* [bug#52216,done,1h] check lib permission.

2024-09-20 10:23:47 +08:00
parent 5fe0de0d17
commit ecea93d06d
1 changed files with 3 additions and 0 deletions
@@ -69,6 +69,7 @@ class api extends control
            $libs       = $this->doc->getApiLibs($libID, 'nolink');
        }

+        if($libID && !isset($libs[$libID])) return $this->send(array('result' => 'fail', 'load' => array('alert' => $this->lang->doc->accessDenied, 'locate' => $this->createLink('api', 'index'))));
        $lib        = $libID ? zget($libs, $libID) : current($libs);
        $libID      = !empty($lib->id)      ? $lib->id : 0;
        $objectType = !empty($lib->product) ? 'product'     : (!empty($lib->project) ? 'project' : 'nolink');
@@ -127,6 +128,8 @@ class api extends control
        $lib       = zget($libs, $libID);
        $api->desc = htmlspecialchars_decode($api->desc);

+        if($libID && !isset($libs[$libID])) return $this->send(array('result' => 'fail', 'load' => array('alert' => $this->lang->doc->accessDenied, 'locate' => $this->createLink('api', 'index'))));
+
        /* 生成一些必要的参数。 */
        $type       = $lib->product ? 'product' : ($lib->project ? 'project' : 'nolink');
        $objectID   = $lib->product ? $lib->product : $lib->project;