mirror_php/humhub
1
0
Fork 0
mirror of https://github.com/humhub/humhub.git synced 2025-01-16 21:58:17 +01:00
Code Issues Projects Releases Wiki Activity

Fix: humhub\modules\space\modules\manage\components\Controller only accessible by system admins

Browse Source
This commit is contained in:
buddh4 2018-08-31 18:23:47 +02:00
parent 4b0d87b7a0
commit 723d60f4af
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
protected/humhub/docs/CHANGELOG.md
View File

@ -36,6 +36,7 @@ HumHub Change Log
- Fix: Richtext prompt not removed on pjax load
- Enh: Added `humhub\modules\content\widgets\richtext\ProsemirrorRichText::parseOutput` for pre render parsing
- Enh: Added `humhub.modules.file.getFileUrl` and `humhub.modules.file.filterFileUrl` for file guid based url handling
- Fix: `humhub\modules\space\modules\manage\components\Controller` only accessible by system admins

7
protected/humhub/modules/space/modules/manage/components/Controller.php
View File

@ -9,9 +9,8 @@
namespace humhub\modules\space\modules\manage\components;
use humhub\modules\content\components\ContentContainerController;
use humhub\modules\admin\permissions\ManageSpaces;
use Yii;
use yii\web\HttpException;
use humhub\modules\content\components\ContentContainerControllerAccess;
use humhub\modules\space\models\Space;
/**
* Default Space Manage Controller
@ -24,7 +23,7 @@ class Controller extends ContentContainerController
protected function getAccessRules() {
return [
['login'],
['permission' => [ManageSpaces::class]]
[ContentContainerControllerAccess::RULE_USER_GROUP_ONLY => [Space::USERGROUP_ADMIN]]
];
}
}