
case 'product':
$canVisit = $this->loadModel('product')->checkPriv($doclib->product);
break;
case 'project':
$canVisit = $this->loadModel('project')->checkPriv($doclib->project);
break;
case 'execution':
$canVisit = $this->loadModel('execution')->checkPriv($doclib->execution);
break;
default:
break;
}
if(!$canVisit) return $this->send(array('result' => 'fail', 'message' => $this->lang->doc->accessDenied));