From 7533f825a7f658ef554f1bda7377891649cbd5ff Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Andr=C3=A9=20Noack?= <noack@data-quest.de>
Date: Fri, 21 Jan 2022 15:48:40 +0000
Subject: [PATCH] =?UTF-8?q?Resolve=20"Inhalte=20von=20Unterordnern=20in=20?=
=?UTF-8?q?versteckten=20Ordnern=20k=C3=B6nnen=20nicht=20ausgelesen=20werd?=
=?UTF-8?q?en,=20selbst=20wenn=20man=20"=20Zugriff=20auf=20Dateien=20per?=
=?UTF-8?q?=20Link=20erlauben"=20setzt."?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
---
lib/filesystem/HiddenFolder.php | 6 ++----
1 file changed, 2 insertions(+), 4 deletions(-)
diff --git a/lib/filesystem/HiddenFolder.php b/lib/filesystem/HiddenFolder.php
index ff71d3bdd6f..60a8cbd1e43 100644
--- a/lib/filesystem/HiddenFolder.php
+++ b/lib/filesystem/HiddenFolder.php
@@ -135,10 +135,8 @@ class HiddenFolder extends PermissionEnabledFolder
$fileref = FileRef::toObject($fileref_or_id);
if (is_object($fileref)) {
- if (($this->download_allowed || Seminar_Perm::get()->have_studip_perm('tutor', $this->range_id, $user_id))
- && $this->getParent()->isVisible($user_id)
- && $this->getParent()->isReadable($user_id)) {
- return $fileref->terms_of_use->IsDownloadable($this->range_id, $this->range_type, true, $user_id);
+ if ($this->download_allowed || Seminar_Perm::get()->have_studip_perm('tutor', $this->range_id, $user_id)) {
+ return $fileref->terms_of_use->isDownloadable($this->range_id, $this->range_type, true, $user_id);
}
}
return false;
--
GitLab