diff options
author | Andrew Manning <tamanning@zoho.com> | 2016-05-29 21:23:56 -0400 |
---|---|---|
committer | Andrew Manning <tamanning@zoho.com> | 2016-05-29 21:23:56 -0400 |
commit | 4b350b909025ba2102d5ad2c5ee32b3c4eecaa48 (patch) | |
tree | daf198beaba4a45e1256ae03015c6d94277cfb9b /include | |
parent | a3dfdd9d3886451f5e97940387a56171c5810cf6 (diff) | |
download | volse-hubzilla-4b350b909025ba2102d5ad2c5ee32b3c4eecaa48.tar.gz volse-hubzilla-4b350b909025ba2102d5ad2c5ee32b3c4eecaa48.tar.bz2 volse-hubzilla-4b350b909025ba2102d5ad2c5ee32b3c4eecaa48.zip |
Fixed bug in access control. Hide new wiki/page buttons if not channel owner.
Diffstat (limited to 'include')
-rw-r--r-- | include/wiki.php | 6 |
1 files changed, 1 insertions, 5 deletions
diff --git a/include/wiki.php b/include/wiki.php index 54644dd18..70788eed2 100644 --- a/include/wiki.php +++ b/include/wiki.php @@ -8,11 +8,7 @@ use \Zotlabs\Storage\GitRepo as GitRepo; define ( 'WIKI_ITEM_RESOURCE_TYPE', 'wiki' ); function wiki_list($channel, $observer_hash) { - if (local_channel() || remote_channel()) { - $sql_extra = item_permissions_sql($channel['channel_id'], $observer_hash); - } else { - $sql_extra = " AND item_private = 0 "; - } + $sql_extra = item_permissions_sql($channel['channel_id'], $observer_hash); $wikis = q("SELECT * FROM item WHERE resource_type = '%s' AND mid = parent_mid AND item_deleted = 0 $sql_extra", dbesc(WIKI_ITEM_RESOURCE_TYPE) ); |