photo album widget permissions issue

2015-11-17 15:03:27 -08:00
parent 6df98f080b
commit a06f7fbe2e
4 changed files with 9 additions and 3 deletions
--- a/include/widgets.php
+++ b/include/widgets.php
@@ -1229,6 +1229,10 @@ function widget_album($args) {
 	$owner_uid = get_app()->profile_uid;
 	$sql_extra = permissions_sql($owner_uid);

+
+	if(! perm_is_allowed($owner_uid,get_observer_hash(),'view_storage'))
+		return '';
+
 	if($args['album'])
 		$album = $args['album'];
 	if($args['title'])