aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorredmatrix <redmatrix@redmatrix.me>2015-11-17 15:03:27 -0800
committerredmatrix <redmatrix@redmatrix.me>2015-11-17 15:03:27 -0800
commita06f7fbe2e78de428489d824c1329ef29c4d1f42 (patch)
treea9b7334066c0e6245ef3dce8e60d13cc34645dac
parent6df98f080ba0c9a0309158c1ea5d48f95aae71ee (diff)
downloadvolse-hubzilla-a06f7fbe2e78de428489d824c1329ef29c4d1f42.tar.gz
volse-hubzilla-a06f7fbe2e78de428489d824c1329ef29c4d1f42.tar.bz2
volse-hubzilla-a06f7fbe2e78de428489d824c1329ef29c4d1f42.zip
photo album widget permissions issue
-rw-r--r--include/api.php2
-rw-r--r--include/widgets.php4
-rw-r--r--version.inc2
-rw-r--r--view/js/acl.js4
4 files changed, 9 insertions, 3 deletions
diff --git a/include/api.php b/include/api.php
index f781987d1..f279b2aa3 100644
--- a/include/api.php
+++ b/include/api.php
@@ -742,6 +742,8 @@ require_once('include/api_auth.php');
}
$user_info = api_get_user($a);
+// logger('status_with_media: ' . print_r($_REQUEST,true), LOGGER_DEBUG);
+
$_REQUEST['type'] = 'wall';
$_REQUEST['profile_uid'] = api_user();
$_REQUEST['api_source'] = true;
diff --git a/include/widgets.php b/include/widgets.php
index 5a135ae52..fc6fee2ef 100644
--- a/include/widgets.php
+++ b/include/widgets.php
@@ -1229,6 +1229,10 @@ function widget_album($args) {
$owner_uid = get_app()->profile_uid;
$sql_extra = permissions_sql($owner_uid);
+
+ if(! perm_is_allowed($owner_uid,get_observer_hash(),'view_storage'))
+ return '';
+
if($args['album'])
$album = $args['album'];
if($args['title'])
diff --git a/version.inc b/version.inc
index 1cf2edada..b6659c788 100644
--- a/version.inc
+++ b/version.inc
@@ -1 +1 @@
-2015-11-16.1218
+2015-11-17.1219
diff --git a/view/js/acl.js b/view/js/acl.js
index 847997de0..a0c1c6c02 100644
--- a/view/js/acl.js
+++ b/view/js/acl.js
@@ -31,7 +31,7 @@ function ACL(backend_url, preset) {
$("#acl-search").keypress(that.on_search);
/* startup! */
- that.get(0,100);
+ that.get(0,1000);
that.on_submit();
});
}
@@ -60,7 +60,7 @@ ACL.prototype.on_submit = function() {
ACL.prototype.search = function() {
var srcstr = $("#acl-search").val();
that.list_content.html("");
- that.get(0, 100, srcstr);
+ that.get(0, 1000, srcstr);
};
ACL.prototype.on_search = function(event) {