mirror_php/humhub
1
0
Fork 0
mirror of https://github.com/humhub/humhub.git synced 2025-03-14 20:19:47 +01:00
Code Issues Projects Releases Wiki Activity

Merge pull request #4363 from humhub/fix/guest-action

Browse Source 
Fix: Open file modal throws permission denied for unauthenticated use…
This commit is contained in:
Lucas Bartholemy 2020-10-02 15:41:29 +02:00 committed by GitHub
commit d9f67aa7d4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
protected/humhub/docs/CHANGELOG.md
View File

@ -7,6 +7,7 @@ HumHub Changelog
This release also brings a [security update](https://github.com/yiisoft/yii2/security/advisories/GHSA-699q-wcff-g9mj) of the Yii2 framework. HumHub itself and the modules provided by our offical marketplace are not affected by this bug.
- Fix #4361: Added missing nonce attribute in inline marketplace script
- Fix #4363: Open file modal throws permission denied for unauthenticated users in guest mode
- Fix #4371: Word break issue in notification dropdown
- Fix #4384: Upgrade to Yii 2.0.38
- Fix #4403 Space Picker Double HTML Encode

2
protected/humhub/modules/file/controllers/ViewController.php
View File

@ -30,7 +30,7 @@ class ViewController extends \humhub\components\Controller
return [
'acl' => [
'class' => AccessControl::class,
'guestAllowedActions' => ['view']
'guestAllowedActions' => ['index']
],
];
}