403 for a message that isn't yours.
darcs-hash:20080923050637-5ed1f-c568033b5c00ac32d9ad63b5a4d18a81c09ad525.gz
This commit is contained in:
parent
27b7987b3c
commit
44f7dc2a76
@ -42,7 +42,7 @@ class ShowmessageAction extends MailboxAction {
|
|||||||
$cur->id != $message->from_profile &&
|
$cur->id != $message->from_profile &&
|
||||||
$cur->id != $message->to_profile)
|
$cur->id != $message->to_profile)
|
||||||
{
|
{
|
||||||
$this->client_error(_('Only the sender and recipient may read this message.'), 404);
|
$this->client_error(_('Only the sender and recipient may read this message.'), 403);
|
||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user