GNUsocial/gnu-social
4
0
Fork 1
Code Issues Releases Wiki Activity

disallow access to out-of-scope poll

Browse Source
This commit is contained in:
Evan Prodromou 2011-03-28 22:50:52 -04:00
parent 2856982a1c
commit 908551ae3d
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
plugins/Poll/showpoll.php
View File

@ -76,6 +76,18 @@ class ShowPollAction extends ShownoticeAction
throw new ClientException(_m('No such poll notice.'), 404); throw new ClientException(_m('No such poll notice.'), 404);
} }
$cur = common_current_user();
if (!empty($cur)) {
$curProfile = $cur->getProfile();
} else {
$curProfile = null;
}
if (!$this->notice->inScope($curProfile)) {
throw new ClientException(_('Not available.'), 403);
}
$this->user = User::staticGet('id', $this->poll->profile_id); $this->user = User::staticGet('id', $this->poll->profile_id);
if (empty($this->user)) { if (empty($this->user)) {