Redstoner/redstoner.com
Archived
0
Fork 0
Code Issues Pull Requests 2 Wiki Activity

Fix: Accessing threads in deleted forum, will deny access

Browse Source
This commit is contained in:
jomo
2014-06-26 22:38:16 +02:00
parent b03adf66d8
commit fdfb491af9
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
app/models/forum.rb
View File

@@ -17,7 +17,7 @@ class Forum < ActiveRecord::Base
end end
def can_read?(user) def can_read?(user)
group.can_read?(user) && (role_read.nil? || (!user.nil? && user.role >= role_read)) group && group.can_read?(user) && (role_read.nil? || (!user.nil? && user.role >= role_read))
end end
def can_write?(user) def can_write?(user)

2
app/models/forumthread.rb
View File

@@ -31,7 +31,7 @@ class Forumthread < ActiveRecord::Base
end end
def can_read?(user) def can_read?(user)
forum.can_read?(user) forum && forum.can_read?(user)
end end
def can_write?(user) def can_write?(user)