RSS Feed/News Invalid permission check in \XFRM\Entity\ResourceItem::canTeamMemberBeAdded

Status
Not open for further replies.

ENXF NET

Administrator
Staff member
Administrator
Moderator
+Lifetime VIP+
S.V.I.P.S Member
S.V.I.P Member
V.I.P Member
Collaborate
Registered
Joined
Nov 13, 2018
Messages
23,473
Points
823

Reputation:

Line 418:
PHP:

Code:
        return $user->hasResourceCategoryPermission(
            $this->resource_category_id,
            'add'
        );

This permission check shouldn't be here, someone being a team member has nothing to do with them being able to post in a resource category.

Continue reading...
 
Status
Not open for further replies.
Top