diff options
| author | Dries Buytaert <dries@buytaert.net> | 2004-08-21 16:04:12 +0000 |
|---|---|---|
| committer | Dries Buytaert <dries@buytaert.net> | 2004-08-21 16:04:12 +0000 |
| commit | 8b8a2bd63443dc9defbba4b0ab03801955ae406a (patch) | |
| tree | b6923209f29a565d4c777e7212a7d04bf511efd2 | |
| parent | d619ccc87e4e12b6325500d7fbd51d835d27b72b (diff) | |
| download | brdo-8b8a2bd63443dc9defbba4b0ab03801955ae406a.tar.gz brdo-8b8a2bd63443dc9defbba4b0ab03801955ae406a.tar.bz2 | |
- Patch #10187 by JonBob: bugfix: added missing permission check.
| -rw-r--r-- | modules/node.module | 4 | ||||
| -rw-r--r-- | modules/node/node.module | 4 |
2 files changed, 8 insertions, 0 deletions
diff --git a/modules/node.module b/modules/node.module index 9ea8d1052..62a9e5426 100644 --- a/modules/node.module +++ b/modules/node.module @@ -1590,6 +1590,10 @@ function node_access($op, $node = NULL) { return TRUE; } + if (!user_access('access content')) { + return FALSE; + } + // Can't use node_invoke(), because the access hook takes the $op parameter // before the $node parameter. $access = module_invoke(node_get_module_name($node), 'access', $op, $node); diff --git a/modules/node/node.module b/modules/node/node.module index 9ea8d1052..62a9e5426 100644 --- a/modules/node/node.module +++ b/modules/node/node.module @@ -1590,6 +1590,10 @@ function node_access($op, $node = NULL) { return TRUE; } + if (!user_access('access content')) { + return FALSE; + } + // Can't use node_invoke(), because the access hook takes the $op parameter // before the $node parameter. $access = module_invoke(node_get_module_name($node), 'access', $op, $node); |