diff --git a/lib/classes/JsonApi/Routes/Courseware/Authority.php b/lib/classes/JsonApi/Routes/Courseware/Authority.php index 29bde20557ea63bcade34048702d88ff83087974..0331be71a5023dfa52bda67c5372898110a57925 100644 --- a/lib/classes/JsonApi/Routes/Courseware/Authority.php +++ b/lib/classes/JsonApi/Routes/Courseware/Authority.php @@ -262,6 +262,10 @@ class Authority public static function canUpdateBlockComment(User $user, BlockComment $resource) { + if ($resource->block->container->structural_element->range_type === 'user') { + return $resource->block->container->structural_element->range_id === $user->id; + } + $perm = $GLOBALS['perm']->have_studip_perm( $resource->block->container->structural_element->course->config->COURSEWARE_EDITING_PERMISSION, $resource->block->container->structural_element->course->id, @@ -383,6 +387,10 @@ class Authority return true; } + if ($resource->structural_element->range_type === 'user') { + return $resource->structural_element->range_id === $user->id; + } + $perm = $GLOBALS['perm']->have_studip_perm( $resource->structural_element->course->config->COURSEWARE_EDITING_PERMISSION, $resource->structural_element->course->id, @@ -408,6 +416,10 @@ class Authority return true; } + if ($resource->range_type === 'user') { + return $resource->range_id === $user->id; + } + $perm = $GLOBALS['perm']->have_studip_perm( $resource->course->config->COURSEWARE_EDITING_PERMISSION, $resource->course->id,