hazza/Phraseanet
1
0
Fork 0
mirror of https://github.com/alchemy-fr/Phraseanet.git synced 2025-10-15 05:53:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix #PHRAS-388 #time 4h

Browse Source
This commit is contained in:
Jean-Yves Gaulier
2015-01-27 16:55:07 +01:00
parent 5fe09febb7
commit 344cc0cdd8
1 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
lib/classes/API/V1/adapter.php
View File

@@ -1460,25 +1460,25 @@ class API_V1_adapter extends API_V1_Abstract
return null; return null;
} }
if ($this->app['authentication']->isAuthenticated()) { if ($this->app['authentication']->isAuthenticated()) {
if ($media->get_name() !== 'document' && false === $this->app['authentication']->getUser()->ACL()->has_access_to_subdef($record, $media->get_name())) { if ($media->get_name() !== 'document' && false === $this->app['authentication']->getUser()->ACL()->has_access_to_subdef($record, $media->get_name())) {
return null; return null;
} else if ($media->get_name() === 'document' } else if ($media->get_name() === 'document'
&& !$this->app['authentication']->getUser()->ACL()->has_right_on_base($record->get_base_id(), 'candwnldhd') && !$this->app['authentication']->getUser()->ACL()->has_right_on_base($record->get_base_id(), 'candwnldhd')
&& !$this->app['authentication']->getUser()->ACL()->has_hd_grant($record)) { && !$this->app['authentication']->getUser()->ACL()->has_hd_grant($record)) {
return null; return null;
} }
} }
if($media->get_name() != 'document') {
$databox = $record->get_databox(); $databox = $record->get_databox();
try { try {
$subDefDefinition = $databox->get_subdef_structure()->get_subdef($record->get_type(), $media->get_name()); $subDefDefinition = $databox->get_subdef_structure()->get_subdef($record->get_type(), $media->get_name());
} catch (Exception_Databox_SubdefNotFound $e) { } catch (Exception_Databox_SubdefNotFound $e) {
return null; return null;
}
} }
if (false === $subDefDefinition->is_downloadable()) { if ($media->get_name() != 'document' && false === $subDefDefinition->is_downloadable()) {
return null; return null;
} }