From 840582cc11f83f0a652738197b080710ba5c247a Mon Sep 17 00:00:00 2001
From: Lucas Bartholemy <lucas@bartholemy.com>
Date: Fri, 11 Sep 2020 18:20:23 +0200
Subject: [PATCH 1/2] Fix: Open file modal throws permission denied for
 unauthenticated users in guest mode

---
 protected/humhub/docs/CHANGELOG.md                           | 1 +
 protected/humhub/modules/file/controllers/ViewController.php | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/protected/humhub/docs/CHANGELOG.md b/protected/humhub/docs/CHANGELOG.md
index 1cd6ff979b..6af838418d 100644
--- a/protected/humhub/docs/CHANGELOG.md
+++ b/protected/humhub/docs/CHANGELOG.md
@@ -4,6 +4,7 @@ HumHub Changelog
 1.6.4 (Unreleased)
 ------------------
 - Fix #4361: Added missing nonce attribute in inline marketplace script
+- Fix: Open file modal throws permission denied for unauthenticated users in guest mode
 
 
 1.6.3 (September 9, 2020)
diff --git a/protected/humhub/modules/file/controllers/ViewController.php b/protected/humhub/modules/file/controllers/ViewController.php
index 873d9234c3..a26a892ea4 100644
--- a/protected/humhub/modules/file/controllers/ViewController.php
+++ b/protected/humhub/modules/file/controllers/ViewController.php
@@ -30,7 +30,7 @@ class ViewController extends \humhub\components\Controller
         return [
             'acl' => [
                 'class' => AccessControl::class,
-                'guestAllowedActions' => ['view']
+                'guestAllowedActions' => ['index']
             ],
         ];
     }

From 5923d8aa3fedf3122d0b219610680286a4790439 Mon Sep 17 00:00:00 2001
From: Lucas Bartholemy <luke-@users.noreply.github.com>
Date: Fri, 11 Sep 2020 18:21:46 +0200
Subject: [PATCH 2/2] Update CHANGELOG.md

---
 protected/humhub/docs/CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/protected/humhub/docs/CHANGELOG.md b/protected/humhub/docs/CHANGELOG.md
index 6af838418d..9d288d3e46 100644
--- a/protected/humhub/docs/CHANGELOG.md
+++ b/protected/humhub/docs/CHANGELOG.md
@@ -4,7 +4,7 @@ HumHub Changelog
 1.6.4 (Unreleased)
 ------------------
 - Fix #4361: Added missing nonce attribute in inline marketplace script
-- Fix: Open file modal throws permission denied for unauthenticated users in guest mode
+- Fix #4363: Open file modal throws permission denied for unauthenticated users in guest mode
 
 
 1.6.3 (September 9, 2020)