stian/gallery3
1
0
Fork 0
mirror of https://github.com/Pathduck/gallery3.git synced 2026-08-22 23:05:18 -04:00
Code Issues Actions Packages Projects Releases Wiki Activity

Check view permissions before allowing view access to albums/photos.

Browse Source
This commit is contained in:
Bharat Mediratta
2008-12-09 10:14:09 +00:00
parent e62103b8d9
commit 4a0e4b798e
4 changed files with 15 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
core/controllers/rest.php
+2 -10
View File
@@ -81,22 +81,14 @@ abstract class REST_Controller extends Controller {
return $this->_index();
}
// @todo this needs security checks
$id = $function;
$resource = ORM::factory($this->resource_type, $id);
$resource = ORM::factory($this->resource_type, $function);
if (!$resource->loaded && $request_method != "post") {
return Kohana::show_404();
}
switch ($request_method) {
case "get":
$this->_show($resource);
if (Session::instance()->get("use_profiler", false)) {
$profiler = new Profiler();
$profiler->render();
}
return;
return $this->_show($resource);
case "put":
return $this->_update($resource);