Fossil SCM
Correct permissions check on forum-attachment removal confirmation to account for the forum-close-policy setting.
Commit
cb9e36ecd8c80c553f72fc06b12f8047173b767879275feb2f78d12db120fa5a
Parent
085e12390526ba5…
1 file changed
+1
-1
+1
-1
| --- src/attach.c | ||
| +++ src/attach.c | ||
| @@ -656,11 +656,11 @@ | ||
| 656 | 656 | @ <p>The attachment below has been deleted.</p> |
| 657 | 657 | fossil_free(zNewDate); |
| 658 | 658 | } |
| 659 | 659 | |
| 660 | 660 | if( P("del") |
| 661 | - && ((zForumPost && (g.perm.Admin || bUserIsOwner)) || | |
| 661 | + && ((zForumPost && (bUserIsOwner || forumpost_may_close())) || | |
| 662 | 662 | (zTktUuid && g.perm.WrTkt) || |
| 663 | 663 | (zWikiName && g.perm.WrWiki) || |
| 664 | 664 | (zTNUuid && g.perm.Write && g.perm.WrWiki)) |
| 665 | 665 | ){ |
| 666 | 666 | form_begin(0, "%R/ainfo/%!S", zUuid); |
| 667 | 667 |
| --- src/attach.c | |
| +++ src/attach.c | |
| @@ -656,11 +656,11 @@ | |
| 656 | @ <p>The attachment below has been deleted.</p> |
| 657 | fossil_free(zNewDate); |
| 658 | } |
| 659 | |
| 660 | if( P("del") |
| 661 | && ((zForumPost && (g.perm.Admin || bUserIsOwner)) || |
| 662 | (zTktUuid && g.perm.WrTkt) || |
| 663 | (zWikiName && g.perm.WrWiki) || |
| 664 | (zTNUuid && g.perm.Write && g.perm.WrWiki)) |
| 665 | ){ |
| 666 | form_begin(0, "%R/ainfo/%!S", zUuid); |
| 667 |
| --- src/attach.c | |
| +++ src/attach.c | |
| @@ -656,11 +656,11 @@ | |
| 656 | @ <p>The attachment below has been deleted.</p> |
| 657 | fossil_free(zNewDate); |
| 658 | } |
| 659 | |
| 660 | if( P("del") |
| 661 | && ((zForumPost && (bUserIsOwner || forumpost_may_close())) || |
| 662 | (zTktUuid && g.perm.WrTkt) || |
| 663 | (zWikiName && g.perm.WrWiki) || |
| 664 | (zTNUuid && g.perm.Write && g.perm.WrWiki)) |
| 665 | ){ |
| 666 | form_begin(0, "%R/ainfo/%!S", zUuid); |
| 667 |