photo album widget permissions issue

This commit is contained in:
redmatrix 2015-11-17 15:03:27 -08:00
parent 6df98f080b
commit a06f7fbe2e
4 changed files with 9 additions and 3 deletions

View File

@ -742,6 +742,8 @@ require_once('include/api_auth.php');
} }
$user_info = api_get_user($a); $user_info = api_get_user($a);
// logger('status_with_media: ' . print_r($_REQUEST,true), LOGGER_DEBUG);
$_REQUEST['type'] = 'wall'; $_REQUEST['type'] = 'wall';
$_REQUEST['profile_uid'] = api_user(); $_REQUEST['profile_uid'] = api_user();
$_REQUEST['api_source'] = true; $_REQUEST['api_source'] = true;

View File

@ -1229,6 +1229,10 @@ function widget_album($args) {
$owner_uid = get_app()->profile_uid; $owner_uid = get_app()->profile_uid;
$sql_extra = permissions_sql($owner_uid); $sql_extra = permissions_sql($owner_uid);
if(! perm_is_allowed($owner_uid,get_observer_hash(),'view_storage'))
return '';
if($args['album']) if($args['album'])
$album = $args['album']; $album = $args['album'];
if($args['title']) if($args['title'])

View File

@ -1 +1 @@
2015-11-16.1218 2015-11-17.1219

View File

@ -31,7 +31,7 @@ function ACL(backend_url, preset) {
$("#acl-search").keypress(that.on_search); $("#acl-search").keypress(that.on_search);
/* startup! */ /* startup! */
that.get(0,100); that.get(0,1000);
that.on_submit(); that.on_submit();
}); });
} }
@ -60,7 +60,7 @@ ACL.prototype.on_submit = function() {
ACL.prototype.search = function() { ACL.prototype.search = function() {
var srcstr = $("#acl-search").val(); var srcstr = $("#acl-search").val();
that.list_content.html(""); that.list_content.html("");
that.get(0, 100, srcstr); that.get(0, 1000, srcstr);
}; };
ACL.prototype.on_search = function(event) { ACL.prototype.on_search = function(event) {