Skip to content
Snippets Groups Projects
Commit 515521d6 authored by Rasmus Fuhse's avatar Rasmus Fuhse
Browse files

Resolve "OER Campus: Bei Entwurf: Zugriff verweigert"

Closes #2527

Merge request studip/studip!1913
parent d5f0c926
No related branches found
No related tags found
No related merge requests found
Pipeline #13744 passed
...@@ -3,6 +3,8 @@ ...@@ -3,6 +3,8 @@
class Oer_EndpointsController extends StudipController class Oer_EndpointsController extends StudipController
{ {
protected $with_session = true; //we do need to have a session for this controller
public function index_action() public function index_action()
{ {
$this->controllerreflection = new ReflectionClass($this); $this->controllerreflection = new ReflectionClass($this);
...@@ -297,7 +299,7 @@ class Oer_EndpointsController extends StudipController ...@@ -297,7 +299,7 @@ class Oer_EndpointsController extends StudipController
public function download_action($material_id, $disposition = "inline") public function download_action($material_id, $disposition = "inline")
{ {
$this->material = new OERMaterial($material_id); $this->material = new OERMaterial($material_id);
if ($this->material['draft']) { if ($this->material['draft'] && !$this->material->isMine()) {
throw new AccessDeniedException(); throw new AccessDeniedException();
} }
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment