Tim Almdal 0b97cfd6f0 Changed access::user_can to force the owner of an item to have ...

view permission on the parent. Added a whitelist of allowable
owner permissions.

If the requested permission is view and the user requesting access
is the owner, check that they have view permission to the parent.

2009-07-26 09:29:29 -07:00

16 KiB

Raw Blame History

View Raw