From 840582cc11f83f0a652738197b080710ba5c247a Mon Sep 17 00:00:00 2001
From: Lucas Bartholemy <lucas@bartholemy.com>
Date: Fri, 11 Sep 2020 18:20:23 +0200
Subject: [PATCH 1/2] Fix: Open file modal throws permission denied for
unauthenticated users in guest mode
---
protected/humhub/docs/CHANGELOG.md | 1 +
protected/humhub/modules/file/controllers/ViewController.php | 2 +-
2 files changed, 2 insertions(+), 1 deletion(-)
diff --git a/protected/humhub/docs/CHANGELOG.md b/protected/humhub/docs/CHANGELOG.md
index 1cd6ff979b..6af838418d 100644
--- a/protected/humhub/docs/CHANGELOG.md
+++ b/protected/humhub/docs/CHANGELOG.md
@@ -4,6 +4,7 @@ HumHub Changelog
1.6.4 (Unreleased)
------------------
- Fix #4361: Added missing nonce attribute in inline marketplace script
+- Fix: Open file modal throws permission denied for unauthenticated users in guest mode
1.6.3 (September 9, 2020)
diff --git a/protected/humhub/modules/file/controllers/ViewController.php b/protected/humhub/modules/file/controllers/ViewController.php
index 873d9234c3..a26a892ea4 100644
--- a/protected/humhub/modules/file/controllers/ViewController.php
+++ b/protected/humhub/modules/file/controllers/ViewController.php
@@ -30,7 +30,7 @@ class ViewController extends \humhub\components\Controller
return [
'acl' => [
'class' => AccessControl::class,
- 'guestAllowedActions' => ['view']
+ 'guestAllowedActions' => ['index']
],
];
}
From 5923d8aa3fedf3122d0b219610680286a4790439 Mon Sep 17 00:00:00 2001
From: Lucas Bartholemy <luke-@users.noreply.github.com>
Date: Fri, 11 Sep 2020 18:21:46 +0200
Subject: [PATCH 2/2] Update CHANGELOG.md
---
protected/humhub/docs/CHANGELOG.md | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/protected/humhub/docs/CHANGELOG.md b/protected/humhub/docs/CHANGELOG.md
index 6af838418d..9d288d3e46 100644
--- a/protected/humhub/docs/CHANGELOG.md
+++ b/protected/humhub/docs/CHANGELOG.md
@@ -4,7 +4,7 @@ HumHub Changelog
1.6.4 (Unreleased)
------------------
- Fix #4361: Added missing nonce attribute in inline marketplace script
-- Fix: Open file modal throws permission denied for unauthenticated users in guest mode
+- Fix #4363: Open file modal throws permission denied for unauthenticated users in guest mode
1.6.3 (September 9, 2020)