diff options
author | zotlabs <mike@macgirvin.com> | 2019-04-06 01:06:59 +0000 |
---|---|---|
committer | Mario <mario@mariovavti.com> | 2019-04-26 10:52:35 +0200 |
commit | dce5080e53476b35f8529ee626cebf965c75e48f (patch) | |
tree | cc776cfdd9669beda93402fed040068ded6a8863 | |
parent | 2221d4d61284689d9b2894e0ec5f565e9cecf89c (diff) | |
download | volse-hubzilla-dce5080e53476b35f8529ee626cebf965c75e48f.tar.gz volse-hubzilla-dce5080e53476b35f8529ee626cebf965c75e48f.tar.bz2 volse-hubzilla-dce5080e53476b35f8529ee626cebf965c75e48f.zip |
permissions cleanup
(cherry picked from commit 2d886b65ce9c03a4330b4d9609d02a8d1fd47d9b)
-rw-r--r-- | include/permissions.php | 16 |
1 files changed, 12 insertions, 4 deletions
diff --git a/include/permissions.php b/include/permissions.php index 1dcd6accb..501b2cc77 100644 --- a/include/permissions.php +++ b/include/permissions.php @@ -157,7 +157,7 @@ function get_all_perms($uid, $observer_xchan, $check_siteblock = true, $default_ // If we're still here, we have an observer, check the network. if($channel_perm & PERMS_NETWORK) { - if($x && $x[0]['xchan_network'] === 'zot') { + if($x && in_array($x[0]['xchan_network'],[ 'zot','zot6'])) { $ret[$perm_name] = true; continue; } @@ -321,6 +321,14 @@ function perm_is_allowed($uid, $observer_xchan, $permission, $check_siteblock = dbesc($observer_xchan) ); if($y) { + + // This requires an explanation and the effects are subtle. + // The following line creates a fake connection, and this allows + // access tokens to have specific permissions even though they are + // not actual connections. + // The existence of this fake entry must be checked when dealing + // with connection related permissions. + $x = array(pseudo_abook($y[0])); } } @@ -349,6 +357,7 @@ function perm_is_allowed($uid, $observer_xchan, $permission, $check_siteblock = return true; // If it's an unauthenticated observer, we only need to see if PERMS_PUBLIC is set + // We just did that. if(! $observer_xchan) { return false; @@ -357,7 +366,7 @@ function perm_is_allowed($uid, $observer_xchan, $permission, $check_siteblock = // If we're still here, we have an observer, check the network. if($channel_perm & PERMS_NETWORK) { - if (($x && $x[0]['xchan_network'] === 'zot') || ($y && $y[0]['xchan_network'] === 'zot')) + if ($x && in_array($x[0]['xchan_network'], ['zot','zot6'])) return true; } @@ -373,8 +382,7 @@ function perm_is_allowed($uid, $observer_xchan, $permission, $check_siteblock = return false; } - // From here on we require that the observer be a connection and - // handle whether we're allowing any, approved or specific ones + // From here on we require that the observer be a connection or pseudo connection if(! $x) { return false; |