From 840582cc11f83f0a652738197b080710ba5c247a Mon Sep 17 00:00:00 2001 From: Lucas Bartholemy <lucas@bartholemy.com> Date: Fri, 11 Sep 2020 18:20:23 +0200 Subject: [PATCH 1/2] Fix: Open file modal throws permission denied for unauthenticated users in guest mode --- protected/humhub/docs/CHANGELOG.md | 1 + protected/humhub/modules/file/controllers/ViewController.php | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/protected/humhub/docs/CHANGELOG.md b/protected/humhub/docs/CHANGELOG.md index 1cd6ff979b..6af838418d 100644 --- a/protected/humhub/docs/CHANGELOG.md +++ b/protected/humhub/docs/CHANGELOG.md @@ -4,6 +4,7 @@ HumHub Changelog 1.6.4 (Unreleased) ------------------ - Fix #4361: Added missing nonce attribute in inline marketplace script +- Fix: Open file modal throws permission denied for unauthenticated users in guest mode 1.6.3 (September 9, 2020) diff --git a/protected/humhub/modules/file/controllers/ViewController.php b/protected/humhub/modules/file/controllers/ViewController.php index 873d9234c3..a26a892ea4 100644 --- a/protected/humhub/modules/file/controllers/ViewController.php +++ b/protected/humhub/modules/file/controllers/ViewController.php @@ -30,7 +30,7 @@ class ViewController extends \humhub\components\Controller return [ 'acl' => [ 'class' => AccessControl::class, - 'guestAllowedActions' => ['view'] + 'guestAllowedActions' => ['index'] ], ]; } From 5923d8aa3fedf3122d0b219610680286a4790439 Mon Sep 17 00:00:00 2001 From: Lucas Bartholemy <luke-@users.noreply.github.com> Date: Fri, 11 Sep 2020 18:21:46 +0200 Subject: [PATCH 2/2] Update CHANGELOG.md --- protected/humhub/docs/CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/protected/humhub/docs/CHANGELOG.md b/protected/humhub/docs/CHANGELOG.md index 6af838418d..9d288d3e46 100644 --- a/protected/humhub/docs/CHANGELOG.md +++ b/protected/humhub/docs/CHANGELOG.md @@ -4,7 +4,7 @@ HumHub Changelog 1.6.4 (Unreleased) ------------------ - Fix #4361: Added missing nonce attribute in inline marketplace script -- Fix: Open file modal throws permission denied for unauthenticated users in guest mode +- Fix #4363: Open file modal throws permission denied for unauthenticated users in guest mode 1.6.3 (September 9, 2020)