tiki-view_forum_thread.php does not check for category perms
CVS HEAD 1.9.x Revision 1.82
to copy the following blocks from tiki-view_forum.php into the correct spots should work.
if ($feature_categories == 'y') {
global $categlib;
if (!is_object($categlib)) {
include_once('lib/categories/categlib.php');
}
}
and
} elseif ($tiki_p_admin != 'y' && $feature_categories == 'y') {
$perms_array = $categlib->get_object_categories_perms($user, 'forum', $_REQUEST'forumId');
if ($perms_array) {
$is_categorized = TRUE;
foreach ($perms_array as $perm => $value) {
$$perm = $value;
}
} else {
$is_categorized = FALSE;
}
if ($is_categorized && isset($tiki_p_view_categories) && $tiki_p_view_categories != 'y') {
if (!isset($user)){
$smarty->assign('msg',$smarty->fetch('modules/mod-login_box.tpl'));
$smarty->assign('errortitle',tra("Please login"));
} else {
$smarty->assign('msg',tra("Permission denied you cannot view this page"));
}
$smarty->display("error.tpl");
die;
}
}
To help developers solve the bug, we kindly request that you demonstrate your bug on a show2.tikiwiki.org instance. To start, simply select a version and click on "Create show2.tikiwiki.org instance". Once the instance is ready (in a minute or two), as indicated in the status window below, you can then access that instance, login (the initial admin username/password is "admin") and configure the Tiki to demonstrate your bug. Priority will be given to bugs that have been demonstrated on show2.tikiwiki.org.
filename | created | hits | comment | version | filetype | ||
---|---|---|---|---|---|---|---|
No attachments for this item |