diff --git a/lib/classes/JsonApi/Routes/Courseware/Authority.php b/lib/classes/JsonApi/Routes/Courseware/Authority.php index e293c84aeeb49071917f5dec5783a0e8c2646020..3f05ea1e7396fda28fcd464464c856b03978e6cc 100644 --- a/lib/classes/JsonApi/Routes/Courseware/Authority.php +++ b/lib/classes/JsonApi/Routes/Courseware/Authority.php @@ -250,6 +250,10 @@ class Authority public static function canUpdateBlockComment(User $user, BlockComment $resource) { + if ($resource->block->container->structural_element->range_type === 'user') { + return $resource->block->container->structural_element->range_id === $user->id; + } + $perm = $GLOBALS['perm']->have_studip_perm( $resource->block->container->structural_element->course->config->COURSEWARE_EDITING_PERMISSION, $resource->block->container->structural_element->course->id, @@ -371,6 +375,10 @@ class Authority return true; } + if ($resource->structural_element->range_type === 'user') { + return $resource->structural_element->range_id === $user->id; + } + $perm = $GLOBALS['perm']->have_studip_perm( $resource->structural_element->course->config->COURSEWARE_EDITING_PERMISSION, $resource->structural_element->course->id, @@ -396,6 +404,10 @@ class Authority return true; } + if ($resource->range_type === 'user') { + return $resource->range_id === $user->id; + } + $perm = $GLOBALS['perm']->have_studip_perm( $resource->course->config->COURSEWARE_EDITING_PERMISSION, $resource->course->id,