From 195fe364d26890f98c5a04510cf6906b7d85263d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?G=C3=A1bor=20Hojtsy?= Date: Tue, 1 Jan 2008 17:46:30 +0000 Subject: #203582 by David_Rothstein: some core hook_access() implementations are not using the passed in account --- modules/forum/forum.module | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) (limited to 'modules/forum') diff --git a/modules/forum/forum.module b/modules/forum/forum.module index 8fc78fbf8..a9b817a09 100644 --- a/modules/forum/forum.module +++ b/modules/forum/forum.module @@ -310,10 +310,7 @@ function forum_access($op, $node, $account) { } if ($op == 'update' || $op == 'delete') { - if (user_access('edit own forum topics', $account) && ($account->uid == $node->uid)) { - return TRUE; - } - if (user_access('edit any forum topic')) { + if (user_access('edit any forum topic', $account) || (user_access('edit own forum topics', $account) && ($account->uid == $node->uid))) { return TRUE; } } -- cgit v1.2.3