mirror of
https://github.com/Pathduck/gallery3.git
synced 2026-07-15 03:02:39 -04:00
Create a new "add" permission and require it at the controller level
when adding photos/movies/albums
This commit is contained in:
@@ -23,6 +23,7 @@ class Server_Add_Controller extends Controller {
|
||||
|
||||
$item = ORM::factory("item", $id);
|
||||
access::required("server_add", $item);
|
||||
access::required("add", $item);
|
||||
|
||||
$view = new View("server_add_tree_dialog.html");
|
||||
$view->action = url::site("__ARGS__/{$id}__TASK_ID__?csrf=" . access::csrf_token());
|
||||
|
||||
Reference in New Issue
Block a user